last executing test programs: 2m1.374629817s ago: executing program 4 (id=155): socket$kcm(0x10, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="8fd6032e42e1e60450b9071516560313587d89775e2c6003f14df6c398e06562a2b66d5889b49ef24f109b56185fe4ef7327cc2a1001ac649e88e542bd46c73047aa0c69c6cafd2d06209a1103720653035021b9a38cd449a170507e71ab378f5cbfc782de67406a1e2e5cbce300dd022d5b6a15a0f8034d2aa27ec310f39e63aed7c573ea018eac8823f2a88f321eb6bf4455ff955a9549df0535bb0ec1", 0x9e}, {&(0x7f0000000100)="40a681186b2989387bf0ce05934b494def9ba167d3e9f367f8441a834772748ac2c33d2a623ffd7d4d9d041e5447b5b1c6181c26", 0x34}, {&(0x7f0000000600)="df37020000fb413a00aa45c368f6d341fd64b475b6632e58e9e878691ce1a8fa2fc7", 0x22}, {&(0x7f0000000340)="b4b001b898d182a5002b91abc22b77cd0924fd17882ee395b6fb7853f81d1de305f76452680ac35d8ae3e91d3efe9e27248ee86effbcd662d6ffccb475933470fd2c8e35e314b53dc1d643ceebde5ad58fe7df871d36ddc9", 0x58}, {&(0x7f00000003c0)="53cbea7694163a80b924c080cf1d34f3fcdf4e426e7fec8aac428f368543d235c53c8aab3df7e2d6a3df41c6aa18ff581c0f966bc884e17242cb94d7262f505eb922de891e19f30f3ba94edc3c9d10a55f2a53d735918c0838c2aa92ed", 0x5d}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x80}}], 0x1, 0x0) close(0x3) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2m1.265991032s ago: executing program 4 (id=158): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x4008010) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={r5, 0xfffffffc}, &(0x7f00000002c0)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000480)={[{@subsystem='perf_event'}]}) dup3(r7, r8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000150001032000"], 0x1c}}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r11, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040801}, 0x4000000) 2m1.189660616s ago: executing program 4 (id=159): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x18}, 0x0) (fail_nth: 7) 2m0.913501621s ago: executing program 4 (id=161): socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0xc84, 0x7ff}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x684}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) socket(0x10, 0x3, 0x0) ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000180)={0x5, 0x6, 0x3, 0x6, 0x4, 0x400}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000100100000b0000"], 0x28}, 0x20020000) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x220881f, &(0x7f00000000c0), 0x1, 0x511, &(0x7f0000000f00)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@deltfilter={0x3c, 0x2d, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {0x6, 0x1}, {0x4, 0x7}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0xba, 0x89}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x3c}}, 0x4048001) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='>E'], 0x4c}}, 0x4000015) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f2, &(0x7f0000000040)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0xfe, 0x0, 0xfe, 0x2, 0xef, 0x3, 0x5, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x6}, 0xe) shutdown(r2, 0x1) ioctl$SIOCGSTAMPNS(r2, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000000840), 0x0, 0x8142, 0x0) ptrace(0x10, r1) r3 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) ptrace$setregs(0xd, r1, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r1, 0x80000001, 0x4) 2m0.013817208s ago: executing program 4 (id=168): socket$kcm(0x10, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="8fd6032e42e1e60450b9071516560313587d89775e2c6003f14df6c398e06562a2b66d5889b49ef24f109b56185fe4ef7327cc2a1001ac649e88e542bd46c73047aa0c69c6cafd2d06209a1103720653035021b9a38cd449a170507e71ab378f5cbfc782de67406a1e2e5cbce300dd022d5b6a15a0f8034d2aa27ec310f39e63aed7c573ea018eac8823f2a88f321eb6bf4455ff955a9549df0535bb0ec1", 0x9e}, {&(0x7f0000000100)="40a681186b2989387bf0ce05934b494def9ba167d3e9f367f8441a834772748ac2c33d2a623ffd7d4d9d041e5447b5b1c6181c26", 0x34}, {&(0x7f0000000600)="df37020000fb413a00aa45c368f6d341fd64b475b6632e58e9e878691ce1a8fa2fc7", 0x22}, {&(0x7f0000000340)="b4b001b898d182a5002b91abc22b77cd0924fd17882ee395b6fb7853f81d1de305f76452680ac35d8ae3e91d3efe9e27248ee86effbcd662d6ffccb475933470fd2c8e35e314b53dc1d643ceebde5ad58fe7df871d36ddc9", 0x58}, {&(0x7f00000003c0)="53cbea7694163a80b924c080cf1d34f3fcdf4e426e7fec8aac428f368543d235c53c8aab3df7e2d6a3df41c6aa18ff581c0f966bc884e17242cb94d7262f505eb922de891e19f30f3ba94edc3c9d10a55f2a53d735918c0838c2aa92ed", 0x5d}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x80}}], 0x1, 0x0) close(0x3) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1m59.630727287s ago: executing program 4 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x80, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000000700a802d379fe317c39f3800800bb9d048e8079"], 0x24}}, 0x4000040) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x8087}, 0x40048001) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb"], 0x0, 0x58, 0x0, 0xa}, 0x28) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="2000000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01100f01000000000100000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) connect$unix(r6, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000003c0)=0x3) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x400141042, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0xfaa8, 0x3fe, 0x9, 0x8, 0x101}) (async) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 1m59.629898898s ago: executing program 32 (id=173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x18) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x80, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="240000000700a802d379fe317c39f3800800bb9d048e8079"], 0x24}}, 0x4000040) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r2) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @local}]}, 0x24}, 0x1, 0x0, 0x0, 0x8087}, 0x40048001) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb"], 0x0, 0x58, 0x0, 0xa}, 0x28) (async) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="2000000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01100f01000000000100000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40}, 0x94) connect$unix(r6, 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f00000003c0)=0x3) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x400141042, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000002c0)={0xfaa8, 0x3fe, 0x9, 0x8, 0x101}) (async) add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffe) 4.415560931s ago: executing program 5 (id=1393): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x5, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r2, 0x5, 0x2, 0x8, 0x6}) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x0, 0x43, 0xa0, 0x90, 0x98, 0x1d0, 0x178, 0x178, 0x1d0, 0x178, 0x49, 0x0, {[{{@uncond, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@connmark={{0x30}, {0x6, 0x80, 0x1}}, @common=@unspec=@connbytes={{0x38}, {[{0x7bb}, {0x7}], 0x2, 0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x14, 0x6, 0x7ffffffe, 0x8363, 'netbios-ns\x00', 'syz1\x00', {0x7ff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) setregid(0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r6, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r8}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r8, &(0x7f00000005c0)}, 0x20) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f00000003c0)=@ethtool_drvinfo={0x3, "2feaa9a63f2afbf47296c37839403c06189d3fbcb146a3d3bff9c677f161e295", "650867d5730f6c46f73b76d58c41a97504e472f6a94ffb5a578fb9cb2f528228", "953c5d11d103b221ac3c36ad5851d19cd9f7e2822b1ec24300", "aa0d0686feef9ac67ebedf78380b9ad4831d09048571a4f30888583f6bd27438", "0e1afe5a955e716060a2a862aa8bcffa425cbdd9c1c9f61f37d532af6a24faf3", "621b337898050ccb55da600b", 0x1, 0xc, 0x8, 0x8, 0x6}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pipe(&(0x7f00000000c0)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f00008dc000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x16b0, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10, 0x6}, {0xfff2, 0x3}, {0xfff2, 0x2}}}, 0x24}}, 0x0) 3.382549735s ago: executing program 0 (id=1402): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) socket$unix(0x1, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './bus\x00'}, 0xfe4a) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="020000009eddd9b3f440b9", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x14, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000850000000c000000bf9800000000000056090000000000008500000084000000b70000000000000095000000000000006a9f121c1e1b1c712f5d32f5a7bfb6f0787817032d44b0c29972918fa8bd6d113245231e1b9cddea98bbc324e1c5242c775b717ac52b2e4a63eaf17c588e75"], &(0x7f0000000980)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="1e000000000000000700"], 0x50) connect$pppoe(0xffffffffffffffff, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000004a0000000200a010100000000000000000a0000000900020073797a30000000000900010073795731000000000900020073797a31000000000900020073797a3100000000240003800800024000000003080001400000000008000240000000000800024000007fff0900010073797a31ba47ac"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r9 = fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 3.241044502s ago: executing program 1 (id=1404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'netdevsim0\x00', 0xc201}) fsopen(0x0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x8, 0xa8, {}, 0x2000000000001005, 0x6}}}, 0xfc36) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x2, @remote, 0x9}, {0xa, 0x4e20, 0xf25, @remote, 0xfff}, r5, 0x5}}, 0x48) r6 = openat$cgroup_type(r4, &(0x7f00000001c0), 0x2, 0x0) sendfile(r1, r6, 0x0, 0x4000000000000006) r7 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf34f181b4054890e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100200, 0x0, 0x20, 0x0, 0xfffffffffffffffd, 0x6, 0x10, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000780)="05002f", 0x3}, 0x38) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r10, &(0x7f0000000740)=ANY=[@ANYBLOB="1e030a004d8c71ef268563"], 0xffdd) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000500)="580000001400192340834b80043f679a10ff3d425f85b4141691c148c61bcdf1e4220000000001008048244a48fb6cfbe939ca28f23457e792945f64009400050028925aaa000000c600480000000000feff2c707f8f00ff", 0x58}], 0x1) setresuid(0x0, 0x0, 0xee01) 1.833814075s ago: executing program 0 (id=1405): socket$kcm(0x2, 0x922000000001, 0x106) syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32, @ANYBLOB="80007e0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x100}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.831353495s ago: executing program 3 (id=1406): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0xd0, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x2, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x75, 0x8381) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000000)={0x1, 0x1}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="180800001bc81a00000000000000000128860c00fcffffff18000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000800000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000fd3432290e724f73ea2c1f4b531979b894d81a15bb1085711db420353d7b055c8f8c659fce1c8fd073ede7aaeb659a50"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) ptrace(0x420e, r0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/keycreate\x00', 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000ffdb000000000000a60a8a3f", @ANYRESHEX=r3, @ANYBLOB="080003006200000008000e0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8854}, 0x400801c) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000010900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000648000000180a0101000b000000000000010000000900010073797a30000000001c000380180003801400010069703665727370616e300000000000000900020073797a3000000000140000001000010000000000000100000000000a296070660de9d99185290abc60e66dd9cbe147cda7b44992d18aada7ab906232fa720c73e56f85c726d74f275b06c12985595b5a15f48d38a75c3b35ef409fb3c949ba0b76278605fdf40d8567fec447a9929660ee05a4a4df357708a6f3b76ceaafde76e70a5b6187cd0c76529b881c5785e56bec8b317ec25b79b9be9659698fb8dada0f1dffc33f81fc95c94fcd6c6f90de64c98749599a2d44389b2b08d6621ae0e21d9b180b8b986da3dac6e539e597a8012dc27a1cdde7c29d78488dd55446ba51dfd5f7fd2c71fbdd591650b13eb43ee1007a42c266f8846702bca92437eeaef667af7bb6af81b7143c697a73e3d1dbaa0b03bf928d"], 0xd0}}, 0x4051) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg$inet6(r8, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000290000003700000089000000000004b2edfe6db49da30000290000000b00000000000004000000001cd50a1fbc7a7ea7647470325bd72de11223749095ae951e9ea328e08c324f8a08e05134a5c97b1de40a77c6b33ba53d8f06c00f5ca1ddcd9d39f2d29a17c5add5c62bcc318fdb3981b5b465951556fca3367f0666a75da2490ac8c7b9e1c271aa7089a386ae3e6aa1ce5228e21a226ceb11ff0e769ee92c6574ebe251963c0f6157b1af491ba54b3524914453f6efa9a1a453af36d784651a612b1190573d6dd6a6dc79ee074c9d8015770f9f4ccdfd168d76b66f41bf40"], 0x30}}], 0x1, 0x400c0c4) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001900)=ANY=[@ANYRES16=r0], 0x9c}}, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x781c42, 0x0) read(r9, &(0x7f0000000040)=""/148, 0xffffff96) syz_open_procfs(r0, &(0x7f0000000300)='net/rfcomm\x00') 1.765193849s ago: executing program 5 (id=1407): setuid(0xee01) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x6, 0x3ff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008032, r0, 0x4ba9c000) syz_clone(0x20000000, 0x0, 0xf, 0x0, 0x0, 0x0) 1.764352839s ago: executing program 2 (id=1408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x0, 0x1, 0x0, 0x0, 0xff80, 0x0, 0x0, 0xad}, {@in=@remote, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x23}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0xfffffffe, 0xfffffffc, 0x0, 0x2}}]}, 0x154}}, 0x0) 1.674585223s ago: executing program 5 (id=1409): mount$tmpfs(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000001c0), 0x800004, &(0x7f0000000400)=ANY=[@ANYBLOB="73697a653d70342c006f26766334fe5c7bbda0df30ab2438195f2e1ae7fdcd07eddb7fbb3152ff66ec7f303671f26ca3b429f661b1641f157a4cfee7cefb2aae567333d9d6b16e72775e3f32235588fa5f"]) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mknodat$loop(0xffffffffffffffff, 0x0, 0x10, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='pids.events\x00', 0x26e1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000c00)=""/186, 0xba, 0xe0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0xa05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x3, @perf_config_ext={0xd8e5, 0x4}, 0x108220, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010600000000000000000900e7b7007be70004801300010062da856164636173572d6c696e6b00000c00078008000500060018b9335f0e2368050bee86c20d80805070cba9d03dc3d48f587761325652fff6abb78a9cad2c785fa247ed4ff4619723cdb397df7fb1e8b46f2b7f15f5ee82eba084420fb3aa75bd4a17b3bdd1beb4f68e07591958aa2ae81605"], 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) sendmsg$nl_route(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)=ANY=[@ANYBLOB="85000000550001002cbd0d10468d44d9e54027a9c9b7458ce63e2fac89ea0df1e0b9064e3b33071fac2a64cf8214edf19f5d3903a54f5969622dc7c3e2e59e2a60314e708b725b68615c4710200c624ac739d28b88707ae325386956ccb59354622daaacd493c3868c7db9e386784cb2e32127a39665d9f9c4c7a761573ca2e8", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="01030400000000000000000000000000000000000800000020000100", @ANYRES32=r6, @ANYBLOB="01030200e000000200"/24], 0x58}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000002000/0x2000)=nil) r9 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto(r9, &(0x7f0000000680)="90e6f81850530f3b462c0437652584b9f4f24ef2d9ccee24574e9c61db6d374ff9a1d7c74dabbe395747d571ebff27653328a81a481c1ae7eedd77d323a252f0b32e27b41ed09d07b02d255cd88d37a7cb59b02872d39db73dcf228181056ba138c11b4eec4d1b41667d08fe6add50b88255de8ec092f004ef528d26c82ddbfc7194c6a3ddc5ae1b98c16a1a5d784570f464a2e34b56", 0x96, 0x0, &(0x7f0000000740)=@ethernet={0x1, @broadcast}, 0x80) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1a00801, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=iso8853-5,check=strict,session=0x0000000000000033,overriderockperm,map=off,iocharset=cp850,nocompress,nojoliet,dmode=0x0000000000000008,norock,mode=0x0000000000000f10,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6d61703d6e6f726d616c2c007ee2282ea04703e8a1c2e3f6e2c4e05f1ba94796def398358a18e267947a3238dea5ff5be4cd79956395d818ac11982e007b6347785707c1cd167c78460955c9d65ab2f1144896dcab7ef6ab87eb2a34b7ecd0e461ad98431f9c6ae7aa139872baa11bae06c99f3277edaa2b28b9a0b78d"], 0x0, 0x42e, &(0x7f0000000d40)="$eJzs3M9OG0ccwPFZYhOHSqhS1PAnHCZNK9FDnPVSjFAu3a7HZpL17mp3HcGpigpEqECqkkqFS8MlbaX2CXrKtW/QSx+jT9GofQOq/WNqsA0IME6T70dCM/b+duY3o9WO1mhWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYTg106wYwtVea1n259RCv9nrwMfbadFu78MjxQn9CmEkf6JUEpPZV5M3/zv8QdbIRPZpQpSSoiT23rv1/oObhZH2+SckfCV2dvee/Z7leKb4wj8HqYEndkUaytORr5t2Q0kd+XKxWjXvL9UjWdeuilaiWDWlEyo79kM563wiK4uLc1KVV/yW16jZrmp/uXDPMs2qfFgOlB1Gvnf/YTlylrTraq+RxiSHk5iF5EJ8pGMZK7sp5frG5trcaUkmQZUTjhtCvEiDrNNaskzLqlQsq1KdX5xfMM2CZVryyBfmMaLrlPSiLZ71gsHb5zJv38CFHOTrf6fS0LIBAAAAAACDYKS/sSfP/8X0d3hD1LWrzGGnBQAAAAAALlH6n/+JpCgmtUlh8PwPAAAAAMDb5sfOPXY3eu2xi4Lrxh9/izAsGvvB8kfGlp2E21uikJ537ViDnwkhjPG8kbSoFvJPjpoxprKoqXb467xYP22vn9GVQN7z8QSyHXYH3/dIQPwsprOg6dWsXG0fyXoZq2tXlR3ffVARtj0+Eqvl+Nvtje9EOvyfvOa4IdY3NtfKXz7bXE1z2U9a2d/KN1AYx6c3rk/3mQzx/HDfY+8Rj+ZNpP2OZf2aneMfyY6PdPc5Jfr0+VLczmJuj2Xl2NHxl5LxV8r9Rp9nUbngyF+KmSxmZvZuUtyd7ZGFdTSLX7uysDqz6D8X58yimDfQey7+Osxi7oJZAMCwrJ+yChndC/857nKXt7qffEe/k8XcmU5vrIXpHuuKedrqZp5xdWtndjyL37regdBvjU36/cVrlkeFOFxVXyUnvOrbb+RaRjKF155vfS1u7ezu3dvYevJ07enatmXNVc1PTXPeEsV0GHnRZ77Y4wkA7zYVvjbG4h+MMNTBF5XRxYodLykZ+s4jGepaQ0ntxSp0lmyvoWQQ+rHv+G5SeaxrKpJRKwj8MJZ1P5SBH+nl9M0vMn/1S6SathdrJwpcZUdKOr4X204sazpyZND63NXRkgrTk6NAObquHTvWvicjvxU6qixlpFRHoK4pL9Z1nVQ9GYS6aYcr8rHvtppK1lTkhFr/mb9hp92X9up+2EybLQ97sgEAeEPs7O599WRzc+2bAVbS59gXwx4pAABo61ylAQAAAAAAAAAAAAAAAAAAAADAm2lA2/5Kg9tQaAghBrVV8cYV7IbMKtcH3wWV/1tl9LwX9kFWMcQl5jPsOxOAQfs3AAD//3RaqlU=") getdents64(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) getsockopt$netlink(r1, 0x10e, 0x2, &(0x7f0000000300)=""/149, &(0x7f00000003c0)=0x95) preadv(r1, 0x0, 0xfffffffffffffe4f, 0x17, 0xfffffff9) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x20009004) close(r2) 1.666592933s ago: executing program 2 (id=1410): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") (async) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x20005, 0x8b, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4040, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@restrict={0x2, 0x0, 0x0, 0xb, 0x2}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xa, 0x1}, {0x10, 0x4}, {0x3, 0x5}, {0xd, 0x1}, {0xf, 0x1}]}, @enum={0x2, 0x4, 0x0, 0x6, 0x4, [{0xc, 0x4}, {0x3, 0x7fffffff}, {0x7}, {0x8, 0x540}]}]}, {0x0, [0x2e, 0x5f, 0x5f, 0x61, 0x61]}}, &(0x7f0000000180)=""/69, 0x97, 0x45, 0x0, 0x8000000, 0x10000}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x2, 0x7, 0x1, 0x0, 0x2, 0x0, 0x70bd2b, 0x25dfdbfe}, 0x10}}, 0x0) syz_usb_connect(0x5, 0x84, 0x0, 0x0) unshare(0x60000600) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) memfd_create(0x0, 0x1) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0xff2e) r7 = syz_open_pts(r6, 0x8182) r8 = dup3(r7, r6, 0x0) ioctl$TCFLSH(r8, 0x540b, 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000380), &(0x7f00000000c0)}, 0x20) fsetxattr$security_capability(r0, &(0x7f0000000e00), &(0x7f0000000e40)=@v3={0x3000000, [{0x8, 0x1000}, {0xff8, 0x3}]}, 0x18, 0x0) fchown(r0, 0x0, 0xee01) 1.573351338s ago: executing program 5 (id=1411): syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f0000001440)={[{@nodots}, {@fat=@errors_continue}, {@fat=@uid}, {@nodots}, {@fat=@nfs_stale_rw}, {@fat=@nocase}, {@dots}, {@fat=@uid}, {@nodots}, {@nodots}, {@nodots}]}, 0x1, 0x25f, &(0x7f0000000140)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000700)={r1, 0x0, 0x0}, 0x20) close(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03700000000060007538e486dd630ace2200102f00fe8000000000ff00875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 1.454797404s ago: executing program 0 (id=1412): setfsgid(0xee01) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='smaps_rollup\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='hostfs\x00', 0x804014, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0xfe, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x8, 0x8001}, 0x10536, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x2c040480) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x9, 0x0, 0x6, 0x0, 0x0, 0xcf24, 0x208, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffb, 0x2, @perf_bp={0x0, 0x9}, 0x1, 0x2, 0xb3, 0x4, 0xdbbe, 0x8001, 0xe3, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xa, r2, 0xa) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYRES8=r1, @ANYRES16=r1, @ANYRES32], 0xffdd) r3 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES8], 0x3, 0x239, &(0x7f0000000e00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1d}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x4000190, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ldst={0x2, 0x2, 0x3, 0x9, 0x0, 0x20}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f00000006c0)={0x0, 0xffffffffffffffff, 0x843a}) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) r8 = syz_open_procfs(r3, &(0x7f0000000140)='stack\x00') pread64(r8, &(0x7f0000000100)=""/45, 0x2d, 0x40000000009) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = dup(r9) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000003060500000000000000000001ffffe60500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) ioctl$PPPIOCSMRU(r10, 0x40047452, &(0x7f0000000000)=0x81) 1.384515048s ago: executing program 1 (id=1413): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000d00e5000000000000100400000000000000000000090300000000009ab3d44f000000"], 0x0, 0x52}, 0x20) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000000)="ea", 0x1) write(r2, &(0x7f00000002c0)="04", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x39, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000800000000008000000000000800", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000004c0)='syzkaller\x00', 0x8001, 0xbb, &(0x7f0000000ec0)=""/187, 0x41000, 0x1, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000c80)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0x1, 0x1, 0x1, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1000}, 0x94) setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, &(0x7f0000000dc0)='net/rt_acct\x00') ftruncate(0xffffffffffffffff, 0x7fffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @empty, 0x10080bff}, @ib={0x1b, 0x1000, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x7ffffffffffffffe, 0x7, 0x4}}}, 0x118) 1.384084858s ago: executing program 1 (id=1414): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x2}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0xf3a, 0x0) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x5, 0x1, 0x4, 0xaf3}, {0x10, 0x1, 0xe, 0x2}, {0x86d9, 0xba, 0x4, 0x6}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0xe, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000040)={0xa0000008}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) 1.314628552s ago: executing program 5 (id=1415): sched_setscheduler(0x0, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4004001}, 0x20044890) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) process_vm_writev(0x0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/229, 0xe5}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000000340)=""/130, 0x82}, {&(0x7f0000000400)=""/4, 0x4}], 0x5, &(0x7f0000000700)=[{&(0x7f00000004c0)=""/240, 0xf0}, {&(0x7f00000005c0)=""/188, 0xbc}, {&(0x7f0000000680)=""/79, 0x4f}], 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0xfc4, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r2 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, r2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x12}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4050}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x25, 0x1, 0x0, 0x8, 0x0, 0x5, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.207618087s ago: executing program 0 (id=1416): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x8000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x25dfdbff, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r4, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYRES64=r2, @ANYRES8=r1, @ANYRESHEX, @ANYRESDEC=r3, @ANYRES64=r4], 0x0, 0x32, 0x0, 0x0, 0x7}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20004055) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vlan0\x00', 0x0}) sendmmsg$inet(r4, &(0x7f00000006c0)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000280)="f92cf409c0196f87dbd59b725e55471609bc1bd109b3746b81e92c91c3c47abd75658a1fbbd50a45b54cfa9ebad3d5a9caea067199c71fe622147b2600bffb66ac096994b771f3a98a026ddd90bda1e954b2383812822c7eb7221809a71af2cd6eeae388ddf4bb6b4ea37ad1be1715c35ab7c617532b8f4a780fe1466ded1c5a4c26a76291befa1c3158815e92051a68a20177a8f5d8b6775ec7769221956a587c5dac511c2c270b80567d472d8433c22b7502ab0309947894907599815f", 0xbe}], 0x1, &(0x7f00000005c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_retopts={{0x34, 0x0, 0x7, {[@end, @lsrr={0x83, 0x7, 0x1c, [@private=0xa010101]}, @timestamp_addr={0x44, 0xc, 0xfc, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @noop, @timestamp={0x44, 0x4, 0xe6, 0x0, 0x4}, @ssrr={0x89, 0xb, 0xe1, [@remote, @loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x38, 0x0, 0x7, {[@rr={0x7, 0x27, 0xe8, [@multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x11}, @local, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x31}, @local, @broadcast]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0xe0}}], 0x1, 0x40805) waitid(0x0, r5, 0x0, 0x61000006, 0x0) 1.070512405s ago: executing program 2 (id=1417): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="300000001a0001000000000000000000810080000000000000000000140002"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0x501, 0x70bd2a, 0x25dfdbfc, {0x2, 0x14, 0x0, 0x9, 0x6a}}, 0x1c}, 0x1, 0x0, 0x0, 0x4048004}, 0x0) 1.043469856s ago: executing program 0 (id=1418): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r1, &(0x7f0000000600)=[{{&(0x7f0000000040)=@ax25={{0x3, @default}, [@remote, @remote, @null, @netrom, @rose, @default, @null, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000680)=""/120, 0x78}, {&(0x7f0000000180)=""/77, 0x4d}, {&(0x7f0000000100)=""/81}], 0x19, &(0x7f0000000280)=""/189, 0xbd}, 0x6}, {{&(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000000540), 0x4, &(0x7f0000000580)=""/107, 0x6b}, 0x9}], 0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="a800028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004"], 0xc4}, 0x1, 0x0, 0x0, 0x44090}, 0x2404c080) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) 1.013701287s ago: executing program 2 (id=1419): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x9, 0x28, 0xffffffffffffffff, 0x2000000}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x0, 0x4c, 0x1a, 0x180, 0x73, 0x328, 0x258, 0x258, 0x328, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x3}}, @common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x23, 0x3, 0x2, 0x3, 'syz1\x00', 'syz0\x00', {0x2}}}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x2e, 0x8, 0xfb, 0x87, 0x3, @remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0x0, 0xffffff00], [0x8982e4c132e3b466, 0xffffffff, 0xffffff00, 0xff000000], [0xffffff00, 0x0, 0xff000000, 0xffffff00], 0x3420, 0x108}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x458) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='illinois', 0x8) socketpair(0x1e, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) r8 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r7, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r8, 0x1}, 0x20) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000100)) r9 = syz_io_uring_complete(0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) r11 = socket(0xa, 0x5, 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000000140)={0x6, 0x202, 0xfffffffa, 0x8, r13}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f00000001c0)={r13, 0x80000001}, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) 865.599195ms ago: executing program 2 (id=1420): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32], 0x28}}, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0x8, 0x14740, 0x20b, 0x831a, 0x0, "030000f9ffffff000800feffff8214ff012000", 0x808, 0x80000001}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x1) 864.106275ms ago: executing program 3 (id=1421): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8440) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8, 0xf2]) r1 = inotify_init1(0x4ddac6685359b188) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x4) pwrite64(r0, &(0x7f00000000c0)="b8ba56e191a3831742e51aca496757cdba1468a4eaf1690af7975916db1514a1725fe0a8e9187a13ca64f0fdef0801997afe4ae7798e3a93d9c1f217fb670d03b87cc7eb8c188b8439ee19d8b6df9540dfba5686c0c9f129805180784958f35132b922017cca7698132746a0ed78ec65ca6e9716ee9d27d7e21d7db877d3279205bf8b17aa47fddf", 0x88, 0x7) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x4000048}, 0x20000880) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x503140, 0x8, 0x10}, 0x18) mknodat$null(r4, &(0x7f00000002c0)='./file0\x00', 0x10, 0x103) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x7c, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x16, 0x14, '/dev/input/event#\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x15, 0x14, '/dev/virtual_nci\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x15, 0x14, '/dev/virtual_nci\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000500)='/dev/input/event#\x00', &(0x7f0000000540)="ee034bdbf324710eaeb60870a4742003207f3f53f7b8e18c72e3fcfbf79e4195f795b71d03d1b3d34ff2f7180936c2e50c8672503e7793", 0x37) fcntl$getownex(r4, 0x10, &(0x7f0000000580)={0x0, 0x0}) migrate_pages(r8, 0x9, &(0x7f00000005c0), &(0x7f0000000600)=0x8000000000000000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r9, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x80, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:iptables_conf_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x80}, 0x1, 0x0, 0x0, 0x5da6687f0e5c8c1b}, 0x20000000) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x282080, 0x0) write$binfmt_register(r10, &(0x7f00000007c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '+', 0x3a, '/dev/input/event#\x00', 0x3a, './file0', 0x3a, [0x4f, 0x43, 0x4f, 0x46]}, 0x3e) ioctl$HIDIOCAPPLICATION(r10, 0x4802, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, 0xffffffffffffffff) accept4$llc(r10, &(0x7f0000000800)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000840)=0x10, 0x800) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000880)={0x0, 0xd0, "0b8f57a57eb257cc9348fbbc2d232be86342c0fada3330fe816a68503951640f43735b04e34f67759542597aaf926d9296d751e083faa8c1ab823d59f32d9dc3f8ac8dfe52ab951c72344a3fc7e3e3f773e45dd856e503d163e5dc0d8cd9e6506dfe3321f9e3ac99b9f7c420b4d9f2570632de8fcfdf9f00d6735b1b5a55f2e792862efc0862648b0e07334aef67728b810307edfd5e58d6f44b36b85caca702d900e675afccbbf9168dafc7d42d64241292b161b7bd6f034438a641de2b5bee88fd6c8e0927cbeb9bcccf62ef70d0ca"}) syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r9) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000a00), r10) sendmsg$L2TP_CMD_SESSION_MODIFY(r11, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, r12, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xe3}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4840}, 0x20004080) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000b40)=@sg0, 0x0, &(0x7f0000000bc0)='./file0\x00') 853.628406ms ago: executing program 0 (id=1422): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) recvmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/25, 0x19}], 0x1, &(0x7f0000000540)=""/114, 0x72}}, {{&(0x7f0000000640)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000700)=""/238, 0xee}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000980)=""/213, 0xd5}, {&(0x7f0000000a80)=""/177, 0xb1}, {&(0x7f0000000b40)=""/93, 0x5d}, {&(0x7f0000000bc0)=""/243, 0xf3}], 0x6, &(0x7f0000000d40)=""/150, 0x96}, 0x3c3f}, {{&(0x7f0000000e00)=@l2tp, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e80)=""/244, 0xf4}, {&(0x7f0000000f80)=""/236, 0xec}, {&(0x7f0000001080)=""/45, 0x2d}, {&(0x7f00000010c0)=""/247, 0xf7}], 0x4}, 0x5}, {{&(0x7f0000001200)=@isdn, 0x80, &(0x7f0000002580)=[{&(0x7f0000001280)=""/238, 0xee}, {&(0x7f0000001380)=""/211, 0xd3}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/149, 0x95}, {&(0x7f0000002540)=""/53, 0x35}], 0x5, &(0x7f0000002600)=""/177, 0xb1}, 0x43}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000026c0)=""/228, 0xe4}, {&(0x7f00000027c0)=""/59, 0x3b}, {&(0x7f0000002800)=""/95, 0x5f}, {&(0x7f0000002880)=""/86, 0x56}], 0x4, &(0x7f0000002940)=""/80, 0x50}, 0xc39}, {{&(0x7f00000029c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/244, 0xf4}, {&(0x7f0000003b40)=""/255, 0xff}, {&(0x7f0000003c40)=""/44, 0x2c}, {&(0x7f0000003c80)=""/131, 0x83}], 0x5, &(0x7f0000003dc0)=""/151, 0x97}}], 0x6, 0x100, &(0x7f0000004040)) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004140)=@delchain={0x94, 0x64, 0xf31, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0xffe0, 0xc}, {0x10, 0xffff}, {0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @remote}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffff00, 0xffffffff, 0xff000000]}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0xffffffff, 0x0, 0xfffffe01]}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @loopback}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x2}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x12}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x6}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast1}]}}]}, 0x94}}, 0x4040004) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x44, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r9, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xb, 0x7}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 750.307011ms ago: executing program 3 (id=1423): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000000000009c000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000080)) r0 = syz_open_dev$loop(0x0, 0x100, 0x2) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000)) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000dc0)=@newtaction={0x278, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x264, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x7, 0x10000000, 0x200000, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x94, 0xc, 0x0, 0x0, {{0xc}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xe4e, 0x3, 0x4, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0xc}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}]}, {0xf, 0x6, "1abf842170b99b2d385cd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x160, 0x2, 0x0, 0x0, {{0x8}, {0xa8, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7b84, 0xffffffffffffffff, 0x0, 0x4000}, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x696}, @IFE_META_PRIO={0x8, 0x3, @val=0x6}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xc9}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0x100000, 0x4, 0x6, 0x3}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xd, 0x2, 0x1, 0x4}, 0x1}}]}, {0x92, 0x6, "0745eda98a44af97ae46a19127d038c5123f3cb17331ff9148552ed3e66c1ec3da02b7f8bf5c416577450e40e13f05636db4c6ad1b3b41745844ead184f6931b6094c2079d7cfc0e3261b4596fbfbc0d19da37719c7dae4fc8e453fa633c7fd941086e3a72eaace8b91ccace63675f74944e81a9c807e2e4fbfbfd06a5fa8083ba3da79908908e58145dc1ca9b47"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x20048840}, 0x1004) select(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xf, 0x0, 0x42, 0x5c}) 461.991986ms ago: executing program 3 (id=1424): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'veth0\x00', @broadcast}) 246.563637ms ago: executing program 3 (id=1425): socket$kcm(0x10, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="8fd6032e42e1e60450b9071516560313587d89775e2c6003f14df6c398e06562a2b66d5889b49ef24f109b56185fe4ef7327cc2a1001ac649e88e542bd46c73047aa0c69c6cafd2d06209a1103720653035021b9a38cd449a170507e71ab378f5cbfc782de67406a1e2e5cbce300dd022d5b6a15a0f8034d2aa27ec310f39e63aed7c573ea018eac8823f2a88f321eb6bf4455ff955a9549df0535bb0ec1d34e7f65c44ad173e835f65c2347e008c9289f3e39612f28495ad51bc23c63ae4ffdfeb6f905d5d7b86058f246f05740e2adf845", 0xd2}, {&(0x7f0000000100)="40a681186b2989387bf0ce05934b494def9ba167d3e9f367f8441a834772748ac2c33d2a623ffd7d4d9d041e5447b5b1c6181c26", 0x34}, {&(0x7f0000000600)="df37020000fb413a00aa45c368f6d341fd64b475b6632e58e9e878691ce1a8fa2fc7", 0x22}, {&(0x7f0000000340)="b4b001b898d182a5002b91abc22b77cd0924fd17882ee395b6fb7853f81d1de305f76452680ac35d8ae3e91d3efe9e27248ee86effbcd662d6ffccb475933470fd2c8e35e314b53dc1d643ceebde5ad58fe7df871d36ddc9", 0x58}, {&(0x7f00000003c0)="53cbea7694163a80b924c080cf1d34f3fcdf4e426e7fec8aac428f368543d235c53c8aab3df7e2d6a3df41c6aa18ff581c0f966bc884e17242cb94d7262f505eb922de891e19f30f3ba94edc3c9d10a55f2a53d735918c0838c2aa92ed", 0x5d}], 0x5, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x80}}], 0x1, 0x0) close(0x3) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 211.098079ms ago: executing program 1 (id=1426): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0xa, 0x1, 0x7, 0x3}]}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000080)) 177.686021ms ago: executing program 5 (id=1427): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) fchdir(r0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x4c04, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2}, &(0x7f0000000300), &(0x7f0000000280)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f00000005c0)={@remote, @random="001a00e100", @void, {@mpls_uc={0x8847, {[], @llc={@llc={0x42, 0xaa, "d4"}}}}}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fe02fe02e8fe50a10a000700250000000c600e41b0000900ac00080325000000160015000a00f6150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x0) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) lstat(0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 126.794733ms ago: executing program 3 (id=1428): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x1010341, &(0x7f0000000080), 0x4, 0x49b, &(0x7f0000000f00)="$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") r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x2005, 0x0, 0x6, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xed}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x2000011a, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES64=r3, @ANYRES8=r1, @ANYRES8=r1, @ANYRES32=r2, @ANYRES64=r4, @ANYRES32, @ANYRESOCT=r4], &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, @sched_cls=0x37, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000240)=ANY=[@ANYRESDEC=r5], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r7, 0x0, 0x10, 0x24048048, &(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0x4}, 0x1c) getsockopt$inet_int(r7, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000280)=0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x5, 0xfe, 0x0, 0x100000000, 0x7d040, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x40000100, 0x415}, 0x16766, 0x10000, 0xa, 0x5, 0x8, 0x3, 0x7ff, 0x0, 0x0, 0x0, 0x8000000000000001}, r8, 0xfffffffffffffffe, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000e0f000/0x2000)=nil, 0x2000, 0x300000b, 0x31, 0xffffffffffffffff, 0x7ba11000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x9, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r9) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40d8e40400000021725c1e68f800", @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000fe4dc673cc319c52200100020000001c000000515044ca51000000000000002782289b87adf22105f40777af9d810fd777617d38ad9a8276d27e309a74d5cbb23d104d60f1d315068f9e9a94abb76524a367f8ed9e3591ae19e200675b1fe3897cb4c507b05c9b43c9e66d2cd4c013d3278e9c3ab5"], 0x40}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) eventfd(0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) 104.580115ms ago: executing program 1 (id=1429): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xb}, {0xfff1, 0xffff}, {0xfff2, 0xd}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000010) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f00000004c0)=""/132, 0x84, 0x0, &(0x7f0000000580)=""/221, 0xdd}}, 0x10) r10 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000bf0300000000000085000000a4000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0xb, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x0, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x900000}]}, &(0x7f0000000300)='GPL\x00', 0x6e, 0xb4, &(0x7f0000000340)=""/180, 0x41100, 0x43, '\x00', r7, @fallback=0x11, r8, 0x8, &(0x7f0000000440)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x4, 0x5, 0x6}, 0x10, r9, r10, 0x4, &(0x7f0000000740)=[r11, 0xffffffffffffffff], &(0x7f0000000780)=[{0x3, 0x4, 0x6, 0x3}, {0x0, 0x4, 0x8, 0x9}, {0x1, 0x2, 0x8, 0x2}, {0x3, 0x5, 0xa, 0x4}], 0x10, 0x2}, 0x94) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x8b) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0x501, 0x70bd2a, 0x25dfdbfc, {0x2, 0x14, 0x0, 0x9, 0x6a}}, 0x1c}, 0x1, 0x0, 0x0, 0x4048004}, 0x0) 63.946327ms ago: executing program 1 (id=1430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r3, 0x8926, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=r3, @ANYBLOB="050427bd7000fedbdf25010000ff03000000071fc2e7daa5fe6118aaf9e22a375d5c3e0be966741c41a38c80697477f9a4c29cb0a1b3c37975a02e3d87bfceaa11c24856d666fe4ec71cee9d9f542571f5d58dcd5e4ce6973b9193fc92b00a4043d61546906004a05158d41f6ebbc451fdb8ec87d9c6f9ff86bce93c24c7bab4b2d857ee29e1c3f9cffae306b71439d9ff3a3cf9142df8cec69f9a5b77c1c6c66b68a8f9914c1514bd41876326db7fc4035da85ba6e1d0a53978793876c1bf7b988b3d127d5dd745fb8d00fdab2bb87f5cf4a81ef3a57f0d5f3d1525c9171f7933e2ee390a", @ANYRES16=r3, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x40000000) 0s ago: executing program 2 (id=1431): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) (async) ioprio_set$pid(0x2, 0x0, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r0, 0x0, 0x0) (async) fchdir(r1) (async) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) (async) ftruncate(r2, 0x2007ffb) (async) sendfile(r2, r2, 0x0, 0x1000000201005) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x13, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x80) (async) kernel console output (not intermixed with test programs): th="/137/file0" dev="tmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 96.973608][ T28] audit: type=1400 audit(1777192582.453:1374): avc: denied { create } for pid=5821 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 97.001907][ T5822] netlink: 'syz.0.635': attribute type 30 has an invalid length. [ 97.011633][ T5826] netlink: 'syz.0.635': attribute type 30 has an invalid length. [ 97.110006][ T5830] pimreg: entered allmulticast mode [ 97.121565][ T5830] pimreg: left allmulticast mode [ 97.378187][ T5837] FAULT_INJECTION: forcing a failure. [ 97.378187][ T5837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.397262][ T5838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.637'. [ 97.486580][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz.3.638 Tainted: G W syzkaller #0 PREEMPT(full) [ 97.486630][ T5837] Tainted: [W]=WARN [ 97.486639][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 97.486652][ T5837] Call Trace: [ 97.486659][ T5837] [ 97.486669][ T5837] __dump_stack+0x1d/0x30 [ 97.486693][ T5837] dump_stack_lvl+0x95/0xd0 [ 97.486738][ T5837] dump_stack+0x15/0x1b [ 97.486762][ T5837] should_fail_ex+0x263/0x280 [ 97.486795][ T5837] should_fail+0xb/0x20 [ 97.486819][ T5837] should_fail_usercopy+0x1a/0x20 [ 97.486892][ T5837] _copy_to_user+0x20/0xa0 [ 97.486926][ T5837] simple_read_from_buffer+0xb5/0x130 [ 97.486969][ T5837] proc_fail_nth_read+0x10e/0x150 [ 97.487065][ T5837] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 97.487158][ T5837] vfs_read+0x1ab/0x7f0 [ 97.487223][ T5837] ? __rcu_read_unlock+0x4e/0x70 [ 97.487248][ T5837] ? __fget_files+0x184/0x1c0 [ 97.487267][ T5837] ? mutex_lock+0x57/0x90 [ 97.487377][ T5837] ksys_read+0xdc/0x1a0 [ 97.487406][ T5837] __x64_sys_read+0x40/0x50 [ 97.487437][ T5837] x64_sys_call+0x2886/0x3020 [ 97.487491][ T5837] do_syscall_64+0x12c/0x3b0 [ 97.487522][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.487551][ T5837] RIP: 0033:0x7fc2d394d60e [ 97.487571][ T5837] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 97.487648][ T5837] RSP: 002b:00007fc2d23defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.487667][ T5837] RAX: ffffffffffffffda RBX: 00007fc2d23df6c0 RCX: 00007fc2d394d60e [ 97.487682][ T5837] RDX: 000000000000000f RSI: 00007fc2d23df0a0 RDI: 0000000000000005 [ 97.487736][ T5837] RBP: 00007fc2d23df090 R08: 0000000000000000 R09: 0000000000000000 [ 97.487748][ T5837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.487760][ T5837] R13: 00007fc2d3c06038 R14: 00007fc2d3c05fa0 R15: 00007ffddd1395f8 [ 97.487781][ T5837] [ 97.884469][ T5833] gre0 speed is unknown, defaulting to 1000 [ 98.176421][ T5849] gre0 speed is unknown, defaulting to 1000 [ 98.385782][ T5850] gre0 speed is unknown, defaulting to 1000 [ 98.563321][ T5867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1280 sclass=netlink_route_socket pid=5867 comm=syz.2.645 [ 98.623272][ T5860] syzkaller0: entered promiscuous mode [ 98.649440][ T5860] syzkaller0: entered allmulticast mode [ 98.723833][ T5873] sit0: entered promiscuous mode [ 98.745470][ T5873] sit0: entered allmulticast mode [ 98.766189][ T28] audit: type=1400 audit(1777192584.253:1375): avc: denied { listen } for pid=5871 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 98.883695][ T5874] gre0 speed is unknown, defaulting to 1000 [ 99.003622][ T5886] loop3: detected capacity change from 0 to 512 [ 99.070839][ T5886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.094713][ T5886] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.229368][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.270214][ T5905] loop0: detected capacity change from 0 to 512 [ 99.294098][ T5907] FAULT_INJECTION: forcing a failure. [ 99.294098][ T5907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.317767][ T5907] CPU: 0 UID: 0 PID: 5907 Comm: syz.3.656 Tainted: G W syzkaller #0 PREEMPT(full) [ 99.317850][ T5907] Tainted: [W]=WARN [ 99.317857][ T5907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 99.317949][ T5907] Call Trace: [ 99.317956][ T5907] [ 99.317968][ T5907] __dump_stack+0x1d/0x30 [ 99.317996][ T5907] dump_stack_lvl+0x95/0xd0 [ 99.318160][ T5907] dump_stack+0x15/0x1b [ 99.318208][ T5907] should_fail_ex+0x263/0x280 [ 99.318261][ T5907] should_fail+0xb/0x20 [ 99.318291][ T5907] should_fail_usercopy+0x1a/0x20 [ 99.318335][ T5907] _copy_from_user+0x1c/0xb0 [ 99.318373][ T5907] ___sys_sendmsg+0xc1/0x1e0 [ 99.318434][ T5907] __x64_sys_sendmsg+0xd4/0x160 [ 99.318459][ T5907] x64_sys_call+0x194c/0x3020 [ 99.318483][ T5907] do_syscall_64+0x12c/0x3b0 [ 99.318510][ T5907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.318609][ T5907] RIP: 0033:0x7fc2d398cdd9 [ 99.318629][ T5907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.318651][ T5907] RSP: 002b:00007fc2d23df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.318676][ T5907] RAX: ffffffffffffffda RBX: 00007fc2d3c05fa0 RCX: 00007fc2d398cdd9 [ 99.318693][ T5907] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 99.318759][ T5907] RBP: 00007fc2d23df090 R08: 0000000000000000 R09: 0000000000000000 [ 99.318775][ T5907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.318791][ T5907] R13: 00007fc2d3c06038 R14: 00007fc2d3c05fa0 R15: 00007ffddd1395f8 [ 99.318878][ T5907] [ 99.321941][ T5905] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.660: corrupted inode contents [ 99.498457][ T5905] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 99.504022][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 99.519743][ C0] EXT4-fs (loop0): initial error at time 1777192584: ext4_do_update_inode:5690: inode 16 [ 99.529655][ C0] EXT4-fs (loop0): last error at time 1777192584: ext4_do_update_inode:5690: inode 16 [ 99.539402][ T5905] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.660: mark_inode_dirty error [ 99.550908][ T5905] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 99.551308][ T5905] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.660: corrupted inode contents [ 99.572737][ T5905] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 99.576460][ T5905] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.660: mark_inode_dirty error [ 99.613809][ T5905] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 99.623469][ T5905] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.660: corrupted inode contents [ 99.650641][ T5905] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 99.651031][ T5905] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 99.668951][ T5905] loop0: lost filesystem error report for type 5 error -117 [ 99.669180][ T5905] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.660: corrupted inode contents [ 99.688458][ T5905] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 99.688683][ T5905] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.660: mark_inode_dirty error [ 99.710586][ T5905] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 99.710766][ T5905] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 99.748358][ T5905] loop0: lost filesystem error report for type 5 error -117 [ 99.748761][ T5905] EXT4-fs (loop0): 1 truncate cleaned up [ 99.775163][ T307] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 99.807899][ T5905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.815797][ T307] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:5: Failed to release dquot type 1 [ 99.843931][ T5905] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.924270][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.698756][ T28] audit: type=1400 audit(1777192586.183:1376): avc: denied { write } for pid=5958 comm="syz.5.675" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 101.009314][ T5987] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5987 comm=syz.1.686 [ 101.187033][ T5998] loop1: detected capacity change from 0 to 128 [ 101.209155][ T6001] FAULT_INJECTION: forcing a failure. [ 101.209155][ T6001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.233551][ T5998] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 101.247736][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: syz.0.690 Tainted: G W syzkaller #0 PREEMPT(full) [ 101.247775][ T6001] Tainted: [W]=WARN [ 101.247783][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 101.247810][ T6001] Call Trace: [ 101.247817][ T6001] [ 101.247824][ T6001] __dump_stack+0x1d/0x30 [ 101.247867][ T6001] dump_stack_lvl+0x95/0xd0 [ 101.247887][ T6001] dump_stack+0x15/0x1b [ 101.247907][ T6001] should_fail_ex+0x263/0x280 [ 101.247934][ T6001] should_fail+0xb/0x20 [ 101.247998][ T6001] should_fail_usercopy+0x1a/0x20 [ 101.248031][ T6001] _copy_from_iter+0xcf/0xea0 [ 101.248078][ T6001] ? __alloc_skb+0x4f6/0x690 [ 101.248160][ T6001] ? __alloc_skb+0x200/0x690 [ 101.248196][ T6001] netlink_sendmsg+0x4ae/0x6f0 [ 101.248300][ T6001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.248402][ T6001] ____sys_sendmsg+0x563/0x5b0 [ 101.248431][ T6001] ___sys_sendmsg+0x195/0x1e0 [ 101.248466][ T6001] __x64_sys_sendmsg+0xd4/0x160 [ 101.248573][ T6001] x64_sys_call+0x194c/0x3020 [ 101.248601][ T6001] do_syscall_64+0x12c/0x3b0 [ 101.248624][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.248649][ T6001] RIP: 0033:0x7fcacaa3cdd9 [ 101.248664][ T6001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.248757][ T6001] RSP: 002b:00007fcac948f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.248779][ T6001] RAX: ffffffffffffffda RBX: 00007fcacacb5fa0 RCX: 00007fcacaa3cdd9 [ 101.248795][ T6001] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 101.248810][ T6001] RBP: 00007fcac948f090 R08: 0000000000000000 R09: 0000000000000000 [ 101.248824][ T6001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.248839][ T6001] R13: 00007fcacacb6038 R14: 00007fcacacb5fa0 R15: 00007ffd67e69db8 [ 101.248939][ T6001] [ 101.249052][ T5998] System zones: [ 101.410301][ T6006] netlink: 12 bytes leftover after parsing attributes in process `syz.3.691'. [ 101.419113][ T5998] 1-3, 19-19, 35-36 [ 101.454603][ T5998] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.467307][ T5998] ext4 filesystem being mounted at /125/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 101.549309][ T28] audit: type=1400 audit(1777192587.033:1377): avc: denied { bind } for pid=6007 comm="syz.5.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.593269][ T28] audit: type=1400 audit(1777192587.043:1378): avc: denied { getopt } for pid=5941 comm="syz.2.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.655490][ T6020] loop3: detected capacity change from 0 to 2048 [ 101.668973][ T3295] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.693371][ T6020] EXT4-fs: quotafile must be on filesystem root [ 101.748475][ T6020] ./file0: Can't lookup blockdev [ 101.788519][ T6032] netlink: 40 bytes leftover after parsing attributes in process `syz.2.698'. [ 102.115482][ T6039] loop1: detected capacity change from 0 to 512 [ 102.223017][ T6039] EXT4-fs (loop1): 1 truncate cleaned up [ 102.246153][ T6039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.285388][ T6037] EXT4-fs error (device loop1): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.1.700: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 102.334429][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.702'. [ 102.366438][ T6037] bridge0: port 3(gretap0) entered blocking state [ 102.384764][ T6037] bridge0: port 3(gretap0) entered disabled state [ 102.404994][ T6037] gretap0: entered allmulticast mode [ 102.419527][ T6037] gretap0: entered promiscuous mode [ 102.435150][ T6037] bridge0: port 3(gretap0) entered blocking state [ 102.441756][ T6037] bridge0: port 3(gretap0) entered forwarding state [ 102.514777][ T28] audit: type=1400 audit(1777192587.993:1379): avc: denied { bind } for pid=6061 comm="syz.5.706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 102.555529][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.654975][ T6070] loop3: detected capacity change from 0 to 512 [ 102.699725][ T6070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.737976][ T6070] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.965776][ T6026] syz.2.698 (6026) used greatest stack depth: 7128 bytes left [ 103.140100][ T6082] netlink: 360 bytes leftover after parsing attributes in process `syz.5.712'. [ 103.238500][ T28] audit: type=1400 audit(1777192588.723:1380): avc: denied { write } for pid=6085 comm="syz.1.714" name="file0" dev="tmpfs" ino=697 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 103.287203][ T6084] loop0: detected capacity change from 0 to 512 [ 103.305785][ T6084] journal_path: Non-blockdev passed as './file1' [ 103.312254][ T6084] EXT4-fs: error: could not find journal device path [ 103.533551][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.719'. [ 103.555952][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.563243][ T6084] loop0: detected capacity change from 0 to 4096 [ 103.622115][ T6084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.660317][ T28] audit: type=1400 audit(1777192589.143:1381): avc: denied { read write } for pid=6083 comm="syz.0.713" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.729001][ T6102] netlink: 32 bytes leftover after parsing attributes in process `syz.3.721'. [ 103.747143][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.766371][ T28] audit: type=1400 audit(1777192589.163:1382): avc: denied { open } for pid=6083 comm="syz.0.713" path="/162/file0/file0/file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.768129][ T6105] sctp: [Deprecated]: syz.1.723 (pid 6105) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.768129][ T6105] Use struct sctp_sack_info instead [ 103.820843][ T6102] random: crng reseeded on system resumption [ 103.900573][ T28] audit: type=1326 audit(1777192589.383:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 103.941582][ T6109] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:20003 [ 103.975308][ T28] audit: type=1326 audit(1777192589.383:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 104.028653][ T28] audit: type=1326 audit(1777192589.383:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 104.030352][ T6107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'. [ 104.080713][ T28] audit: type=1326 audit(1777192589.413:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6110 comm="syz.3.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 104.449994][ T6123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.483558][ T6123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.498259][ T6130] lo speed is unknown, defaulting to 1000 [ 104.509843][ T6129] siw: device registration error -23 [ 104.520017][ T6130] lo speed is unknown, defaulting to 1000 [ 104.530786][ T6130] lo speed is unknown, defaulting to 1000 [ 104.541563][ T6130] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.555120][ T6130] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 104.613940][ T6130] lo speed is unknown, defaulting to 1000 [ 104.655337][ T6130] lo speed is unknown, defaulting to 1000 [ 104.693497][ T6130] lo speed is unknown, defaulting to 1000 [ 104.770410][ T6130] lo speed is unknown, defaulting to 1000 [ 104.877737][ T6130] lo speed is unknown, defaulting to 1000 [ 104.883679][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.733'. [ 104.942470][ T6136] gre0 speed is unknown, defaulting to 1000 [ 105.257277][ T6136] lo speed is unknown, defaulting to 1000 [ 105.507807][ T6169] netlink: 'syz.0.737': attribute type 21 has an invalid length. [ 105.560546][ T6173] loop1: detected capacity change from 0 to 1024 [ 105.568643][ T6173] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.583169][ T6173] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 105.594548][ T6173] EXT4-fs (loop1): orphan cleanup on readonly fs [ 105.606082][ T6173] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.739: Freeing blocks not in datazone - block = 0, count = 4096 [ 105.624126][ T6173] loop1: lost filesystem error report for type 5 error -117 [ 105.624230][ T6173] EXT4-fs (loop1): Remounting filesystem read-only [ 105.638096][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 105.638112][ C1] EXT4-fs (loop1): initial error at time 1777192591: ext4_free_blocks:6718 [ 105.638133][ C1] EXT4-fs (loop1): last error at time 1777192591: ext4_free_blocks:6718 [ 105.698148][ T6173] EXT4-fs (loop1): 1 orphan inode deleted [ 105.704658][ T6173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.766512][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.725383][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 106.725398][ T28] audit: type=1400 audit(1777192592.213:1402): avc: denied { listen } for pid=6208 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 106.771658][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.751'. [ 106.927114][ T6221] loop1: detected capacity change from 0 to 512 [ 106.936382][ T6221] EXT4-fs: dax option not supported [ 106.958076][ T6221] loop1: detected capacity change from 0 to 256 [ 107.056801][ T28] audit: type=1400 audit(1777192592.543:1403): avc: denied { create } for pid=6224 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 107.106257][ T6228] loop0: detected capacity change from 0 to 512 [ 107.143168][ T6228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.156187][ T6228] ext4 filesystem being mounted at /171/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.241105][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.294935][ T6235] loop0: detected capacity change from 0 to 2048 [ 107.332975][ T6235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.350956][ T28] audit: type=1400 audit(1777192592.833:1404): avc: denied { read } for pid=6234 comm="syz.0.759" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 107.379053][ T28] audit: type=1400 audit(1777192592.863:1405): avc: denied { execute } for pid=6234 comm="syz.0.759" name=02 dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 107.462425][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.149945][ T6264] netlink: 24 bytes leftover after parsing attributes in process `syz.0.768'. [ 108.240085][ T6268] loop0: detected capacity change from 0 to 1024 [ 108.249609][ T6268] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 108.259526][ T6268] System zones: 0-1, 3-36 [ 108.266534][ T6268] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.770: bad orphan inode 134217728 [ 108.277064][ T6268] loop0: lost filesystem error report for type 5 error -117 [ 108.277683][ T6268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.305314][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 108.315094][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.770'. [ 108.536362][ T6289] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.643622][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.779'. [ 108.951096][ T28] audit: type=1400 audit(1777192594.433:1406): avc: denied { setopt } for pid=6309 comm="syz.1.781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.001219][ T28] audit: type=1400 audit(1777192594.463:1407): avc: denied { ioctl } for pid=6309 comm="syz.1.781" path="socket:[14680]" dev="sockfs" ino=14680 ioctlcmd=0x9416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.095377][ T28] audit: type=1326 audit(1777192594.463:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6154cdd9 code=0x7ffc0000 [ 109.143209][ T28] audit: type=1326 audit(1777192594.463:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fee6154cdd9 code=0x7ffc0000 [ 109.226818][ T28] audit: type=1326 audit(1777192594.463:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6154cdd9 code=0x7ffc0000 [ 109.258413][ T28] audit: type=1326 audit(1777192594.463:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6309 comm="syz.1.781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fee6154cdd9 code=0x7ffc0000 [ 109.948599][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.690954][ T6381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.798'. [ 110.745843][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.5.788'. [ 110.812635][ T6381] gre0 speed is unknown, defaulting to 1000 [ 110.823354][ T6389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.800'. [ 110.934343][ T6381] lo speed is unknown, defaulting to 1000 [ 111.471656][ T6408] syzkaller0: entered promiscuous mode [ 111.477324][ T6408] syzkaller0: entered allmulticast mode [ 111.734989][ T28] kauditd_printk_skb: 258 callbacks suppressed [ 111.739295][ T28] audit: type=1326 audit(1777192597.223:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 111.880735][ T28] audit: type=1326 audit(1777192597.223:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 111.922366][ T28] audit: type=1326 audit(1777192597.223:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 112.050833][ T28] audit: type=1326 audit(1777192597.223:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 112.165206][ T28] audit: type=1326 audit(1777192597.253:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 112.212342][ T6423] x_tables: duplicate underflow at hook 2 [ 112.304832][ T28] audit: type=1326 audit(1777192597.253:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 112.447941][ T28] audit: type=1326 audit(1777192597.253:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 112.491081][ T6428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.810'. [ 112.577649][ T28] audit: type=1326 audit(1777192597.253:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 112.651259][ T28] audit: type=1326 audit(1777192597.263:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 112.675895][ T28] audit: type=1326 audit(1777192597.263:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6392 comm="syz.5.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 112.873355][ T6428] all: renamed from ip_vti0 (while UP) [ 112.879880][ T6434] netlink: 'syz.3.811': attribute type 1 has an invalid length. [ 113.126874][ T6434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.328360][ T6435] bond1: (slave geneve2): making interface the new active one [ 113.337484][ T6435] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 115.058458][ T6486] SET target dimension over the limit! [ 115.079270][ T6488] loop0: detected capacity change from 0 to 512 [ 115.221468][ T6496] gre0 speed is unknown, defaulting to 1000 [ 115.312950][ T6488] syzkaller0: entered promiscuous mode [ 115.318479][ T6488] syzkaller0: entered allmulticast mode [ 115.327288][ T6496] lo speed is unknown, defaulting to 1000 [ 115.408773][ T6501] netlink: 132 bytes leftover after parsing attributes in process `syz.5.831'. [ 115.438906][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.833'. [ 115.524839][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.835'. [ 115.768768][ T6518] wireguard1: entered promiscuous mode [ 115.789792][ T6518] wireguard1: entered allmulticast mode [ 115.846322][ T6528] loop0: detected capacity change from 0 to 1024 [ 115.879261][ T6528] EXT4-fs: Ignoring removed oldalloc option [ 115.953876][ T6530] netlink: 'syz.2.844': attribute type 13 has an invalid length. [ 115.955238][ T6528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.078482][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.265420][ T6560] netlink: 104 bytes leftover after parsing attributes in process `syz.1.852'. [ 116.358411][ T6573] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 116.575249][ T6585] SET target dimension over the limit! [ 116.591290][ T6585] loop1: detected capacity change from 0 to 1024 [ 116.605037][ T6585] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 116.623117][ T6585] System zones: 0-1, 3-36 [ 116.843779][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 116.843829][ T28] audit: type=1400 audit(1777192602.323:1750): avc: denied { ioctl } for pid=6582 comm="syz.3.859" path="socket:[15274]" dev="sockfs" ino=15274 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 116.922845][ T6585] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.860: bad orphan inode 134217728 [ 116.978836][ T6585] loop1: lost filesystem error report for type 5 error -117 [ 116.979975][ T6585] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.469637][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.538333][ T6610] syzkaller0: entered promiscuous mode [ 117.543934][ T6610] syzkaller0: entered allmulticast mode [ 117.569870][ T6613] xt_hashlimit: size too large, truncated to 1048576 [ 117.701983][ T6612] –: renamed from dummy0 (while UP) [ 117.720155][ T6616] loop1: detected capacity change from 0 to 256 [ 117.766610][ T28] audit: type=1326 audit(1777192603.253:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 117.821916][ T6616] FAT-fs (loop1): Directory bread(block 64) failed [ 117.854507][ T6616] FAT-fs (loop1): Directory bread(block 65) failed [ 117.872831][ T6616] FAT-fs (loop1): Directory bread(block 66) failed [ 117.879816][ T28] audit: type=1326 audit(1777192603.273:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 117.905503][ T6616] FAT-fs (loop1): Directory bread(block 67) failed [ 117.912453][ T6616] FAT-fs (loop1): Directory bread(block 68) failed [ 117.919341][ T6616] FAT-fs (loop1): Directory bread(block 69) failed [ 117.926279][ T28] audit: type=1326 audit(1777192603.273:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 117.950934][ T6616] FAT-fs (loop1): Directory bread(block 70) failed [ 117.958183][ T6616] FAT-fs (loop1): Directory bread(block 71) failed [ 117.965183][ T6616] FAT-fs (loop1): Directory bread(block 72) failed [ 117.971828][ T28] audit: type=1326 audit(1777192603.273:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 118.003771][ T6616] FAT-fs (loop1): Directory bread(block 73) failed [ 118.057199][ T28] audit: type=1326 audit(1777192603.273:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 118.085751][ T28] audit: type=1326 audit(1777192603.273:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 118.109157][ T28] audit: type=1326 audit(1777192603.273:1757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 118.154123][ T28] audit: type=1326 audit(1777192603.273:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 118.177947][ T28] audit: type=1326 audit(1777192603.273:1759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6617 comm="syz.5.867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7bc4ecb42 code=0x7ffc0000 [ 118.533588][ T6635] 9p: Bad value for 'rfdno' [ 118.626863][ T6641] SET target dimension over the limit! [ 118.649744][ T6641] loop1: detected capacity change from 0 to 1024 [ 118.675379][ T6641] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 118.683540][ T6641] System zones: 0-1, 3-36 [ 118.713303][ T6641] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.875: bad orphan inode 134217728 [ 118.730054][ T6641] loop1: lost filesystem error report for type 5 error -117 [ 118.732985][ T6641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.766130][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.788590][ T6667] loop1: detected capacity change from 0 to 512 [ 118.800894][ T6667] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 118.812388][ T6667] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.880: corrupted in-inode xattr: bad e_name length [ 118.831235][ T6667] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 118.831645][ T6667] EXT4-fs (loop1): get orphan inode failed [ 118.844056][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 118.849197][ T6667] EXT4-fs (loop1): mount failed [ 118.853195][ C1] EXT4-fs (loop1): initial error at time 1777192604: ext4_iget_extra_inode:5128: inode 15 [ 118.868044][ C1] EXT4-fs (loop1): last error at time 1777192604: ext4_iget_extra_inode:5128: inode 15 [ 118.941860][ T6670] syzkaller0: entered promiscuous mode [ 118.947756][ T6670] syzkaller0: entered allmulticast mode [ 119.050831][ T6685] netlink: 76 bytes leftover after parsing attributes in process `syz.2.885'. [ 119.088340][ T6689] gre0 speed is unknown, defaulting to 1000 [ 119.196380][ T6689] lo speed is unknown, defaulting to 1000 [ 119.336266][ T6685] gre0 speed is unknown, defaulting to 1000 [ 119.376691][ T6685] lo speed is unknown, defaulting to 1000 [ 119.966152][ T6718] netlink: 132 bytes leftover after parsing attributes in process `syz.0.893'. [ 120.252130][ T6735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 120.470936][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.0.900'. [ 120.791092][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.901'. [ 121.017025][ T6755] random: crng reseeded on system resumption [ 121.706481][ T6787] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6787 comm=syz.1.914 [ 121.852824][ T6791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.915'. [ 122.300839][ T6801] netlink: 56 bytes leftover after parsing attributes in process `syz.0.919'. [ 122.470979][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 122.470995][ T28] audit: type=1400 audit(1777192607.953:1771): avc: denied { read } for pid=6810 comm="syz.3.925" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 122.505680][ T28] audit: type=1400 audit(1777192607.983:1772): avc: denied { open } for pid=6810 comm="syz.3.925" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 122.553685][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.922'. [ 122.611655][ T6816] netlink: 16 bytes leftover after parsing attributes in process `syz.3.925'. [ 123.004947][ T6834] veth1_virt_wifi: entered promiscuous mode [ 123.027288][ T6834] veth1_virt_wifi: entered allmulticast mode [ 123.092803][ T28] audit: type=1400 audit(1777192608.573:1773): avc: denied { connect } for pid=6840 comm="syz.2.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.120902][ T6816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=6816 comm=syz.3.925 [ 123.174572][ T6845] loop0: detected capacity change from 0 to 512 [ 123.251120][ T6845] syzkaller0: entered promiscuous mode [ 123.260812][ T6845] syzkaller0: entered allmulticast mode [ 123.304429][ T28] audit: type=1400 audit(1777192608.793:1774): avc: denied { cpu } for pid=6852 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 123.328953][ T6853] loop1: detected capacity change from 0 to 128 [ 123.344355][ T28] audit: type=1400 audit(1777192608.813:1775): avc: denied { read } for pid=6852 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 123.569578][ T6861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.937'. [ 124.190109][ T28] audit: type=1400 audit(1777192609.673:1776): avc: denied { setopt } for pid=6866 comm="syz.2.940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 125.066182][ T6889] tipc: Enabling of bearer rejected, failed to enable media [ 125.159696][ T6893] SET target dimension over the limit! [ 125.269419][ T6897] gre0 speed is unknown, defaulting to 1000 [ 125.286718][ T6908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.954'. [ 125.386731][ T6902] loop0: detected capacity change from 0 to 1024 [ 125.403850][ T6897] lo speed is unknown, defaulting to 1000 [ 125.446639][ T28] audit: type=1400 audit(1777192610.933:1777): avc: denied { sqpoll } for pid=6918 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 125.482745][ T6902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 125.497360][ T6902] System zones: 0-1, 3-36 [ 125.506442][ T6923] 9p: Bad value for 'rfdno' [ 125.526743][ T6902] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.952: bad orphan inode 134217728 [ 125.539356][ T6902] loop0: lost filesystem error report for type 5 error -117 [ 125.544007][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 125.557826][ C0] EXT4-fs (loop0): initial error at time 1777192611: ext4_orphan_get:1423 [ 125.566423][ C0] EXT4-fs (loop0): last error at time 1777192611: ext4_orphan_get:1423 [ 125.586098][ T6902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.678746][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.749253][ T6938] netlink: 148 bytes leftover after parsing attributes in process `syz.1.965'. [ 125.777160][ T6940] SET target dimension over the limit! [ 125.807005][ T28] audit: type=1400 audit(1777192611.293:1778): avc: denied { bind } for pid=6937 comm="syz.1.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 125.867807][ T28] audit: type=1400 audit(1777192611.293:1779): avc: denied { name_bind } for pid=6937 comm="syz.1.965" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 125.939949][ T28] audit: type=1400 audit(1777192611.293:1780): avc: denied { node_bind } for pid=6937 comm="syz.1.965" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 126.164447][ T6960] loop1: detected capacity change from 0 to 1764 [ 127.118701][ T6974] SET target dimension over the limit! [ 127.179765][ T6962] syz.3.973 (6962) used greatest stack depth: 7064 bytes left [ 127.433627][ T6992] loop0: detected capacity change from 0 to 32768 [ 127.561501][ T6992] loop0: p3 < p5 p6 p7 p8 > p4 < p9 p10 > [ 127.623566][ T6992] loop0: p6 start 50334720 is beyond EOD, truncated [ 127.674082][ T6992] loop0: p7 start 68608 is beyond EOD, truncated [ 127.704519][ T6992] loop0: p8 size 33554432 extends beyond EOD, truncated [ 127.733141][ T6992] loop0: p10 start 50334720 is beyond EOD, truncated [ 127.988359][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 127.988378][ T28] audit: type=1400 audit(1777192613.473:1782): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 128.377894][ T7011] syz.3.989 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 128.421338][ T7011] CPU: 0 UID: 0 PID: 7011 Comm: syz.3.989 Tainted: G W syzkaller #0 PREEMPT(full) [ 128.421376][ T7011] Tainted: [W]=WARN [ 128.421384][ T7011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.421417][ T7011] Call Trace: [ 128.421432][ T7011] [ 128.421442][ T7011] __dump_stack+0x1d/0x30 [ 128.421471][ T7011] dump_stack_lvl+0x95/0xd0 [ 128.421497][ T7011] dump_stack+0x15/0x1b [ 128.421578][ T7011] dump_header+0x80/0x240 [ 128.421600][ T7011] oom_kill_process+0x295/0x350 [ 128.421634][ T7011] out_of_memory+0x97d/0xb80 [ 128.421824][ T7011] try_charge_memcg+0x62f/0xa10 [ 128.421860][ T7011] __memcg_kmem_charge_page+0x1ce/0x3f0 [ 128.421889][ T7011] __alloc_frozen_pages_noprof+0x18a/0x350 [ 128.421917][ T7011] alloc_pages_bulk_noprof+0x4d1/0x560 [ 128.421997][ T7011] ? policy_nodemask+0x417/0x5e0 [ 128.422023][ T7011] ? __alloc_frozen_pages_noprof+0x2a4/0x350 [ 128.422044][ T7011] alloc_pages_bulk_mempolicy_noprof+0x35b/0xeb0 [ 128.422101][ T7011] ? alloc_pages_mpol+0x217/0x260 [ 128.422128][ T7011] __vmalloc_node_range_noprof+0x891/0x11c0 [ 128.422168][ T7011] __kvmalloc_node_noprof+0x3d4/0x640 [ 128.422187][ T7011] ? futex_hash_allocate+0x190/0x9a0 [ 128.422299][ T7011] ? futex_hash_allocate+0x190/0x9a0 [ 128.422333][ T7011] futex_hash_allocate+0x190/0x9a0 [ 128.422378][ T7011] ? cap_task_prctl+0x13f/0x6b0 [ 128.422409][ T7011] futex_hash_prctl+0xd8/0xf0 [ 128.422554][ T7011] __se_sys_prctl+0x4f4/0x1400 [ 128.422583][ T7011] __x64_sys_prctl+0x67/0x80 [ 128.422694][ T7011] x64_sys_call+0x2533/0x3020 [ 128.422717][ T7011] do_syscall_64+0x12c/0x3b0 [ 128.422739][ T7011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.422765][ T7011] RIP: 0033:0x7fc2d398cdd9 [ 128.422784][ T7011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.422844][ T7011] RSP: 002b:00007fc2d23df028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 128.422864][ T7011] RAX: ffffffffffffffda RBX: 00007fc2d3c05fa0 RCX: 00007fc2d398cdd9 [ 128.422882][ T7011] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 128.422897][ T7011] RBP: 00007fc2d3a22d69 R08: 0000000000000000 R09: 0000000000000000 [ 128.422912][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.422927][ T7011] R13: 00007fc2d3c06038 R14: 00007fc2d3c05fa0 R15: 00007ffddd1395f8 [ 128.423018][ T7011] [ 128.682401][ T7011] memory: usage 307200kB, limit 307200kB, failcnt 695 [ 128.710392][ T7011] memory+swap: usage 312016kB, limit 9007199254740988kB, failcnt 0 [ 128.730647][ T7011] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 128.743263][ T7011] Memory cgroup stats for /syz3: [ 128.743549][ T7011] cache 0 [ 128.752807][ T7011] rss 0 [ 128.759083][ T7011] shmem 0 [ 128.762156][ T7011] mapped_file 0 [ 128.767160][ T7011] dirty 0 [ 128.770303][ T7011] writeback 0 [ 128.773786][ T7011] workingset_refault_anon 94 [ 128.787808][ T7011] workingset_refault_file 2404 [ 128.799319][ T7011] swap 4931584 [ 128.808451][ T7011] swapcached 11567104 [ 128.817115][ T7034] SET target dimension over the limit! [ 128.828266][ T7011] pgpgin 102110 [ 128.831761][ T7011] pgpgout 102105 [ 128.835375][ T7011] pgfault 98332 [ 128.838854][ T7011] pgmajfault 67 [ 128.842339][ T7011] inactive_anon 0 [ 128.845985][ T7011] active_anon 20480 [ 128.849836][ T7011] inactive_file 0 [ 128.853490][ T7011] active_file 0 [ 128.856955][ T7011] unevictable 0 [ 128.860432][ T7011] hierarchical_memory_limit 314572800 [ 128.867255][ T7011] hierarchical_memsw_limit 9223372036854771712 [ 128.873460][ T7011] total_cache 0 [ 128.877078][ T7011] total_rss 0 [ 128.880385][ T7011] total_shmem 0 [ 128.883864][ T7011] total_mapped_file 0 [ 128.888337][ T7011] total_dirty 0 [ 128.890099][ T7032] gre0 speed is unknown, defaulting to 1000 [ 128.891820][ T7011] total_writeback 0 [ 128.891893][ T7011] total_workingset_refault_anon 94 [ 128.906802][ T7011] total_workingset_refault_file 2404 [ 128.912103][ T7011] total_swap 4931584 [ 128.929493][ T7011] total_swapcached 11567104 [ 128.938015][ T7011] total_pgpgin 102110 [ 128.946377][ T7011] total_pgpgout 102105 [ 128.957077][ T7034] loop1: detected capacity change from 0 to 1024 [ 128.957770][ T7011] total_pgfault 98332 [ 128.975835][ T7011] total_pgmajfault 67 [ 128.982811][ T7011] total_inactive_anon 0 [ 128.991581][ T7011] total_active_anon 20480 [ 129.000874][ T7011] total_inactive_file 0 [ 129.009692][ T7011] total_active_file 0 [ 129.017057][ T7011] total_unevictable 0 [ 129.026347][ T7011] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.899,pid=6747,uid=0 [ 129.056357][ T7011] Memory cgroup out of memory: Killed process 6747 (syz.3.899) total-vm:98536kB, anon-rss:1232kB, file-rss:24900kB, shmem-rss:0kB, UID:0 pgtables:108kB oom_score_adj:1000 [ 129.086971][ T7032] lo speed is unknown, defaulting to 1000 [ 129.093461][ T7010] syz.3.989 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 129.093817][ T7034] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 129.134485][ T7034] System zones: 0-1, 3-36 [ 129.152531][ T7034] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.996: bad orphan inode 134217728 [ 129.204874][ T7034] loop1: lost filesystem error report for type 5 error -117 [ 129.205123][ T7010] CPU: 1 UID: 0 PID: 7010 Comm: syz.3.989 Tainted: G W syzkaller #0 PREEMPT(full) [ 129.205153][ T7010] Tainted: [W]=WARN [ 129.205160][ T7010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.205222][ T7010] Call Trace: [ 129.205231][ T7010] [ 129.205240][ T7010] __dump_stack+0x1d/0x30 [ 129.205284][ T7010] dump_stack_lvl+0x95/0xd0 [ 129.205305][ T7010] dump_stack+0x15/0x1b [ 129.205322][ T7010] dump_header+0x80/0x240 [ 129.205344][ T7010] oom_kill_process+0x295/0x350 [ 129.205459][ T7010] out_of_memory+0x97d/0xb80 [ 129.205511][ T7010] try_charge_memcg+0x62f/0xa10 [ 129.205615][ T7010] ? radix_tree_lookup+0xfa/0x140 [ 129.205651][ T7010] charge_memcg+0x6d/0x120 [ 129.205733][ T7010] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 129.205819][ T7010] __swap_cache_prepare_and_add+0x69/0x4a0 [ 129.205852][ T7010] ? alloc_pages_mpol+0x217/0x260 [ 129.205885][ T7010] swap_cache_alloc_folio+0xa2/0x120 [ 129.205910][ T7010] swap_cluster_readahead+0x35c/0x3c0 [ 129.205952][ T7010] swapin_readahead+0xde/0x840 [ 129.206058][ T7010] ? _raw_spin_unlock+0x9/0x30 [ 129.206089][ T7010] ? swap_put_entries_cluster+0x46c/0x490 [ 129.206126][ T7010] ? __rcu_read_unlock+0x4e/0x70 [ 129.206166][ T7010] ? swap_cache_get_folio+0x1e0/0x1f0 [ 129.206272][ T7010] do_swap_page+0x31e/0x2180 [ 129.206341][ T7010] ? css_rstat_updated+0xbb/0x280 [ 129.206363][ T7010] ? __rcu_read_lock+0x36/0x50 [ 129.206383][ T7010] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 129.206412][ T7010] handle_mm_fault+0xb2e/0x2e70 [ 129.206484][ T7010] ? vma_start_read+0x1c7/0x2c0 [ 129.206603][ T7010] do_user_addr_fault+0x62f/0x1050 [ 129.206641][ T7010] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 129.206715][ T7010] ? trace_page_fault_user+0x1f/0xa0 [ 129.206747][ T7010] exc_page_fault+0x62/0xa0 [ 129.206865][ T7010] asm_exc_page_fault+0x26/0x30 [ 129.206891][ T7010] RIP: 0033:0x7fc2d398d947 [ 129.206910][ T7010] Code: 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 fd c6 02 00 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 e8 93 19 00 00 0f 1f 00 48 83 ec 10 48 63 d2 48 63 ff 45 31 c9 [ 129.206941][ T7010] RSP: 002b:00007ffddd139758 EFLAGS: 00010202 [ 129.206956][ T7010] RAX: 0000000000000000 RBX: 00007fc2d3c05fa0 RCX: 000055555e7bb808 [ 129.206971][ T7010] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.206996][ T7010] RBP: 00007fc2d3c07da0 R08: 0000000000000000 R09: 0000000000000000 [ 129.207012][ T7010] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000001f55a [ 129.207028][ T7010] R13: 00007fc2d3c0609c R14: 000000000001f2b1 R15: 00007ffddd139860 [ 129.207053][ T7010] [ 129.207061][ T7010] memory: usage 307200kB, limit 307200kB, failcnt 776 [ 129.302593][ T7034] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.371102][ T7010] memory+swap: usage 307740kB, limit 9007199254740988kB, failcnt 0 [ 129.512107][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.997'. [ 129.527460][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.534103][ T7010] kmem: usage 299248kB, limit 9007199254740988kB, failcnt 0 [ 129.543783][ T7010] Memory cgroup stats for /syz3: [ 129.545575][ T7010] cache 0 [ 129.568809][ T7010] rss 0 [ 129.585779][ T7010] shmem 0 [ 129.591782][ T7010] mapped_file 0 [ 129.599838][ T7010] dirty 0 [ 129.611505][ T7010] writeback 0 [ 129.622688][ T7010] workingset_refault_anon 94 [ 129.646666][ T7010] workingset_refault_file 2404 [ 129.665119][ T7010] swap 552960 [ 129.678292][ T7010] swapcached 11567104 [ 129.693074][ T7010] pgpgin 102110 [ 129.701275][ T7010] pgpgout 102110 [ 129.711302][ T7010] pgfault 98332 [ 129.717098][ T7010] pgmajfault 67 [ 129.731706][ T7010] inactive_anon 0 [ 129.735442][ T7010] active_anon 0 [ 129.741940][ T7010] inactive_file 0 [ 129.750625][ T7010] active_file 0 [ 129.754191][ T7010] unevictable 0 [ 129.759186][ T7010] hierarchical_memory_limit 314572800 [ 129.769254][ T7010] hierarchical_memsw_limit 9223372036854771712 [ 129.776888][ T7010] total_cache 0 [ 129.778818][ T28] audit: type=1400 audit(1777192615.243:1783): avc: denied { create } for pid=7053 comm="syz.0.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 129.794194][ T7010] total_rss 0 [ 129.814178][ T7010] total_shmem 0 [ 129.827756][ T7010] total_mapped_file 0 [ 129.834327][ T7058] FAULT_INJECTION: forcing a failure. [ 129.834327][ T7058] name failslab, interval 1, probability 0, space 0, times 0 [ 129.847528][ T7010] total_dirty 0 [ 129.853424][ T7010] total_writeback 0 [ 129.864064][ T7010] total_workingset_refault_anon 94 [ 129.875623][ T7058] CPU: 1 UID: 0 PID: 7058 Comm: syz.1.1003 Tainted: G W syzkaller #0 PREEMPT(full) [ 129.875655][ T7058] Tainted: [W]=WARN [ 129.875663][ T7058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 129.875727][ T7058] Call Trace: [ 129.875734][ T7058] [ 129.875743][ T7058] __dump_stack+0x1d/0x30 [ 129.875767][ T7058] dump_stack_lvl+0x95/0xd0 [ 129.875787][ T7058] dump_stack+0x15/0x1b [ 129.875902][ T7058] should_fail_ex+0x263/0x280 [ 129.875929][ T7058] should_failslab+0x8c/0xb0 [ 129.876036][ T7058] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 129.876069][ T7058] ? __alloc_skb+0x2d6/0x690 [ 129.876104][ T7058] __alloc_skb+0x2d6/0x690 [ 129.876236][ T7058] ? __alloc_skb+0x200/0x690 [ 129.876268][ T7058] netlink_alloc_large_skb+0xbf/0xf0 [ 129.876347][ T7058] netlink_sendmsg+0x40c/0x6f0 [ 129.876380][ T7058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.876409][ T7058] ____sys_sendmsg+0x563/0x5b0 [ 129.876486][ T7058] ___sys_sendmsg+0x195/0x1e0 [ 129.876522][ T7058] __x64_sys_sendmsg+0xd4/0x160 [ 129.876552][ T7058] x64_sys_call+0x194c/0x3020 [ 129.876578][ T7058] do_syscall_64+0x12c/0x3b0 [ 129.876683][ T7058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.876706][ T7058] RIP: 0033:0x7fee6154cdd9 [ 129.876722][ T7058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.876742][ T7058] RSP: 002b:00007fee5ff9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.876770][ T7058] RAX: ffffffffffffffda RBX: 00007fee617c5fa0 RCX: 00007fee6154cdd9 [ 129.876815][ T7058] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 129.876829][ T7058] RBP: 00007fee5ff9f090 R08: 0000000000000000 R09: 0000000000000000 [ 129.876842][ T7058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.876855][ T7058] R13: 00007fee617c6038 R14: 00007fee617c5fa0 R15: 00007ffe6aca0558 [ 129.876875][ T7058] [ 129.876940][ T7010] total_workingset_refault_file 2404 [ 130.087450][ T7010] total_swap 552960 [ 130.099529][ T7010] total_swapcached 11567104 [ 130.104122][ T7010] total_pgpgin 102110 [ 130.108170][ T7010] total_pgpgout 102110 [ 130.112468][ T7010] total_pgfault 98332 [ 130.117321][ T7010] total_pgmajfault 67 [ 130.126598][ T7010] total_inactive_anon 0 [ 130.133018][ T7010] total_active_anon 0 [ 130.137266][ T7010] total_inactive_file 0 [ 130.141471][ T7010] total_active_file 0 [ 130.145506][ T7010] total_unevictable 0 [ 130.149501][ T7010] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.989,pid=7010,uid=0 [ 130.164100][ T7010] Memory cgroup out of memory: Killed process 7010 (syz.3.989) total-vm:96216kB, anon-rss:1232kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 130.474605][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1010'. [ 130.810804][ T7090] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1013'. [ 130.836001][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.846006][ T7091] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 131.349214][ T7145] FAULT_INJECTION: forcing a failure. [ 131.349214][ T7145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.378432][ T7145] CPU: 1 UID: 0 PID: 7145 Comm: syz.5.1028 Tainted: G W syzkaller #0 PREEMPT(full) [ 131.378470][ T7145] Tainted: [W]=WARN [ 131.378479][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.378496][ T7145] Call Trace: [ 131.378503][ T7145] [ 131.378510][ T7145] __dump_stack+0x1d/0x30 [ 131.378544][ T7145] dump_stack_lvl+0x95/0xd0 [ 131.378564][ T7145] dump_stack+0x15/0x1b [ 131.378582][ T7145] should_fail_ex+0x263/0x280 [ 131.378621][ T7145] should_fail+0xb/0x20 [ 131.378673][ T7145] should_fail_usercopy+0x1a/0x20 [ 131.378707][ T7145] _copy_from_iter+0xcf/0xea0 [ 131.378781][ T7145] ? __alloc_skb+0x4f6/0x690 [ 131.378820][ T7145] ? __alloc_skb+0x200/0x690 [ 131.378856][ T7145] netlink_sendmsg+0x4ae/0x6f0 [ 131.378921][ T7145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.379034][ T7145] ____sys_sendmsg+0x563/0x5b0 [ 131.379141][ T7145] ___sys_sendmsg+0x195/0x1e0 [ 131.379187][ T7145] __x64_sys_sendmsg+0xd4/0x160 [ 131.379221][ T7145] x64_sys_call+0x194c/0x3020 [ 131.379311][ T7145] do_syscall_64+0x12c/0x3b0 [ 131.379344][ T7145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.379372][ T7145] RIP: 0033:0x7fe7bc4ecdd9 [ 131.379393][ T7145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.379424][ T7145] RSP: 002b:00007fe7baf3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.379505][ T7145] RAX: ffffffffffffffda RBX: 00007fe7bc765fa0 RCX: 00007fe7bc4ecdd9 [ 131.379524][ T7145] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 131.379541][ T7145] RBP: 00007fe7baf3f090 R08: 0000000000000000 R09: 0000000000000000 [ 131.379558][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.379574][ T7145] R13: 00007fe7bc766038 R14: 00007fe7bc765fa0 R15: 00007ffdd6d7b248 [ 131.379599][ T7145] [ 131.711944][ T7174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1030'. [ 132.305821][ T7187] netlink: 'syz.2.1037': attribute type 3 has an invalid length. [ 132.381532][ T7197] netlink: 'syz.0.1040': attribute type 6 has an invalid length. [ 132.394802][ T7197] netlink: 'syz.0.1040': attribute type 7 has an invalid length. [ 132.409018][ T7197] netlink: 'syz.0.1040': attribute type 8 has an invalid length. [ 132.442089][ T7197] can0: slcan on ptm1. [ 132.576601][ T7196] can0 (unregistered): slcan off ptm1. [ 132.591091][ T7205] gre0 speed is unknown, defaulting to 1000 [ 132.715673][ T7205] lo speed is unknown, defaulting to 1000 [ 132.723574][ T7227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'. [ 133.300474][ T28] audit: type=1400 audit(1777192618.783:1784): avc: denied { bind } for pid=7252 comm="syz.3.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 133.487623][ T7267] x_tables: duplicate underflow at hook 4 [ 133.509840][ T28] audit: type=1400 audit(1777192618.993:1785): avc: denied { execmod } for pid=7266 comm="syz.1.1054" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=16976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 133.660913][ T7269] loop1: detected capacity change from 0 to 164 [ 133.681864][ T7278] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7278 comm=syz.3.1057 [ 133.806183][ T7269] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 133.871896][ T28] audit: type=1326 audit(1777192619.353:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6154cdd9 code=0x7ffc0000 [ 133.934313][ T28] audit: type=1326 audit(1777192619.353:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6154cdd9 code=0x7ffc0000 [ 133.994204][ T28] audit: type=1326 audit(1777192619.383:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6154cdd9 code=0x7ffc0000 [ 134.020615][ T28] audit: type=1326 audit(1777192619.383:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6154cdd9 code=0x7ffc0000 [ 134.046702][ T28] audit: type=1326 audit(1777192619.383:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fee6154cdd9 code=0x7ffc0000 [ 134.071858][ T28] audit: type=1326 audit(1777192619.453:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee6154cdd9 code=0x7ffc0000 [ 134.096533][ T28] audit: type=1326 audit(1777192619.453:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fee6154cb42 code=0x7ffc0000 [ 134.110635][ T7287] syzkaller0: entered promiscuous mode [ 134.140094][ T28] audit: type=1326 audit(1777192619.453:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7281 comm="syz.1.1059" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fee6154cbd7 code=0x7ffc0000 [ 134.194737][ T7291] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1059'. [ 134.235241][ T7287] syzkaller0: entered allmulticast mode [ 134.347815][ T7287] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7287 comm=syz.1.1059 [ 134.741788][ T7319] loop3: detected capacity change from 0 to 764 [ 134.752687][ T7319] Symlink component flag not implemented [ 134.758508][ T7319] Symlink component flag not implemented [ 134.781924][ T7319] gre0 speed is unknown, defaulting to 1000 [ 134.859113][ T7319] lo speed is unknown, defaulting to 1000 [ 135.814394][ T7336] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 136.741110][ T7366] netlink: 'syz.5.1081': attribute type 1 has an invalid length. [ 136.804349][ T7372] SET target dimension over the limit! [ 136.824481][ T7366] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 136.839834][ T7372] loop1: detected capacity change from 0 to 1024 [ 136.867905][ T7372] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 136.891343][ T7366] veth3: entered promiscuous mode [ 136.897841][ T7357] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1079'. [ 136.907554][ T7372] System zones: 0-1, 3-36 [ 136.923679][ T7366] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 136.947624][ T7385] netlink: 56843 bytes leftover after parsing attributes in process `syz.0.1088'. [ 137.042058][ T7372] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1082: bad orphan inode 134217728 [ 137.810432][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1090'. [ 137.825090][ T7398] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1091'. [ 137.854506][ T7372] loop1: lost filesystem error report for type 5 error -117 [ 137.918485][ T7372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.328098][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.454346][ T28] kauditd_printk_skb: 157 callbacks suppressed [ 139.454388][ T28] audit: type=1400 audit(1777192624.943:1951): avc: denied { nlmsg_read } for pid=7439 comm="syz.0.1101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 139.735400][ T7463] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1105'. [ 139.827365][ T3021] veth1_macvtap: left promiscuous mode [ 139.984405][ T28] audit: type=1400 audit(1777192625.463:1952): avc: denied { create } for pid=7467 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.086838][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1106'. [ 140.105923][ T28] audit: type=1400 audit(1777192625.493:1953): avc: denied { ioctl } for pid=7467 comm="syz.5.1106" path="socket:[17917]" dev="sockfs" ino=17917 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.161518][ T7476] bridge_slave_0 (unregistering): left allmulticast mode [ 140.181598][ T28] audit: type=1400 audit(1777192625.493:1954): avc: denied { bind } for pid=7467 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.202388][ T7476] bridge_slave_0 (unregistering): left promiscuous mode [ 140.210018][ T28] audit: type=1400 audit(1777192625.493:1955): avc: denied { connect } for pid=7467 comm="syz.5.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 140.234866][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.361788][ T28] audit: type=1400 audit(1777192625.843:1956): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 140.388421][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1113'. [ 140.472010][ T28] audit: type=1326 audit(1777192625.953:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 140.506516][ T28] audit: type=1326 audit(1777192625.953:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 140.531306][ T28] audit: type=1326 audit(1777192625.953:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 140.555254][ T28] audit: type=1326 audit(1777192625.953:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7496 comm="syz.3.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 140.746372][ T7538] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1124'. [ 140.770017][ T7537] loop1: detected capacity change from 0 to 4096 [ 140.777717][ T7537] EXT4-fs: Ignoring removed bh option [ 140.801605][ T7537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.835540][ T7537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.857839][ T7542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 140.891235][ T7537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.952978][ T7537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.030207][ T7537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.112712][ T5257] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.132258][ T5257] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.155822][ T5257] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.173055][ T399] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.216764][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.287227][ T7557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 141.794006][ T7576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5134 sclass=netlink_route_socket pid=7576 comm=syz.2.1135 [ 141.937255][ T7590] loop1: detected capacity change from 0 to 512 [ 141.968208][ T7590] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.986607][ T7590] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.1141: invalid block [ 142.001717][ T7590] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.003128][ T7590] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1141: invalid indirect mapped block 4294967295 (level 1) [ 142.012406][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 142.012428][ C1] EXT4-fs (loop1): initial error at time 1777192627: ext4_get_branch:178: inode 11: block 4294967295 [ 142.012475][ C1] EXT4-fs (loop1): last error at time 1777192627: ext4_get_branch:178: inode 11: block 4294967295 [ 142.055597][ T7590] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.058295][ T7590] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1141: invalid indirect mapped block 4294967295 (level 1) [ 142.085174][ T7590] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 142.085480][ T7590] EXT4-fs (loop1): 2 truncates cleaned up [ 142.118495][ T7590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.206610][ T7591] __nla_validate_parse: 1 callbacks suppressed [ 142.206623][ T7591] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1141'. [ 142.340178][ T7590] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1141'. [ 142.558475][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.708282][ T7618] SET target dimension over the limit! [ 142.789355][ T7618] loop1: detected capacity change from 0 to 1024 [ 142.814468][ T7618] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 142.828949][ T7618] System zones: 0-1, 3-36 [ 142.878194][ T7618] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1148: bad orphan inode 134217728 [ 142.898429][ T7618] loop1: lost filesystem error report for type 5 error -117 [ 142.934242][ T7618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.027461][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.312470][ T7668] gre0 speed is unknown, defaulting to 1000 [ 143.371555][ T7668] lo speed is unknown, defaulting to 1000 [ 143.430515][ T7673] loop3: detected capacity change from 0 to 4096 [ 143.497749][ T7673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.512155][ T7673] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.599718][ T7675] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1164'. [ 143.857028][ T7682] SET target dimension over the limit! [ 144.497548][ T7689] loop1: detected capacity change from 0 to 512 [ 144.584408][ T7689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.597336][ T7689] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.113312][ T28] kauditd_printk_skb: 113 callbacks suppressed [ 145.113330][ T28] audit: type=1400 audit(1777192630.593:2074): avc: denied { create } for pid=7695 comm="syz.0.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 145.117537][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 145.119648][ T28] audit: type=1400 audit(1777192630.593:2075): avc: denied { ioctl } for pid=7695 comm="syz.0.1170" path="socket:[18423]" dev="sockfs" ino=18423 ioctlcmd=0x5826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 145.238418][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.249401][ T7699] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1171'. [ 145.316040][ T7703] gre0 speed is unknown, defaulting to 1000 [ 145.437027][ T7710] batman_adv: batadv0: Interface deactivated: macsec1 [ 145.458244][ T7710] batman_adv: batadv0: Removing interface: macsec1 [ 145.479472][ T7703] lo speed is unknown, defaulting to 1000 [ 145.515957][ T7707] gre0 speed is unknown, defaulting to 1000 [ 145.549643][ T28] audit: type=1400 audit(1777192631.033:2076): avc: denied { getopt } for pid=7704 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 145.608954][ T28] audit: type=1400 audit(1777192631.063:2077): avc: denied { watch_reads } for pid=7704 comm="syz.5.1175" path="/219/file1" dev="tmpfs" ino=1155 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 145.615190][ T7707] lo speed is unknown, defaulting to 1000 [ 145.821198][ T28] audit: type=1400 audit(1777192631.303:2078): avc: denied { ioctl } for pid=7725 comm="syz.3.1179" path="socket:[18645]" dev="sockfs" ino=18645 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 145.866316][ T7726] loop3: detected capacity change from 0 to 1024 [ 145.883068][ T7726] EXT4-fs: Ignoring removed bh option [ 145.892020][ T7726] EXT4-fs: Ignoring removed oldalloc option [ 145.899226][ T7730] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1181'. [ 145.916410][ T7726] EXT4-fs: Ignoring removed nobh option [ 145.931077][ T7726] EXT4-fs: Mount option(s) incompatible with ext3 [ 145.990308][ T7733] SET target dimension over the limit! [ 146.025915][ T7735] loop3: detected capacity change from 0 to 4096 [ 146.053195][ T7735] ext4: Unknown parameter 'fsuuid' [ 146.127161][ T7733] loop0: detected capacity change from 0 to 1024 [ 146.167590][ T7735] loop3: detected capacity change from 0 to 512 [ 146.174422][ T7735] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.210229][ T7733] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 146.255810][ T7733] System zones: 0-1, 3-36 [ 146.287135][ T7733] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1182: bad orphan inode 134217728 [ 146.299207][ T7733] loop0: lost filesystem error report for type 5 error -117 [ 146.312333][ T7733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.366423][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.810569][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1188'. [ 146.815952][ T7757] loop1: detected capacity change from 0 to 128 [ 146.891281][ T7775] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1190'. [ 146.895219][ T7776] FAULT_INJECTION: forcing a failure. [ 146.895219][ T7776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.900984][ T28] audit: type=1400 audit(1777192632.373:2079): avc: denied { connect } for pid=7773 comm="syz.3.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.929712][ T7776] CPU: 1 UID: 0 PID: 7776 Comm: syz.2.1191 Tainted: G W syzkaller #0 PREEMPT(full) [ 146.929828][ T7776] Tainted: [W]=WARN [ 146.929851][ T7776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.929894][ T7776] Call Trace: [ 146.929917][ T7776] [ 146.929941][ T7776] __dump_stack+0x1d/0x30 [ 146.930042][ T7776] dump_stack_lvl+0x95/0xd0 [ 146.930125][ T7776] dump_stack+0x15/0x1b [ 146.930190][ T7776] should_fail_ex+0x263/0x280 [ 146.930285][ T7776] should_fail+0xb/0x20 [ 146.930487][ T7776] should_fail_usercopy+0x1a/0x20 [ 146.930607][ T7776] _copy_from_user+0x1c/0xb0 [ 146.930714][ T7776] sctp_getsockopt_scheduler_value+0x69/0x2e0 [ 146.930880][ T7776] sctp_getsockopt+0x72d/0xaa0 [ 146.930970][ T7776] sock_common_getsockopt+0x60/0x70 [ 146.931140][ T7776] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 146.931236][ T7776] do_sock_getsockopt+0x2f5/0x570 [ 146.931323][ T7776] __x64_sys_getsockopt+0x11d/0x1a0 [ 146.931407][ T7776] x64_sys_call+0x2dcf/0x3020 [ 146.931600][ T7776] do_syscall_64+0x12c/0x3b0 [ 146.931684][ T7776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.931761][ T7776] RIP: 0033:0x7f1a1835cdd9 [ 146.931830][ T7776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.931925][ T7776] RSP: 002b:00007f1a16db7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 146.931962][ T7776] RAX: ffffffffffffffda RBX: 00007f1a185d5fa0 RCX: 00007f1a1835cdd9 [ 146.932033][ T7776] RDX: 000000000000007c RSI: 0000000000000084 RDI: 0000000000000003 [ 146.932162][ T7776] RBP: 00007f1a16db7090 R08: 0000200000000240 R09: 0000000000000000 [ 146.932201][ T7776] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 146.932258][ T7776] R13: 00007f1a185d6038 R14: 00007f1a185d5fa0 R15: 00007ffdf2e61c58 [ 146.932319][ T7776] [ 146.969445][ T7779] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=7779 comm=syz.2.1192 [ 147.081625][ T7757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.148265][ T7757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.209913][ T28] audit: type=1400 audit(1777192632.703:2080): avc: denied { write } for pid=7778 comm="syz.2.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 147.213833][ T7782] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1192'. [ 147.230577][ T28] audit: type=1400 audit(1777192632.703:2081): avc: denied { write } for pid=7778 comm="syz.2.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 147.238308][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1192'. [ 147.270607][ T7784] loop3: detected capacity change from 0 to 512 [ 147.277319][ T7784] EXT4-fs: Ignoring removed oldalloc option [ 147.285427][ T7784] EXT4-fs (loop3): 1 truncate cleaned up [ 147.291643][ T7784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 147.351337][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.418593][ T7792] SET target dimension over the limit! [ 147.517110][ T7792] loop0: detected capacity change from 0 to 1024 [ 147.558603][ T7792] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 147.568996][ T7792] System zones: 0-1, 3-36 [ 147.582222][ T28] audit: type=1400 audit(1777192633.063:2082): avc: denied { ioctl } for pid=7797 comm="syz.3.1198" path="socket:[19636]" dev="sockfs" ino=19636 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 147.584441][ T7792] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1195: bad orphan inode 134217728 [ 147.619148][ T7792] loop0: lost filesystem error report for type 5 error -117 [ 147.619828][ T7792] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.653902][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.687918][ T7804] tipc: Enabled bearer , priority 10 [ 148.373062][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 148.934343][ T7833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1208'. [ 148.948255][ T23] tipc: Node number set to 575475484 [ 149.511019][ T7852] xfrm1: entered promiscuous mode [ 149.516761][ T7852] xfrm1: entered allmulticast mode [ 149.667288][ T7869] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 149.673959][ T7869] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 149.682801][ T7869] vhci_hcd vhci_hcd.0: Device attached [ 149.688759][ T7869] netlink: 'syz.0.1218': attribute type 63 has an invalid length. [ 149.697336][ T7870] vhci_hcd: connection closed [ 149.697424][ T307] vhci_hcd vhci_hcd.0: stop threads [ 149.711853][ T307] vhci_hcd vhci_hcd.0: release socket [ 149.718146][ T307] vhci_hcd vhci_hcd.0: disconnect device [ 151.191317][ T7884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 151.864951][ T28] audit: type=1400 audit(1777192637.343:2083): avc: denied { setattr } for pid=7895 comm="syz.2.1225" path="pipe:[18876]" dev="pipefs" ino=18876 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 151.904184][ T7902] FAULT_INJECTION: forcing a failure. [ 151.904184][ T7902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.933959][ T7902] CPU: 1 UID: 0 PID: 7902 Comm: syz.3.1228 Tainted: G W syzkaller #0 PREEMPT(full) [ 151.934033][ T7902] Tainted: [W]=WARN [ 151.934042][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.934056][ T7902] Call Trace: [ 151.934064][ T7902] [ 151.934072][ T7902] __dump_stack+0x1d/0x30 [ 151.934099][ T7902] dump_stack_lvl+0x95/0xd0 [ 151.934165][ T7902] dump_stack+0x15/0x1b [ 151.934183][ T7902] should_fail_ex+0x263/0x280 [ 151.934210][ T7902] should_fail+0xb/0x20 [ 151.934238][ T7902] should_fail_usercopy+0x1a/0x20 [ 151.934321][ T7902] _copy_from_user+0x1c/0xb0 [ 151.934352][ T7902] kstrtouint_from_user+0x69/0xf0 [ 151.934451][ T7902] ? 0xffffffff81000000 [ 151.934466][ T7902] ? selinux_file_permission+0x1e1/0x320 [ 151.934490][ T7902] proc_fail_nth_write+0x50/0x160 [ 151.934583][ T7902] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 151.934615][ T7902] vfs_write+0x269/0x9f0 [ 151.934646][ T7902] ? __rcu_read_unlock+0x4e/0x70 [ 151.934665][ T7902] ? __fget_files+0x184/0x1c0 [ 151.934751][ T7902] ? mutex_lock+0x57/0x90 [ 151.934811][ T7902] ksys_write+0xdc/0x1a0 [ 151.934842][ T7902] __x64_sys_write+0x40/0x50 [ 151.934868][ T7902] x64_sys_call+0x27e1/0x3020 [ 151.934937][ T7902] do_syscall_64+0x12c/0x3b0 [ 151.934961][ T7902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.934980][ T7902] RIP: 0033:0x7fc2d394d60e [ 151.935030][ T7902] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 151.935049][ T7902] RSP: 002b:00007fc2d23defe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.935069][ T7902] RAX: ffffffffffffffda RBX: 00007fc2d23df6c0 RCX: 00007fc2d394d60e [ 151.935080][ T7902] RDX: 0000000000000001 RSI: 00007fc2d23df0a0 RDI: 0000000000000005 [ 151.935091][ T7902] RBP: 00007fc2d23df090 R08: 0000000000000000 R09: 0000000000000000 [ 151.935161][ T7902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.935171][ T7902] R13: 00007fc2d3c06038 R14: 00007fc2d3c05fa0 R15: 00007ffddd1395f8 [ 151.935188][ T7902] [ 152.205607][ T7909] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1231'. [ 152.987450][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'. [ 152.998136][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1233'. [ 153.320917][ T7927] loop0: detected capacity change from 0 to 512 [ 153.384342][ T7922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'. [ 153.393779][ T7927] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.466142][ T7927] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.1237: corrupted in-inode xattr: e_value size too large [ 153.480295][ T7927] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 153.480619][ T7927] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1237: couldn't read orphan inode 15 (err -117) [ 153.489888][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 153.489913][ C0] EXT4-fs (loop0): initial error at time 1777192638: ext4_iget_extra_inode:5128: inode 15 [ 153.489948][ C0] EXT4-fs (loop0): last error at time 1777192638: ext4_iget_extra_inode:5128: inode 15 [ 153.530908][ T7925] loop3: detected capacity change from 0 to 512 [ 153.567841][ T7925] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 153.659780][ T7927] loop0: lost filesystem error report for type 5 error -117 [ 153.660575][ T7927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.717010][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1241'. [ 153.783679][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'. [ 153.821838][ T7957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7957 comm=syz.0.1237 [ 153.851146][ T7962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 153.864197][ T7927] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1237'. [ 153.911373][ T7927] Invalid ELF header magic: != ELF [ 153.913023][ T28] audit: type=1400 audit(1777192639.393:2084): avc: denied { module_load } for pid=7926 comm="syz.0.1237" path="/252/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=system permissive=1 [ 154.011669][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1247'. [ 154.040711][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.280392][ T7987] syz.3.1250 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 155.340740][ T7987] CPU: 1 UID: 0 PID: 7987 Comm: syz.3.1250 Tainted: G W syzkaller #0 PREEMPT(full) [ 155.340842][ T7987] Tainted: [W]=WARN [ 155.340852][ T7987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.340867][ T7987] Call Trace: [ 155.340873][ T7987] [ 155.340881][ T7987] __dump_stack+0x1d/0x30 [ 155.340905][ T7987] dump_stack_lvl+0x95/0xd0 [ 155.340926][ T7987] dump_stack+0x15/0x1b [ 155.340977][ T7987] dump_header+0x80/0x240 [ 155.341005][ T7987] oom_kill_process+0x295/0x350 [ 155.341073][ T7987] out_of_memory+0x97d/0xb80 [ 155.341107][ T7987] try_charge_memcg+0x62f/0xa10 [ 155.341141][ T7987] ? radix_tree_lookup+0xfa/0x140 [ 155.341185][ T7987] charge_memcg+0x6d/0x120 [ 155.341332][ T7987] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 155.341369][ T7987] __swap_cache_prepare_and_add+0x69/0x4a0 [ 155.341399][ T7987] ? alloc_pages_mpol+0x217/0x260 [ 155.341441][ T7987] swap_cache_alloc_folio+0xa2/0x120 [ 155.341478][ T7987] swap_cluster_readahead+0x25f/0x3c0 [ 155.341514][ T7987] swapin_readahead+0xde/0x840 [ 155.341635][ T7987] ? __pfx_lapic_next_event+0x10/0x10 [ 155.341662][ T7987] ? hrtimer_start_range_ns+0x57f/0x10a0 [ 155.341687][ T7987] ? __rcu_read_unlock+0x4e/0x70 [ 155.341733][ T7987] ? swap_cache_get_folio+0x1e0/0x1f0 [ 155.341758][ T7987] do_swap_page+0x31e/0x2180 [ 155.341786][ T7987] ? __schedule+0x936/0xd20 [ 155.341813][ T7987] ? __rcu_read_lock+0x36/0x50 [ 155.341887][ T7987] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 155.341909][ T7987] handle_mm_fault+0xb2e/0x2e70 [ 155.341946][ T7987] ? vma_start_read+0x1c7/0x2c0 [ 155.342013][ T7987] do_user_addr_fault+0x62f/0x1050 [ 155.342046][ T7987] ? trace_page_fault_user+0x1f/0xa0 [ 155.342075][ T7987] exc_page_fault+0x62/0xa0 [ 155.342148][ T7987] asm_exc_page_fault+0x26/0x30 [ 155.342166][ T7987] RIP: 0033:0x7fc2d385a78c [ 155.342263][ T7987] Code: 8a 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 155.342308][ T7987] RSP: 002b:00007ffddd139760 EFLAGS: 00010202 [ 155.342330][ T7987] RAX: 0000000000000000 RBX: 00007fc2d3c05fa0 RCX: 000055555e7bb808 [ 155.342342][ T7987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.342428][ T7987] RBP: 00007fc2d3c07da0 R08: 0000000000000000 R09: 0000000000000000 [ 155.342439][ T7987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000025f01 [ 155.342453][ T7987] R13: 00007fc2d3c0609c R14: 0000000000025c4d R15: 00007fc2d3c06090 [ 155.342475][ T7987] [ 155.594323][ T7987] memory: usage 293400kB, limit 307200kB, failcnt 1032 [ 155.622173][ T7987] memory+swap: usage 270436kB, limit 9007199254740988kB, failcnt 0 [ 155.674424][ T7987] kmem: usage 211536kB, limit 9007199254740988kB, failcnt 0 [ 155.705536][ T7987] Memory cgroup stats for /syz3: [ 155.710324][ T7987] cache 0 [ 155.743546][ T7987] rss 0 [ 155.774609][ T7987] shmem 0 [ 155.809719][ T7987] mapped_file 0 [ 155.834411][ T7987] dirty 0 [ 155.855403][ T7987] writeback 0 [ 155.875137][ T7987] workingset_refault_anon 168 [ 155.902207][ T7987] workingset_refault_file 3560 [ 155.924416][ T7987] swap 552960 [ 155.934480][ T7987] swapcached 12017664 [ 155.969702][ T7987] pgpgin 135089 [ 155.987099][ T7987] pgpgout 135087 [ 155.998190][ T7987] pgfault 141152 [ 156.014086][ T7987] pgmajfault 104 [ 156.022295][ T7987] inactive_anon 0 [ 156.034033][ T7987] active_anon 8192 [ 156.044229][ T7987] inactive_file 0 [ 156.060995][ T7987] active_file 0 [ 156.069897][ T7987] unevictable 0 [ 156.084029][ T7987] hierarchical_memory_limit 314572800 [ 156.103232][ T7987] hierarchical_memsw_limit 9223372036854771712 [ 156.128960][ T7987] total_cache 0 [ 156.148739][ T7987] total_rss 0 [ 156.164164][ T7987] total_shmem 0 [ 156.182561][ T7987] total_mapped_file 0 [ 156.196938][ T28] audit: type=1326 audit(1777192641.683:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 156.224179][ T7987] total_dirty 0 [ 156.232665][ T7987] total_writeback 0 [ 156.241031][ T28] audit: type=1326 audit(1777192641.683:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 156.241929][ T8017] loop0: detected capacity change from 0 to 512 [ 156.270821][ T7987] total_workingset_refault_anon 168 [ 156.284377][ T7987] total_workingset_refault_file 3560 [ 156.294809][ T7987] total_swap 552960 [ 156.308177][ T28] audit: type=1326 audit(1777192641.683:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 156.337667][ T7987] total_swapcached 12017664 [ 156.367353][ T7987] total_pgpgin 135089 [ 156.371398][ T7987] total_pgpgout 135087 [ 156.375120][ T8020] syzkaller0: entered promiscuous mode [ 156.378071][ T7987] total_pgfault 141152 [ 156.381248][ T28] audit: type=1326 audit(1777192641.683:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 156.394024][ T7987] total_pgmajfault 104 [ 156.414736][ T8020] syzkaller0: entered allmulticast mode [ 156.420921][ T7987] total_inactive_anon 0 [ 156.426177][ T8017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.439409][ T7987] total_active_anon 8192 [ 156.443729][ T8017] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.452217][ T28] audit: type=1326 audit(1777192641.713:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 156.464538][ T7987] total_inactive_file 0 [ 156.503594][ T7987] total_active_file 0 [ 156.504105][ T28] audit: type=1326 audit(1777192641.763:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7bc4ecdd9 code=0x7ffc0000 [ 156.512280][ T7987] total_unevictable 0 [ 156.544037][ T28] audit: type=1326 audit(1777192641.763:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe7bc4ecb42 code=0x7ffc0000 [ 156.590947][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.603985][ T7987] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1250,pid=7987,uid=0 [ 156.621458][ T28] audit: type=1326 audit(1777192641.763:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe7bc4ecbd7 code=0x7ffc0000 [ 156.661185][ T8025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1261'. [ 156.665181][ T7987] Memory cgroup out of memory: Killed process 7987 (syz.3.1250) total-vm:94168kB, anon-rss:1232kB, file-rss:22300kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 156.689563][ T8020] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1260'. [ 156.770827][ T8020] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8020 comm=syz.5.1260 [ 156.790560][ T8029] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 156.831453][ T8029] lo: entered allmulticast mode [ 156.874443][ T28] kauditd_printk_skb: 162 callbacks suppressed [ 156.874458][ T28] audit: type=1326 audit(1777192642.363:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 156.947622][ T28] audit: type=1326 audit(1777192642.393:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 157.003032][ T28] audit: type=1326 audit(1777192642.393:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 157.064646][ T28] audit: type=1326 audit(1777192642.393:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 157.093831][ T28] audit: type=1326 audit(1777192642.393:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 157.169460][ T28] audit: type=1326 audit(1777192642.403:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 157.243919][ T28] audit: type=1326 audit(1777192642.403:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 157.314329][ T28] audit: type=1326 audit(1777192642.403:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 157.393807][ T28] audit: type=1326 audit(1777192642.403:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 157.431319][ T28] audit: type=1326 audit(1777192642.403:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8018 comm="syz.5.1260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7bc4ad60e code=0x7ffc0000 [ 157.467556][ T8067] loop1: detected capacity change from 0 to 512 [ 157.504809][ T8067] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.587021][ T8067] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.764172][ T399] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.786042][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.895837][ T8086] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8086 comm=syz.2.1278 [ 158.041515][ T8097] __nla_validate_parse: 1 callbacks suppressed [ 158.041534][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 158.427178][ T8114] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1286'. [ 158.439342][ T8114] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1286'. [ 158.548045][ T8121] loop1: detected capacity change from 0 to 512 [ 158.615930][ T8121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.647639][ T8121] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.688889][ T8125] gre0 speed is unknown, defaulting to 1000 [ 158.822299][ T8125] lo speed is unknown, defaulting to 1000 [ 158.845734][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.705212][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1297'. [ 159.716296][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1296'. [ 159.805126][ T42] Bluetooth: hci0: command 0x1003 tx timeout [ 159.811340][ T3541] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 159.884272][ T8083] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 160.026915][ T8153] gre0 speed is unknown, defaulting to 1000 [ 160.139095][ T8153] lo speed is unknown, defaulting to 1000 [ 160.157021][ T8163] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1303'. [ 160.219156][ T8165] syzkaller0: entered promiscuous mode [ 160.225279][ T8165] syzkaller0: entered allmulticast mode [ 160.248387][ T8165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1301'. [ 160.283110][ T8163] gre0 speed is unknown, defaulting to 1000 [ 160.321742][ T8163] lo speed is unknown, defaulting to 1000 [ 160.542807][ T8172] loop3: detected capacity change from 0 to 512 [ 160.643182][ T8178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1306'. [ 160.664093][ T8178] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1306'. [ 160.692552][ T8179] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8179 comm=syz.1.1307 [ 160.969386][ T8184] syzkaller0: entered promiscuous mode [ 160.974949][ T8184] syzkaller0: entered allmulticast mode [ 161.299376][ T8195] loop3: detected capacity change from 0 to 256 [ 161.346646][ T8195] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.422424][ T8195] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.512512][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1313'. [ 161.952256][ T8213] netlink: zone id is out of range [ 161.957538][ T8213] netlink: zone id is out of range [ 161.962901][ T8213] netlink: zone id is out of range [ 161.976028][ T8213] netlink: set zone limit has 8 unknown bytes [ 161.985856][ T28] kauditd_printk_skb: 770 callbacks suppressed [ 161.985873][ T28] audit: type=1400 audit(1777192647.473:3035): avc: denied { shutdown } for pid=8190 comm="syz.5.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 162.173439][ T8221] Cannot find add_set index 0 as target [ 162.232878][ T8221] loop3: detected capacity change from 0 to 1024 [ 162.245555][ T8221] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 162.253722][ T8221] System zones: 0-1, 3-36 [ 162.283871][ T8225] 9p: Bad value for 'trans' [ 162.300969][ T8221] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1318: bad orphan inode 134217728 [ 162.404846][ T8221] loop3: lost filesystem error report for type 5 error -117 [ 162.415631][ T8221] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.513170][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.600003][ T8237] loop1: detected capacity change from 0 to 128 [ 162.622489][ T8237] FAT-fs (loop1): bogus number of reserved sectors [ 162.630446][ T8237] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 162.640133][ T8237] FAT-fs (loop1): Can't find a valid FAT filesystem [ 162.653422][ T8239] loop3: detected capacity change from 0 to 512 [ 162.663042][ T8237] bridge_slave_0: Device is already in use. [ 162.789337][ T28] audit: type=1400 audit(1777192648.273:3036): avc: denied { connect } for pid=8244 comm="syz.1.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 162.817457][ T5257] tipc: Subscription rejected, illegal request [ 163.081412][ T8239] syzkaller0: entered promiscuous mode [ 163.118956][ T8239] syzkaller0: entered allmulticast mode [ 163.170977][ T8249] netlink: 'syz.0.1328': attribute type 16 has an invalid length. [ 163.216580][ T8249] __nla_validate_parse: 2 callbacks suppressed [ 163.216611][ T8249] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1328'. [ 163.340125][ T8252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1328'. [ 163.366335][ T8252] netlink: 'syz.0.1328': attribute type 5 has an invalid length. [ 163.474413][ T8252] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1328'. [ 163.723307][ T8252] geneve2: entered promiscuous mode [ 163.786768][ T8252] geneve2: entered allmulticast mode [ 163.885710][ T5257] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 37663 - 0 [ 163.908087][ T5257] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 37663 - 0 [ 163.946989][ T5257] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 37663 - 0 [ 163.992747][ T5257] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 37663 - 0 [ 164.061264][ T28] audit: type=1400 audit(1777192649.543:3037): avc: denied { create } for pid=8261 comm="syz.0.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 164.325968][ T8262] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1332'. [ 164.938312][ T8270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1330'. [ 165.019266][ T8274] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1334'. [ 165.112971][ T8274] loop1: detected capacity change from 0 to 256 [ 165.154942][ T8274] vfat: Deprecated parameter 'posix' [ 165.194046][ T8274] FAT-fs: "posix" option is obsolete, not supported now [ 165.204217][ T8274] FAT-fs (loop1): codepage cp775 not found [ 165.267298][ T28] audit: type=1400 audit(1777192650.743:3038): avc: denied { read } for pid=8275 comm="syz.5.1335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 165.291806][ T8274] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=86 sclass=netlink_audit_socket pid=8274 comm=syz.1.1334 [ 165.316885][ T8274] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8274 comm=syz.1.1334 [ 165.317270][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 165.362273][ T28] audit: type=1326 audit(1777192650.843:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.3.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 165.386467][ T28] audit: type=1326 audit(1777192650.843:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.3.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 165.410683][ T28] audit: type=1326 audit(1777192650.873:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.3.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 165.436465][ T28] audit: type=1326 audit(1777192650.873:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.3.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 165.473079][ T28] audit: type=1326 audit(1777192650.873:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.3.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 165.514231][ T8286] syzkaller0: entered promiscuous mode [ 165.520677][ T28] audit: type=1326 audit(1777192650.873:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8284 comm="syz.3.1339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fc2d398cdd9 code=0x7ffc0000 [ 165.546337][ T8286] syzkaller0: entered allmulticast mode [ 165.558271][ T8286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1339'. [ 165.605300][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1338'. [ 166.061004][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1347'. [ 166.821479][ T8326] loop0: detected capacity change from 0 to 2048 [ 166.878281][ T8328] Cannot find add_set index 0 as target [ 166.936328][ T8326] loop0: p2 p3 p7 [ 166.963165][ T8326] netlink: 'syz.0.1352': attribute type 10 has an invalid length. [ 166.996645][ T8328] loop3: detected capacity change from 0 to 1024 [ 167.032163][ T8326] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 167.087407][ T8328] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 167.111283][ T8326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.122833][ T8328] System zones: 0-1, 3-36 [ 167.130038][ T8337] netlink: 'syz.1.1356': attribute type 1 has an invalid length. [ 167.167682][ T8346] sctp: [Deprecated]: syz.5.1357 (pid 8346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.167682][ T8346] Use struct sctp_sack_info instead [ 167.187743][ T8328] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1353: bad orphan inode 134217728 [ 167.206848][ T8326] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 167.235074][ T8326] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 167.254224][ T8328] loop3: lost filesystem error report for type 5 error -117 [ 167.260955][ T8328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.275715][ T8326] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 167.311906][ T8326] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 167.327461][ T3376] bond_slave_0: entered promiscuous mode [ 167.333202][ T3376] bond_slave_1: entered promiscuous mode [ 167.334208][ T8349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5655 sclass=netlink_route_socket pid=8349 comm=syz.1.1358 [ 167.338867][ T3376] syz_tun: entered promiscuous mode [ 167.369779][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.145193][ T8385] SET target dimension over the limit! [ 168.232287][ T28] kauditd_printk_skb: 482 callbacks suppressed [ 168.232303][ T28] audit: type=1400 audit(1777192653.713:3527): avc: denied { map } for pid=8382 comm="syz.0.1370" path="socket:[20990]" dev="sockfs" ino=20990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 168.279323][ T8383] gre0 speed is unknown, defaulting to 1000 [ 168.337871][ T8383] lo speed is unknown, defaulting to 1000 [ 168.540767][ T8409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1016 sclass=netlink_route_socket pid=8409 comm=syz.0.1377 [ 168.622182][ T28] audit: type=1400 audit(1777192654.103:3528): avc: denied { read } for pid=8415 comm="syz.0.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.712983][ T8420] netlink: 'syz.1.1380': attribute type 21 has an invalid length. [ 168.740913][ T8420] __nla_validate_parse: 4 callbacks suppressed [ 168.740977][ T8420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1380'. [ 168.800953][ T8420] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 168.826946][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1380'. [ 168.897124][ T8428] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 168.958154][ T8426] syzkaller0: entered promiscuous mode [ 168.978107][ T8426] syzkaller0: entered allmulticast mode [ 169.081092][ T8434] SET target dimension over the limit! [ 169.095236][ T28] audit: type=1326 audit(1777192654.583:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 169.150930][ T28] audit: type=1326 audit(1777192654.583:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 169.202552][ T28] audit: type=1326 audit(1777192654.583:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 169.236259][ T8437] syzkaller0: entered promiscuous mode [ 169.244493][ T8437] syzkaller0: entered allmulticast mode [ 169.252476][ T8434] loop3: detected capacity change from 0 to 1024 [ 169.275604][ T28] audit: type=1326 audit(1777192654.583:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 169.324801][ T8434] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 169.334008][ T28] audit: type=1326 audit(1777192654.593:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 169.367903][ T8434] System zones: 0-1, 3-36 [ 169.398557][ T28] audit: type=1326 audit(1777192654.633:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 169.435040][ T8434] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1383: bad orphan inode 134217728 [ 169.457638][ T8434] loop3: lost filesystem error report for type 5 error -117 [ 169.463632][ T8434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.473614][ T28] audit: type=1326 audit(1777192654.633:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 169.508526][ T28] audit: type=1326 audit(1777192654.633:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8435 comm="syz.0.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcacaa3cb42 code=0x7ffc0000 [ 169.543634][ T8437] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1384'. [ 169.555802][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.565893][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1386'. [ 169.576031][ T8451] FAULT_INJECTION: forcing a failure. [ 169.576031][ T8451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.589143][ T8451] CPU: 1 UID: 0 PID: 8451 Comm: syz.1.1386 Tainted: G W syzkaller #0 PREEMPT(full) [ 169.589172][ T8451] Tainted: [W]=WARN [ 169.589179][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 169.589254][ T8451] Call Trace: [ 169.589263][ T8451] [ 169.589274][ T8451] __dump_stack+0x1d/0x30 [ 169.589374][ T8451] dump_stack_lvl+0x95/0xd0 [ 169.589399][ T8451] dump_stack+0x15/0x1b [ 169.589423][ T8451] should_fail_ex+0x263/0x280 [ 169.589457][ T8451] should_fail+0xb/0x20 [ 169.589524][ T8451] should_fail_usercopy+0x1a/0x20 [ 169.589573][ T8451] _copy_to_user+0x20/0xa0 [ 169.589606][ T8451] simple_read_from_buffer+0xb5/0x130 [ 169.589653][ T8451] proc_fail_nth_read+0x10e/0x150 [ 169.589684][ T8451] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.589751][ T8451] vfs_read+0x1ab/0x7f0 [ 169.589782][ T8451] ? ldsem_up_read+0x8a/0xd0 [ 169.589822][ T8451] ? __rcu_read_unlock+0x4e/0x70 [ 169.589844][ T8451] ? __fget_files+0x184/0x1c0 [ 169.589863][ T8451] ? tiocsti+0x19a/0x1d0 [ 169.589892][ T8451] ? mutex_lock+0x57/0x90 [ 169.589960][ T8451] ksys_read+0xdc/0x1a0 [ 169.590056][ T8451] __x64_sys_read+0x40/0x50 [ 169.590148][ T8451] x64_sys_call+0x2886/0x3020 [ 169.590260][ T8451] do_syscall_64+0x12c/0x3b0 [ 169.590286][ T8451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.590349][ T8451] RIP: 0033:0x7fee6150d60e [ 169.590365][ T8451] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 169.590384][ T8451] RSP: 002b:00007fee5ff5cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.590443][ T8451] RAX: ffffffffffffffda RBX: 00007fee5ff5d6c0 RCX: 00007fee6150d60e [ 169.590457][ T8451] RDX: 000000000000000f RSI: 00007fee5ff5d0a0 RDI: 0000000000000008 [ 169.590507][ T8451] RBP: 00007fee5ff5d090 R08: 0000000000000000 R09: 0000000000000000 [ 169.590521][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.590534][ T8451] R13: 00007fee617c6218 R14: 00007fee617c6180 R15: 00007ffe6aca0558 [ 169.590604][ T8451] [ 169.717554][ T8453] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8453 comm=syz.0.1384 [ 170.488214][ T8454] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1388'. [ 170.558179][ T8457] loop3: detected capacity change from 0 to 256 [ 170.567941][ T8457] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 170.575579][ T8457] FAT-fs (loop3): Filesystem has been set read-only [ 170.582449][ T8457] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 170.690819][ T8465] xt_connbytes: Forcing CT accounting to be enabled [ 170.699374][ T8465] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.718712][ T8467] FAULT_INJECTION: forcing a failure. [ 170.718712][ T8467] name failslab, interval 1, probability 0, space 0, times 0 [ 170.766474][ T8467] CPU: 1 UID: 0 PID: 8467 Comm: syz.3.1394 Tainted: G W syzkaller #0 PREEMPT(full) [ 170.766515][ T8467] Tainted: [W]=WARN [ 170.766523][ T8467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.766535][ T8467] Call Trace: [ 170.766541][ T8467] [ 170.766548][ T8467] __dump_stack+0x1d/0x30 [ 170.766579][ T8467] dump_stack_lvl+0x95/0xd0 [ 170.766602][ T8467] dump_stack+0x15/0x1b [ 170.766626][ T8467] should_fail_ex+0x263/0x280 [ 170.766680][ T8467] should_failslab+0x8c/0xb0 [ 170.766737][ T8467] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 170.766858][ T8467] ? __alloc_skb+0x2d6/0x690 [ 170.766909][ T8467] __alloc_skb+0x2d6/0x690 [ 170.766939][ T8467] ? __alloc_skb+0x200/0x690 [ 170.766994][ T8467] netlink_dump+0x10d/0x870 [ 170.767025][ T8467] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 170.767057][ T8467] ? rcu_preempt_deferred_qs_irqrestore+0x3dd/0x5c0 [ 170.767101][ T8467] __netlink_dump_start+0x43e/0x520 [ 170.767138][ T8467] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 170.767269][ T8467] rtnetlink_rcv_msg+0x59f/0x720 [ 170.767302][ T8467] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 170.767372][ T8467] ? __pfx_fib_nl_dumprule+0x10/0x10 [ 170.767410][ T8467] netlink_rcv_skb+0x123/0x220 [ 170.767433][ T8467] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.767463][ T8467] rtnetlink_rcv+0x1c/0x30 [ 170.767523][ T8467] netlink_unicast+0x5a8/0x680 [ 170.767553][ T8467] netlink_sendmsg+0x5c8/0x6f0 [ 170.767589][ T8467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.767688][ T8467] ____sys_sendmsg+0x563/0x5b0 [ 170.767712][ T8467] ___sys_sendmsg+0x195/0x1e0 [ 170.767750][ T8467] __x64_sys_sendmsg+0xd4/0x160 [ 170.767781][ T8467] x64_sys_call+0x194c/0x3020 [ 170.767823][ T8467] do_syscall_64+0x12c/0x3b0 [ 170.767846][ T8467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.767867][ T8467] RIP: 0033:0x7fc2d398cdd9 [ 170.767928][ T8467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.767945][ T8467] RSP: 002b:00007fc2d23df028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.767964][ T8467] RAX: ffffffffffffffda RBX: 00007fc2d3c05fa0 RCX: 00007fc2d398cdd9 [ 170.768095][ T8467] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 170.768147][ T8467] RBP: 00007fc2d23df090 R08: 0000000000000000 R09: 0000000000000000 [ 170.768163][ T8467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.768175][ T8467] R13: 00007fc2d3c06038 R14: 00007fc2d3c05fa0 R15: 00007ffddd1395f8 [ 170.768195][ T8467] [ 171.032164][ T8470] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1391'. [ 171.296719][ T8474] loop3: detected capacity change from 0 to 512 [ 171.307916][ T8475] loop0: detected capacity change from 0 to 512 [ 171.314969][ T8475] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.335146][ T8475] EXT4-fs (loop0): 1 truncate cleaned up [ 171.341170][ T8475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.381876][ T8474] syzkaller0: entered promiscuous mode [ 171.387905][ T8474] syzkaller0: entered allmulticast mode [ 171.413495][ T8475] 9pnet: p9_errstr2errno: server reported unknown error [ 171.454046][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.504057][ T8479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 171.543083][ T8484] SET target dimension over the limit! [ 171.559189][ T8484] loop1: detected capacity change from 0 to 1024 [ 171.586426][ T8484] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 171.594570][ T8484] System zones: 0-1, 3-36 [ 171.635896][ T8484] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.1399: bad orphan inode 134217728 [ 171.658692][ T8484] loop1: lost filesystem error report for type 5 error -117 [ 171.663441][ T8488] batman_adv: batadv0: Adding interface: macsec1 [ 171.723237][ T8488] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.751864][ T8497] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1402'. [ 171.767208][ T8484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.817475][ T3295] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.834414][ T8488] batman_adv: batadv0: Interface activated: macsec1 [ 173.162691][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1403'. [ 173.209992][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1405'. [ 173.242889][ T28] kauditd_printk_skb: 195 callbacks suppressed [ 173.242903][ T28] audit: type=1326 audit(1777192658.723:3732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.3.1406" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2d398cdd9 code=0x0 [ 173.303348][ T8505] syzkaller0: entered promiscuous mode [ 173.309027][ T8505] syzkaller0: entered allmulticast mode [ 173.351830][ T8522] tmpfs: Bad value for 'size' [ 173.564369][ T8521] gre0 speed is unknown, defaulting to 1000 [ 173.595379][ T8568] syzkaller0: entered promiscuous mode [ 173.612133][ T8568] syzkaller0: entered allmulticast mode [ 173.650462][ T8521] lo speed is unknown, defaulting to 1000 [ 173.903714][ T8586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8586 comm=syz.5.1415 [ 174.172497][ T8592] __nla_validate_parse: 1 callbacks suppressed [ 174.172516][ T8592] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1418'. [ 174.213877][ T28] audit: type=1326 audit(1777192659.693:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 174.237759][ T28] audit: type=1326 audit(1777192659.693:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 174.296969][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1420'. [ 174.329760][ T28] audit: type=1326 audit(1777192659.703:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 174.354091][ T28] audit: type=1326 audit(1777192659.703:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 174.444693][ T28] audit: type=1326 audit(1777192659.703:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 174.468459][ T28] audit: type=1326 audit(1777192659.703:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 174.492056][ T28] audit: type=1326 audit(1777192659.803:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcacaa3cdd9 code=0x7ffc0000 [ 174.546944][ T8608] syzkaller0: entered promiscuous mode [ 174.552702][ T8608] syzkaller0: entered allmulticast mode [ 174.636304][ T8613] veth0: entered promiscuous mode [ 174.658333][ T28] audit: type=1326 audit(1777192659.803:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcacaa3cb42 code=0x7ffc0000 [ 174.693841][ T8613] veth0: entered allmulticast mode [ 174.807843][ T28] audit: type=1326 audit(1777192659.803:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8601 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcacaa3cbd7 code=0x7ffc0000 [ 174.904650][ T8608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1422'. [ 174.910839][ T8623] loop3: detected capacity change from 0 to 512 [ 174.920957][ T8621] netlink: 'syz.5.1427': attribute type 7 has an invalid length. [ 174.940498][ T8623] EXT4-fs (loop3): orphan cleanup on readonly fs [ 174.958738][ T8623] EXT4-fs error (device loop3): __ext4_iget:5481: inode #11: block 1: comm syz.3.1428: invalid block [ 174.984078][ T8623] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 174.984317][ T8623] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1428: couldn't read orphan inode 11 (err -117) [ 174.994068][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 174.994089][ C0] EXT4-fs (loop3): initial error at time 1777192660: __ext4_iget:5481: inode 11: block 1 [ 174.994160][ C0] EXT4-fs (loop3): last error at time 1777192660: __ext4_iget:5481: inode 11: block 1 [ 175.021243][ T8628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1430'. [ 175.056942][ T8623] loop3: lost filesystem error report for type 5 error -117 [ 175.058157][ T8623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 175.102307][ T8628] team0 (unregistering): Port device team_slave_0 removed [ 175.140510][ T8628] team0 (unregistering): Port device team_slave_1 removed [ 175.182232][ T8631] ================================================================== [ 175.190407][ T8631] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 175.198545][ T8631] [ 175.200921][ T8631] write to 0xffff88811bc00e20 of 8 bytes by task 8630 on cpu 1: [ 175.208570][ T8631] filemap_splice_read+0x523/0x780 [ 175.213733][ T8631] splice_direct_to_actor+0x26e/0x670 [ 175.219149][ T8631] do_splice_direct+0x119/0x1a0 [ 175.224042][ T8631] do_sendfile+0x382/0x650 [ 175.228495][ T8631] __x64_sys_sendfile64+0x105/0x150 [ 175.233751][ T8631] x64_sys_call+0x2dc4/0x3020 [ 175.238462][ T8631] do_syscall_64+0x12c/0x3b0 [ 175.243093][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.249016][ T8631] [ 175.251358][ T8631] write to 0xffff88811bc00e20 of 8 bytes by task 8631 on cpu 0: [ 175.259007][ T8631] filemap_splice_read+0x523/0x780 [ 175.264164][ T8631] splice_direct_to_actor+0x26e/0x670 [ 175.269588][ T8631] do_splice_direct+0x119/0x1a0 [ 175.274489][ T8631] do_sendfile+0x382/0x650 [ 175.278946][ T8631] __x64_sys_sendfile64+0x105/0x150 [ 175.284191][ T8631] x64_sys_call+0x2dc4/0x3020 [ 175.289004][ T8631] do_syscall_64+0x12c/0x3b0 [ 175.293620][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.299604][ T8631] [ 175.301949][ T8631] value changed: 0x0000000000964000 -> 0x000000000100e000 [ 175.309083][ T8631] [ 175.311434][ T8631] Reported by Kernel Concurrency Sanitizer on: [ 175.317612][ T8631] CPU: 0 UID: 0 PID: 8631 Comm: syz.2.1431 Tainted: G W syzkaller #0 PREEMPT(full) [ 175.328533][ T8631] Tainted: [W]=WARN [ 175.332368][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.342531][ T8631] ================================================================== [ 175.446193][ T8632] gre0 speed is unknown, defaulting to 1000 [ 175.601146][ T8632] lo speed is unknown, defaulting to 1000 [ 175.695231][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.