last executing test programs: 2m28.32698084s ago: executing program 1 (id=513): syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r0, 0x0, 0x0) 2m28.236066288s ago: executing program 1 (id=514): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000004000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095", @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) connect$packet(r2, &(0x7f0000000240)={0x11, 0xef, r3, 0x1, 0xf1, 0x6, @random="6b1affe1311a"}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000151000/0x2000)=nil, 0x2000, 0x0, 0x0) 2m28.221418309s ago: executing program 1 (id=516): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000003c0)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x3, 0x0, 0xfffff028}, {0x6}]}, 0x10) syncfs(r1) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0x4005, @empty}, 0x10, 0x0}, 0x30006095) close(r6) 2m22.027788758s ago: executing program 1 (id=614): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xa4, 0x10001}, 0x106425, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0x101, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r4, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xed1ca, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0xd, 0x8b, 0x0, 0x66, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r4, 0x2) mq_open(&(0x7f00000000c0)='Z.\x00', 0x800, 0x4c5665ec88a69c5c, &(0x7f0000000140)={0xf7a, 0x8c, 0x7fffffff, 0x9}) r5 = mq_open(&(0x7f0000000180)='tmpfs\x00', 0x0, 0x80, &(0x7f0000000440)={0x9, 0x2, 0x8, 0x4}) mq_notify(r5, &(0x7f0000000400)={0x0, 0x802002b, 0x29e457742b0ca0fb, @tid=r0}) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x413c1) r7 = open(&(0x7f0000000c00)='./file0\x00', 0x10040, 0x154) mkdirat(r7, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r8 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r8, &(0x7f00000002c0)='./file0\x00', 0x2) r9 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r9) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket(0x28, 0x6, 0x9) mount$tmpfs(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) syz_io_uring_setup(0x3, &(0x7f00000002c0)={0x0, 0x302, 0x0, 0x3, 0x1b9}, &(0x7f00000007c0), &(0x7f0000000240)) 2m21.884211452s ago: executing program 1 (id=618): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) 2m16.728189195s ago: executing program 1 (id=689): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB="00000011000000813a98d452191c00"/26, @ANYRES32=0x0, @ANYRES32], 0x50) 2m16.727978926s ago: executing program 32 (id=689): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000007000000080000002200000000000000", @ANYRES32, @ANYBLOB="00000011000000813a98d452191c00"/26, @ANYRES32=0x0, @ANYRES32], 0x50) 2m8.900079405s ago: executing program 5 (id=798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x75, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2m8.026577085s ago: executing program 5 (id=810): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r0}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2m7.940185913s ago: executing program 5 (id=812): setpriority(0x1, 0xff, 0x11) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r1, &(0x7f0000000580)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) munmap(&(0x7f000000d000/0x2000)=nil, 0x2000) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2m7.095563441s ago: executing program 5 (id=829): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x3200c94, &(0x7f0000000440)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d64ab8b2194a9e8b537ad2ed68f8319883b84237da3bf9213365872b3f3000000"], 0x1, 0x2b9, &(0x7f0000000fc0)="$eJzs3E1rE3sUx/HTpm3SlDa5cLlwL1w96EY3QxtfgAZpQQwotSnqQpjaiYaMSZkJlYjYbMStr6O4dCeoL8BuxI17d0UQ3HQhjjiTaZM2rWmap7bfD5T5Z87/x5ymD5wEJpu3Xz4q5FwjZ5ZlOKYyLFKVLZHk71XNUO047K/HpF5VLk58//z/rTt3r6czmdl51bn0wqWUqk6dffv46atz78sTi6+n3kRlI3lv81vqy8Y/G/9u/lx4mHdHxdViqaymLpVKZXPJtnQ57xYM1Zu2ZbqW5ouu5TTUc3ZpZaWiZnF5Mr7iWK6rZrGiBaui5ZKWnYqaD8x8UQ3D0Mm4nG4jLezJrs/Pm+l9y16kox2h68abnXScdLV5Mbveg54AAMCAOXj+D2b9/ef/zGJwbGv+1/x+87/Ikef/D2O9fy6Pg2rDoz/M/6FE07OxjjWFrnKctBmv/f02Yv4HAAAAAAAAAAAAAAAAAAAAAOA42PK8hOd5ifAYfkVrN3iEj/vdJ7qjzZ//5T61iw6ru3EvJmK/WM2uZoNjUE/nJC+2WDItCfnh/z7UBOu5a5nZafUl5Z29VsuvrWYjEg3zoWSYH/JvQwvyZ/6aCfLamB+VeP31U5KQv5tfP9U0PyYXztflDUnIx/tSEluW/Wvv5J/NqF69kdmVH/f3AQAAAABwEhi6bc/rd7/ub4jJ3nqQP8T7A7teX4/If618RCUAAAAAADgyt/KkYNq25bSxiIrIEeIndRGRgWhj1+KKiAxAG71axEQkOKPtxL9ux1tKeS3sGRGRvj8th1j0+z8TAAAAgE7bGfoPEfr0vIsdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABw+rT6eWDh/j2lsHBAvO5ykZ5/gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA+RUAAP//ovscvw==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xdf) pwrite64(r3, &(0x7f00000000c0)='^', 0x1, 0x7ff) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000000071113d00000000008510000002000000850000007d00000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) tkill(r4, 0x26) 2m6.743131293s ago: executing program 5 (id=832): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m6.284073306s ago: executing program 5 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='rxrpc_peer\x00', r3, 0x0, 0xfffffffffb}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r3}, 0x18) r4 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x0, @host}, 0x10) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f00000003c0)={0x3, 0x6, 0x6, 0x3, 0x7, 0x7, 0x2, "c0625b51203864cbdcec7b17f4903577e191fbc2", "4ca4af6984349a0d530e11f1ab823beda327ff0e"}) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0x6000) syz_clone3(&(0x7f00000007c0)={0x24001000, &(0x7f0000000380), 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffae) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = io_uring_setup(0xdac, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x3, 0x56}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x5}, 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r10 = syz_open_dev$sg(&(0x7f0000000200), 0x4, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r10, 0x2287, &(0x7f0000000280)=0x6) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r11, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 2m6.199526713s ago: executing program 33 (id=840): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='rxrpc_peer\x00', r3, 0x0, 0xfffffffffb}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r3}, 0x18) r4 = shmget$private(0x0, 0x2000, 0x54003f00, &(0x7f0000ffc000/0x2000)=nil) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x0, @host}, 0x10) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r5, 0x89eb, &(0x7f00000003c0)={0x3, 0x6, 0x6, 0x3, 0x7, 0x7, 0x2, "c0625b51203864cbdcec7b17f4903577e191fbc2", "4ca4af6984349a0d530e11f1ab823beda327ff0e"}) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0x6000) syz_clone3(&(0x7f00000007c0)={0x24001000, &(0x7f0000000380), 0x0, 0x0, {0x3f}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffae) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = io_uring_setup(0xdac, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x3, 0x56}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x5}, 0x4) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r10 = syz_open_dev$sg(&(0x7f0000000200), 0x4, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r10, 0x2287, &(0x7f0000000280)=0x6) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r11, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 4.425632693s ago: executing program 6 (id=3002): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@struct={0x5, 0x0, 0x0, 0x4, 0x1, 0x993}]}, {0x0, [0x5f, 0x0, 0x61, 0x30]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x22020600) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) poll(&(0x7f0000000000)=[{r3, 0x289}], 0x51, 0x100) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000040)={0xc, r3, 'id0\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, 0x39, 0x9, 0x70bd2c, 0x0, {0x4}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\b\x00'}]}]}, 0x24}}, 0x0) r8 = openat$cgroup_procs(r4, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) unshare(0x2c020400) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r9}, 0x9) socket$nl_route(0x10, 0x3, 0x0) 4.206834673s ago: executing program 6 (id=3009): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$SNAPSHOT_SET_SWAP_AREA(0xffffffffffffffff, 0x400c330d, 0x0) r1 = geteuid() quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r1, &(0x7f0000000740)='./file1\x00') bind$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x1, 0x0, 0x1, 0x5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) readahead(0xffffffffffffffff, 0x6, 0x100) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c0, 0x0, 0x2c0, 0x138, 0x0, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xff, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xf, 0x7b7b, @remote, 0x4e22}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r8 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth1_virt_wifi\x00', 0x0}) bind$packet(r7, &(0x7f0000000480)={0x11, 0x17, r9, 0x1, 0x82, 0x6, @multicast}, 0x14) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x100, 0x81, 0x4, 0x400, 0x8, 0x5900002, r9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x20}, 0x18) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a0000000100000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf3a, 0x0) 3.945256517s ago: executing program 4 (id=3018): r0 = fsmount(0xffffffffffffffff, 0x1, 0x8) fchdir(r0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8000004, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = dup2(r2, r2) write$selinux_load(r3, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x43) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00', @mcast2, 0x1, 0x6, 0x0, 0x100, 0x4, 0x184610008}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 3.646744664s ago: executing program 2 (id=3020): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x2000000000000000}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES32=r2, @ANYBLOB="3863d639d5b202076632161c526646375ac8a2a3ddc89b972e128d93bfe121c33337f22b6a31fdca83917162edafbb8fc447835e968a0816a22b932b8ba6d0be226aa2639aa802515921f69d97591b2ae3301c2179541fa4b44b858659dcc4481fddd6becaf782e4df30bb72a503c0e0058215", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r11}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x20040840) r12 = socket(0x10, 0x3, 0x6) r13 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xffff}, {0xffff, 0xffff}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x81, 0x4, 0x4, 0xc7, 0x1, 0x2, 0x5, 0x3}}, {0xa, 0x2, [0x5, 0x10, 0x1]}}]}, @TCA_RATE={0x6}]}, 0x58}}, 0x20008010) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000a000000020000000000001101000000090000000d00000006000085080000000800000002000000780000000300000004000000020000000000000004000000010000000300000000000000040000000b000000fbffffff02000000060000000100000007000000000061303030302e0000"], &(0x7f0000000340)=""/145, 0x86, 0x91, 0x1, 0x7f}, 0x28) ioctl$SIOCPNGETOBJECT(r13, 0x89e0, &(0x7f0000000080)=0xe) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="033f000000000000040000000a00000000000000a7500bd2119bb83ec65cd2a509589d43a1aa98c14ba4ac252edd3c9e23", @ANYRES32=r1, @ANYBLOB="0500"/20, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="000000000300"/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7dffeffc) 3.620738027s ago: executing program 4 (id=3023): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001440)=@raw={'raw\x00', 0x3c1, 0x3, 0x13c0, 0x11e0, 0xc8, 0x8, 0x4000000, 0x5803, 0x12f0, 0x2e8, 0x2e8, 0x12f0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1198, 0x11e0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x2, 0x3}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0xfffffffffffffffc}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x81, 0x8, 0xe, 'syz0\x00', {0x1}}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1420) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001180)={0x0, 0x0, {0x0, @struct, 0x0}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000740)={0x3, 0x2, @start={r5, 0x0, "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", "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"}, [0x1, 0x8, 0x9, 0x0, 0x8, 0x2, 0x5, 0x0, 0x5, 0x5b1, 0x9, 0x7f, 0x3, 0x9, 0x7, 0x5, 0x8e3, 0x0, 0x4, 0x0, 0x7, 0x29d, 0x1, 0x9, 0x4b, 0x3, 0x8001, 0x2, 0x80, 0x1c8, 0x4, 0x5, 0x4, 0xffffffffffffffff, 0x8, 0x7, 0x100002, 0xfffffffffffff001, 0x2, 0x1000, 0x2, 0x0, 0x10, 0x7fffffffffffffff, 0x6, 0x9, 0xfffffffffffffff8, 0x81, 0x8539, 0xfffffffffffffefc, 0x0, 0x8, 0x9, 0x9, 0x101, 0x5, 0x80000001, 0x9, 0x2, 0x7, 0x4, 0x3dc, 0x7, 0x1]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r6, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r7}, 0x18) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) nanosleep(&(0x7f0000000000)={0x77359400}, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f00000008c0)={{}, r4, 0x0, @unused=[0x5, 0x1, 0x100, 0x401], @devid=r5}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) getitimer(0x0, &(0x7f0000000000)) 3.279714358s ago: executing program 2 (id=3027): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 2.586519752s ago: executing program 0 (id=3034): r0 = fsmount(0xffffffffffffffff, 0x1, 0x8) fchdir(r0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8000004, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = dup2(r2, r2) write$selinux_load(r3, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x43) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00', @mcast2, 0x1, 0x6, 0x0, 0x100, 0x4, 0x184610008}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.544508526s ago: executing program 4 (id=3035): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec850000007500000085"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000780)='netlink_extack\x00', r0, 0x0, 0xb0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r1, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x0, &(0x7f00000000c0)}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x16, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91104e00000000009500000002020000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x40004}, 0x4800) socket(0x10, 0x3, 0x0) unshare(0x6a040000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) process_mrelease(0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) 2.521795118s ago: executing program 0 (id=3036): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r3, &(0x7f0000006080)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1000000000000000"], 0x5c}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000180)={0x1, 0x1, 0x4}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a20000000020a0108"], 0x3440}}, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r4, 0x58, &(0x7f0000000500)}, 0x10) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) ftruncate(r6, 0xb35) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xffff, 0xd, 0x81, 0x7, 0x6, 0x7, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x3, 0x6, 0x6, 0xffff, 0x6, 0x4, 0x6, 0x0, 0x20, 0xb, 0x5, 0x5, 0x2, 0x62, 0x9, 0xfffffff5, 0x6338, 0x70, 0x7, 0x9, 0x8, 0x9, 0x7, 0x80000000, 0x9, 0xfff, 0x2, 0x9, 0xfffffff9, 0x6, 0xfffffffe, 0x600000, 0x6, 0x1, 0x6, 0x1, 0xbc0, 0x9bf1, 0x8000005, 0x2, 0x0, 0xe, 0x9, 0x1ff, 0xb9, 0xc741, 0x800, 0x5, 0x3, 0xed, 0x1, 0x8001, 0xb, 0x5b96, 0xffff, 0x2, 0x2, 0xff, 0x1, 0x4, 0x9, 0x401, 0x2, 0x1000, 0x101, 0x50, 0x4, 0x2, 0x1, 0x5, 0x5, 0x7, 0x8a6b, 0xfffffbff, 0x4, 0x2, 0x1, 0x5, 0x6, 0x2, 0x5, 0xffffffff, 0x80, 0x10000008, 0xff, 0x9, 0xfffffff2, 0x3b96, 0xfffff800, 0x8, 0x3, 0x2000f, 0xf8b, 0x10001, 0x3, 0x2, 0xa78, 0x3, 0xcb0, 0x6, 0x9, 0x9, 0x0, 0x7, 0x80000001, 0x7, 0x9, 0x0, 0x40, 0x8, 0x8, 0x5, 0x8c, 0xaa93, 0x800, 0x3, 0x9, 0x10001, 0x9, 0x1, 0xd12, 0x0, 0x23487474, 0x3cd2, 0x0, 0x7, 0x6, 0x5, 0xb1, 0x2, 0x6, 0x9, 0x2, 0xaa83, 0x40, 0xff, 0x9, 0x9, 0x1, 0x5, 0xfffffffb, 0x2, 0x1, 0x4, 0x9, 0x4, 0x2, 0x7, 0xffffffff, 0x1, 0xd76a, 0x6, 0xfffffff6, 0x4, 0x1, 0xfffffffd, 0xfffffffc, 0x50, 0x7359, 0x8, 0x7, 0xb, 0xa, 0x2d5, 0x6, 0xf, 0x1, 0x773a, 0x6b7b, 0x10001, 0x3, 0x4, 0x5, 0x7, 0x4, 0x800, 0x2, 0x5, 0x0, 0x6, 0x3ff, 0x9, 0x5, 0x5, 0xfffffffe, 0x7, 0x8, 0xffff, 0x3, 0x4, 0xa, 0xae2b, 0xb, 0x6, 0x1a71, 0x0, 0x10001000, 0x0, 0x3, 0x7, 0x1, 0x1, 0x3c34, 0x6, 0x10000, 0x5, 0x7fff, 0x0, 0x8, 0x3, 0x3, 0xc, 0x100, 0x0, 0x2, 0xb, 0x5, 0xc8, 0x557c, 0x9, 0x8, 0x0, 0x3, 0x80, 0x8000, 0x7bc, 0x1, 0x8, 0x6, 0xe, 0x5, 0xfff, 0x9, 0x5, 0x279, 0x8000, 0x8, 0x5, 0x1, 0x80000000, 0x3, 0x9, 0x1ff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x9, 0xd, 0x7, 0x9, 0x6, 0x0, 0x4, 0xa, 0x0, 0x100, 0x7, 0x3f, 0x3, 0x8, 0x9, 0x2, 0x6, 0x6dbf, 0x8, 0x5, 0x12c, 0x3, 0x5, 0x5, 0x7, 0x100, 0x7, 0x8, 0x9, 0x0, 0x3, 0xffffffff, 0x200, 0xfffffffe, 0x328d, 0xffffde01, 0x9, 0x8, 0x3, 0xffff7ffc, 0x4f, 0x0, 0x10, 0x7, 0x8000, 0x2, 0x17, 0xffff, 0x8, 0xc, 0xffff, 0x0, 0x3, 0x2, 0x42f, 0xffffff2c, 0x5, 0xbd, 0xe0, 0x6, 0xc26, 0x8e, 0x6, 0x5, 0xe, 0x1, 0x800, 0x1bf, 0x4, 0x5, 0x4, 0x8, 0x7ce7c36c, 0x3, 0x1eb, 0x10001, 0x8, 0x5102, 0x6ce, 0x6, 0x8000, 0x2, 0x5, 0xfffffff9, 0x2, 0x4e30, 0x6, 0x6, 0x2, 0x90, 0x2, 0x2, 0xc80e, 0x4, 0x5, 0x450, 0xe0, 0x6, 0x5, 0xd, 0x5, 0x5, 0x9, 0x1045800, 0xfffffffd, 0xffffffde, 0x6a4, 0x5, 0x2000009, 0x6, 0x1f, 0xb89, 0x6, 0x7, 0x1ff, 0x7f, 0xfffff77b, 0x3, 0xffffffff, 0xfffff401, 0x6, 0x6, 0x8, 0x9, 0x2, 0x7, 0x401, 0xa7d, 0x6, 0xfffff9f3, 0x1, 0x9, 0x1, 0xb4, 0x2, 0xc, 0x8, 0x7, 0x0, 0x5891, 0x8, 0x7, 0xb, 0x0, 0x400008, 0xb, 0x0, 0xff, 0x4f, 0x8, 0x33f, 0x70fc7f4f, 0x0, 0x4, 0x0, 0xc, 0x9, 0x5, 0x6, 0x3, 0x2, 0x1, 0x0, 0x2c46512a, 0x3, 0x2640, 0x0, 0x10000, 0x0, 0x9, 0x3, 0x6, 0x7fffffff, 0xdc, 0x80000000, 0x26, 0xbb16, 0x2, 0x9, 0xbd1, 0x44, 0xffffff7f, 0xa3, 0x1, 0x4, 0x10000000, 0x3, 0x2, 0x5, 0x0, 0x9, 0x4, 0x4b, 0x1, 0x8000, 0x2, 0x4, 0x2e4, 0xc7, 0x4, 0x4, 0x4, 0x81, 0xff, 0x6, 0x1, 0x10, 0x6, 0x9, 0x1, 0x4e2, 0x104, 0x7, 0x3ff, 0x10001, 0x4, 0x1, 0x101, 0x800, 0x101, 0x5, 0x6, 0xd, 0x6, 0x101, 0x9, 0x9, 0x6, 0x800, 0x101, 0xf07, 0x3, 0x2, 0x81, 0xfff, 0x80000001, 0x8, 0x2, 0xee8, 0x1ff, 0x81, 0x24000, 0x6, 0x2, 0x2, 0x2, 0x10, 0x8001, 0xa, 0x8, 0xb127, 0x6, 0x9, 0x7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x6, 0x2, 0x7, {0x3, 0x2, 0x4, 0x40, 0x6, 0x1ff}, {0x2, 0x0, 0x2, 0xcd4, 0x9, 0x8}, 0x0, 0x7ff}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 2.358463733s ago: executing program 2 (id=3038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r0}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x1, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000380)="c96508", 0x3}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000240), 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) 2.246963623s ago: executing program 2 (id=3039): ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x95}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x44, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x3, 0x7, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1000, 0x5, 0x81, 0x4, 0x1}}, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x38, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x64fca320, {0xc, 0x6, "f6cd53", 0x200, 0x2f, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [], "13d888beda0a7f6b"}}}}}}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000003240)={0x44, &(0x7f0000003040)={0x20, 0x14, 0x2c, "1c72ef32ebdfe20fae9a982b36478635ad68c38e015ba297c8d9c04f2e125f1152a7177a21069f6197cfb6e2"}, &(0x7f0000003080)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000030c0)={0x0, 0x8, 0x1, 0x2e}, 0x0, &(0x7f0000003140)={0x20, 0x82, 0x1, 'x'}, &(0x7f0000003180)={0x20, 0x83, 0x2, ' J'}, &(0x7f00000031c0)={0x20, 0x84, 0x3, "8ca6cb"}, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) syz_open_dev$vcsn(&(0x7f0000000080), 0x7fffffff, 0x40180) pidfd_send_signal(0xffffffffffffffff, 0x15, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) mq_open(0x0, 0x42, 0x1f0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x522, &(0x7f0000000c40)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc7i07Sbt3dIqLriz4tqOv7WNu0lCZNadJ1Whbt4n8ggoJPPvki+AcIyz74B8jAgL6ID6KiiM7og6DOlSQ3TidN2s5M23SazwdOc8799T3nhpzce3N6bwBj64WIeCMiJiLi5Ygo5tPTPMVeN7WXu3vnnaV2SiLL3vpbEkk+rbet9jYmI+JqvtpURHz9KxHfSg7Gbe7sri/WatWtvFxp1TcrzZ3d62v1xdXqanVjfn7utYXXF15dmM1yj9XOUi/z0y9/4b3PfPv3N/5y7Tvtan3+I1GIvnacpG7TC5190dPeR1unEWwEeu95YdQVAQDgWNrH+B+MiE90jv+LMdE5muszMYqaAQAAACcl++J0/CeJyAAAAIALK42I6UjScj4WYDrS9FJ+beDDcSWtNZqtT680tjeW2/MiSlFIV9Zq1dl8rHApCkm7PJePse2VX+krz0fEMxHxg+LlTrm81Kgtj/jaBwAAAIyLq33n//8spp380Qb8nwAAAABwfpWGFgAAAICLwik/AAAAXHz95//vjageAAAAwKn46ptvtlPWe/718ts72+uNt68vV5vr5fr2UnmpsbVZXm00Vjv37Ksftb1ao7H52djYvllpVZutSnNn90a9sb3RurH2wCOwAQAAgDP0zMff/00SEXufu9xJkd8HEOABfxx1BYCTNDHqCgAj8yh38f7UKdQDOHuFUVcAGLnkiPkG7wAAwJNv5qMHf//vPf/ftQG42Iz1AYDx4yneML4KRgDCWEsj4gPd7FPDlhn6+/+vhq7SJ8sibhX3T3F9EQAAztZ0JyVpOT8PmI40LZcjno5IS1FIVtZq1dn8/ODXxcJT7fJcZ83kyDHDAAAAAAAAAAAAAAAAAAAAAAAAAEBXliWRAQAAABdaRPrnpHM3/4iZ4kvT/dcHLiX/Ksaf8sKP3/rhzcVWa2uuPf3vnWd5XYqI1o/y6a8c91lgAAAAwGNL9obO6p6n569zZ1orAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMbA3TvvLPXSWcb965ciojQo/mRMdV6nohARV/6RxOS+9ZKImDiB+HvvRsSzg+IncS/LslJei/74aURcPuX4pc6uGR7/6gnEh3H2frv/eWPQ5y+NFzqvgz9/k3l6XMP7vzSP/GynnxvU/z19YGv1gTGeu/3zytD470Y8Nzm4/+n1v8mQ+C8e2Nq/syw7GOOb39jdHRY/+0nEzMDvn+SBWJVWfbPS3Nm9vlZfXK2uVjfm5+deW3h94dWF2crKWq2a/x0Y4/sf+8W9w9p/ZUD83/222/8e1v6Xhm008g4699/bN+98qJstDIp/7cWB379TMSR+mn/3fTLPt+fP9PJ73fx+z//s1vOHtX95yP4/6v2/dlj793n5a9/7wzEXBQDOQHNnd32xVqtuHZKZOsYyT2Lml1PnohoPmcm+233nzkt9HjXTPlq9P6XXqnNQsX2Z7MxiTcQ5afL/MyPtlgAAgFNw/6B/1DUBAAAAAAAAAAAAAAAAAACA8fUQNwabeNTbifXH3BtNUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvW/AAAA//9Xlt/c") r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) 1.695323284s ago: executing program 4 (id=3041): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$phonet_pipe(r0, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x8}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000001940)=ANY=[@ANYBLOB="aaaaaa01000000bbbbbbbbbb08004500001c000000f50111907800000000000000000000000000089078"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x107, 0x100, 0x100, 0x1, 0x4000}}) 1.679382775s ago: executing program 4 (id=3042): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@oldalloc}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x150) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x2000, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 1.574802445s ago: executing program 4 (id=3043): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000108000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="29b000000000000008001b000000000014001680100001800c0004"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000200)={r5, 0x1, 0x6, @multicast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x1) 1.546137897s ago: executing program 0 (id=3044): socket$netlink(0x10, 0x3, 0x4) r0 = socket(0x1e, 0x7, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000100ffffffff05000500020000000500010006"], 0x64}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r9}, 0x10) 1.421099959s ago: executing program 2 (id=3045): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00'], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x1, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000380)="c96508", 0x3}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000240), 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) 1.376581073s ago: executing program 0 (id=3046): mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='.\x00', 0x10000000, &(0x7f0000001dc0)={0x0, 0x70, 0x100000}, 0x20) 1.375073273s ago: executing program 2 (id=3047): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x1, 0x1006, 0x9, 0x0, 0x6, 0x0, 0x0, 0xcac1, 0xc2, 0x13, 0xd7, 0xc1b8511, 0x6, 0x10000001, 0x1]}, &(0x7f0000000100)=0x100) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="73e83307465657d15deb83419c1385f8dade134506187d33c6e898399b06c04dea3fbcc463dba6f04d8870fb05d36b595a0fe2c2ad7f05e2334d33930e64fe4f3e2d85ac17335cee1428cc2063454c990f5f8ef7beb107dba77f583e42c7b3992dd66134645a61e9c55dc0f785886be293c0251afa2581925aef0fc3f7f6d5c35b5ca9b4198d8fdc75cb60a6bc6bc4e85542ea2d5cd5f816c682054f5535be7bb826b65c103665bd99410cc1b2083a59b8f878288838c096a95cd61b2d6f38420e82c251d36da60a5f7120a56071cd", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="f65c640d6e4822c6112856261281bafb08d5f815648b7d29e06c4584d238daf23efa8a9f3e4f3e55476c47c46d884db0a6f99d7ba8a0b0932916c14f19658758c773525c6d48e1d561c733bdbeef6706616a37f7a0d556d141afecfb56e3c4d7d75d2a", @ANYRESOCT=r4, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r10, 0x0, 0x80000001}, 0x18) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) write$tcp_mem(r11, &(0x7f0000000400)={0x10, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) 1.351131806s ago: executing program 0 (id=3049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x20000000000000}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a30500000000"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.341640167s ago: executing program 0 (id=3050): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x1, 0x1006, 0x9, 0x0, 0x6, 0x0, 0x0, 0xcac1, 0xc2, 0x13, 0xd7, 0xc1b8511, 0x6, 0x10000001, 0x1]}, &(0x7f0000000100)=0x100) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="73e83307465657d15deb83419c1385f8dade134506187d33c6e898399b06c04dea3fbcc463dba6f04d8870fb05d36b595a0fe2c2ad7f05e2334d33930e64fe4f3e2d85ac17335cee1428cc2063454c990f5f8ef7beb107dba77f583e42c7b3992dd66134645a61e9c55dc0f785886be293c0251afa2581925aef0fc3f7f6d5c35b5ca9b4198d8fdc75cb60a6bc6bc4e85542ea2d5cd5f816c682054f5535be7bb826b65c103665bd99410cc1b2083a59b8f878288838c096a95cd61b2d6f38420e82c251d36da60a5f7120a56071cd", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xa, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x18) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES32=r7, @ANYRES32=r3, @ANYBLOB="f65c640d6e4822c6112856261281bafb08d5f815648b7d29e06c4584d238daf23efa8a9f3e4f3e55476c47c46d884db0a6f99d7ba8a0b0932916c14f19658758c773525c6d48e1d561c733bdbeef6706616a37f7a0d556d141afecfb56e3c4d7d75d2a", @ANYRESOCT=r4, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_local\x00', r10, 0x0, 0x80000001}, 0x18) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) write$tcp_mem(r11, &(0x7f0000000400)={0x10, 0x2d, 0x2, 0x3a, 0x0, 0x2c}, 0x48) r12 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000000) 971.180381ms ago: executing program 3 (id=3053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00'], 0x50) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x1, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000380)="c96508", 0x3}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000240), 0x4) r4 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8916, &(0x7f0000000000)={r4}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r4}) 970.349611ms ago: executing program 6 (id=3054): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) unshare(0x400) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380), 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sysvipc/shm\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000200)={&(0x7f0000000280)="91126f3ef8db30aa85e7b603e581e97c13de9b5f0f87297b6f2689517bc458022e097952cb72b7ea37e8dd959261714a7b9671c211ad60fd3f397155288aed67f2fd2da0daa78599be80a096d502d7181613dd73b08f1c9a79abb57d736c371ac9f9db5285fb693ef0cfcb319139abd78ecda4d0afd01e05e84914be6da6abdc4471a2d24f8874993897c6ef3ff9eb92a91f4c9195c7dc9146256bb9175c9dcb63127f712b55b243bdd5441655c64c5efa09a205212a977624d2c663d08cafce9a6c0b75f6da47ce52b4b3ebfa201560a6ee9586d4c89a7c3f23f7202d5448f6c737e2de31d84095d463", &(0x7f0000000000)=""/30, &(0x7f0000000080)="434cde184932c2b266db451d3d027bed655a76722b", &(0x7f0000000400)="e158617ca535184fd9ec2622b095cc978f7a64acb37de9cc32cd6bac9ec0aaccd22281b0970ce8f6116ab2d68076c7e0cbfadf8f93ffe66a28ad228926b704868b88b8fe6da683fe20fcac26ea2104998c3b803ac7a87f10e23361154f9fb17b28ff37067a91de5e58ebe29a6d0ec9afc1401a091ab358dcc34b9be44b804dca758a26705200b839c5012b7d83f36608f8b05fd9dd279019cb5895af15aa900e3ce90f4d1a485f7ad9e9dc2ec67bff8549f3a508fda45a10b7786ba9dda6390dda0f4fb1eea131", 0x2, r0}, 0x38) pread64(r0, &(0x7f0000000100)=""/164, 0xa4, 0xaa) write$P9_RLERROR(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) 966.135501ms ago: executing program 3 (id=3055): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r1, 0x6) (fail_nth: 4) 754.74866ms ago: executing program 3 (id=3056): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x80c40a, &(0x7f0000000180)={[{@noblock_validity}, {@dioread_lock}, {@init_itable_val={'init_itable', 0x3d, 0xb8f}}, {@nodiscard}, {@inlinecrypt}, {@usrjquota, 0x2e}, {@sb={'sb', 0x3d, 0x7}}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noload}], [], 0x2c}, 0x81, 0x463, &(0x7f0000000480)="$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") chdir(&(0x7f0000000140)='./file0\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) (fail_nth: 2) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) 662.507469ms ago: executing program 6 (id=3057): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000680)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18dbd40000000052d92d5bba336b84f903fa00000000000000000018110000", @ANYBLOB="8ebd82171f09d61b76eccc9a6ec4c23265f33748bbce2d49702534219cc70293d869f9598048f2a63ccedce66f514e3f89fd9006db94a062292d49f0a007be6e5cc9dafb00b8ffc9738ea48552363d42eceb558d06ae9de04e4a55224b07c9e96c219b7aad4922aaadd75e7f7375f7153aaefc3917e4208980c285a5d41087e0bc9a1de510e0869939f499f28c7c54ced1bffe42a4cdceb2d88dc73178e54aad34de0310bbe37b4707c463cc7bbae8f6a1e3f13fbd927dce148caa0707afdac646a1b47f8a109ad71b798bb8a9f0", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES16, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x8, 0x2, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x9, @local, 0x4}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x6149, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) close(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pimreg\x00', 0x5dcf70ef8daa5d0e}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r3, &(0x7f0000000540)={&(0x7f0000000300)={0x1d, r4, 0x3, {0x0, 0xf0, 0x3}, 0x1}, 0x18, &(0x7f0000000500)={&(0x7f0000000340)="74b8b7f23e1b84f344cb4cd4dce82a82611a11c596dc7e23001d6cb3687c070f220205b50b87561a64108e39eaa19c53fd2f75c82a90f469efc545d5345cc8f7d00513bfc1361940391b6a869e9a59ae9c86efc493c2beb28b63fd54aae4f3a6d1dc2ed65b9722e30f8a659924059eded2c9307ad23246de822207be653626519c07baff2dea3c344c42765a6806", 0x8e}, 0x1, 0x0, 0x0, 0x8000}, 0x4000810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) timer_create(0x2, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4051) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) 213.53483ms ago: executing program 3 (id=3058): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES64=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4f, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0a000000040000000100", @ANYRESOCT, @ANYBLOB="9d87f43a928c67088897db0c628dd71d7127de2a7abebe02b9b50e28e4d153e98b763849798b2ff5e8b13e02525e20e9222944904bba11dba35c6e86118995a92ce0c3e49cd338626374e222e7a61d4811118d4f9e37f79ee575cf0f6db2e6d1f09c2407c6a99caa195535211c61b67647e1584c81847794190c4e4a61c1c9f74327d97239f40bdf28c4db80b71a55d99be5203bf64b44dffe0737d75cf0cbb4c629b68a59aef99247c9b3c693b1985e0d6b0e48f2a38e029bdf5815869e975c54acbcfdf19210e7079481226726ff56d1297c966640841cbe5e7947e2929baffd", @ANYRES32, @ANYBLOB="8000"/20, @ANYBLOB='\x00'/28], 0x50) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000280), 0x75, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r5}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = socket$inet(0x2, 0x2, 0x1) connect$inet(r8, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) sendfile(r3, r3, 0x0, 0x800000009) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r10}, 0x18) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r11, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x902) 39.012036ms ago: executing program 6 (id=3059): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES16], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f8, 0x210, 0x100, 0x100, 0x310, 0x310, 0x310, 0x4, 0x0, {[{{@arp={@dev, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_hsr\x00', 'syz_tun\x00', {}, {}, 0x2}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "e22a239a6bb651a9837df08bc7f880efe7126f5d56b33dd54f5db150ee26"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@arp={@local, @local, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'batadv_slave_1\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "9695d92849c79fac2d070731112f73924a493f1567e5d8b4cd2c5f35f67b"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x448) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000010080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r5}, 0x18) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000010000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = getpgid(0x0) fcntl$setownex(r7, 0xf, &(0x7f0000000140)={0x2, r8}) syz_clone3(&(0x7f0000000180)={0x801400, &(0x7f00000000c0), 0x0, 0x0, {0x26}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmmsg$unix(r6, 0x0, 0x0, 0x408b1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xf1c38fa000000000}, 0x18) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r10}) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000000000900010073797a3000000000"], 0x34}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x26, 0x3, 0x4, 0x0, 0x0, 0x5, 0xb1130, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xfffffffffffff000, 0x7fff}, 0x101280, 0x7fff, 0x4003e3, 0x1, 0x9524, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, r2, 0xa) socket$inet_icmp(0x2, 0x2, 0x1) 38.425646ms ago: executing program 3 (id=3060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x20000000000000}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a30500000000"], 0x178) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 26.576927ms ago: executing program 3 (id=3061): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0xb, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x101, 0xd99d}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$inet6(0xa, 0x5, 0x3) sendto$packet(r1, 0x0, 0x0, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) (async) sendto$packet(r1, 0x0, 0x0, 0x830, &(0x7f0000000440)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r5}, &(0x7f00000005c0), &(0x7f0000000600)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r5}, &(0x7f00000005c0), &(0x7f0000000600)='%pB \x00'}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 0s ago: executing program 6 (id=3062): r0 = fsmount(0xffffffffffffffff, 0x1, 0x8) fchdir(r0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8000004, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = dup2(r2, r2) write$selinux_load(r3, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x43) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x0, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00', @mcast2, 0x1, 0x6, 0x0, 0x100, 0x4, 0x184610008}) bpf$MAP_CREATE(0x0, 0x0, 0x50) kernel console output (not intermixed with test programs): XT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.977045][ T3314] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 189.990070][ T3314] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 189.999612][ T3314] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 190.059718][T11198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2685'. [ 190.152820][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2687'. [ 190.305584][ T7043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.316218][ T7043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.326585][ T7043] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 190.335598][ T7043] bond0 (unregistering): Released all slaves [ 190.345569][ T7043] bond1 (unregistering): (slave veth9): Releasing active interface [ 190.354969][ T7043] bond1 (unregistering): Released all slaves [ 190.364634][T11200] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 190.377478][T11165] chnl_net:caif_netlink_parms(): no params data found [ 190.431070][ T7043] hsr_slave_0: left promiscuous mode [ 190.446153][ T7043] veth1_macvtap: left promiscuous mode [ 190.451659][ T7043] veth0_macvtap: left promiscuous mode [ 190.461334][ T7043] veth1_vlan: left promiscuous mode [ 190.468508][ T7043] veth0_vlan: left promiscuous mode [ 190.535276][ T7043] team0 (unregistering): Port device team_slave_0 removed [ 190.557997][ T3476] page_pool_release_retry() stalled pool shutdown: id 52, 1 inflight 60 sec [ 190.567027][T11216] loop3: detected capacity change from 0 to 512 [ 190.581696][T11216] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.598619][T11216] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2692: iget: bogus i_mode (3355) [ 190.612189][T11216] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2692: couldn't read orphan inode 15 (err -117) [ 190.624753][T11216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.672203][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.688661][T11165] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.695930][T11165] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.705475][T11165] bridge_slave_0: entered allmulticast mode [ 190.712112][T11165] bridge_slave_0: entered promiscuous mode [ 190.719634][T11165] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.726781][T11165] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.734192][T11165] bridge_slave_1: entered allmulticast mode [ 190.740889][T11165] bridge_slave_1: entered promiscuous mode [ 190.765296][T11165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.776294][T11233] loop3: detected capacity change from 0 to 736 [ 190.784691][T11165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.824340][T11165] team0: Port device team_slave_0 added [ 190.839122][T11165] team0: Port device team_slave_1 added [ 190.874031][ T7043] IPVS: stop unused estimator thread 0... [ 190.880583][T11165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.887688][T11165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.913718][T11165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.916897][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2697'. [ 190.982061][T11165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.989112][T11165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.015188][T11165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.084984][T11230] loop0: detected capacity change from 0 to 32768 [ 191.122388][T11165] hsr_slave_0: entered promiscuous mode [ 191.128517][T11165] hsr_slave_1: entered promiscuous mode [ 191.146470][T11230] loop0: p1 p3 < > [ 191.166970][ T3004] loop0: p1 p3 < > [ 191.201305][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 191.218513][ T3682] udevd[3682]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 191.279565][ T3492] udevd[3492]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 191.292430][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 191.463803][T11289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2705'. [ 191.486158][T11291] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2702'. [ 191.514581][T11296] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2705'. [ 191.563624][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2715'. [ 191.576926][T11300] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2715'. [ 191.592944][T11165] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.603677][T11165] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.621338][T11165] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.664506][T11305] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 191.683198][T11165] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.861299][T11165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.874539][T11165] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.894994][ T7064] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.902102][ T7064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.954930][T11165] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.965411][T11165] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.044889][ T7064] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.051981][ T7064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.120647][T11343] loop3: detected capacity change from 0 to 1024 [ 192.134502][T11343] EXT4-fs: Ignoring removed bh option [ 192.140042][T11343] EXT4-fs: inline encryption not supported [ 192.150067][T11165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.157661][T11343] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.179391][T11343] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 192.202203][T11343] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.2714: lblock 2 mapped to illegal pblock 2 (length 1) [ 192.216416][T11343] __quota_error: 453 callbacks suppressed [ 192.216483][T11343] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 192.233760][T11343] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.2714: lblock 0 mapped to illegal pblock 48 (length 1) [ 192.265773][T11343] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 192.274675][T11343] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2714: Failed to acquire dquot type 0 [ 192.316211][T11343] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 192.339455][T11343] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.2714: mark_inode_dirty error [ 192.367113][T11343] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 192.386681][T11343] EXT4-fs (loop3): 1 orphan inode deleted [ 192.403170][ T7064] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:51: lblock 1 mapped to illegal pblock 1 (length 1) [ 192.427947][T11343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.447785][ T7064] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 192.456299][ T7064] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:51: Failed to release dquot type 0 [ 192.473545][T11165] veth0_vlan: entered promiscuous mode [ 192.483599][T11165] veth1_vlan: entered promiscuous mode [ 192.500730][T11165] veth0_macvtap: entered promiscuous mode [ 192.510661][T11165] veth1_macvtap: entered promiscuous mode [ 192.526370][T11165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.536161][ T29] audit: type=1326 audit(192.515:15129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11278 comm="syz.0.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbb45f749 code=0x7ffc0000 [ 192.549612][T11165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.569610][ T29] audit: type=1326 audit(192.535:15130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11278 comm="syz.0.2702" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6cbb45f749 code=0x7ffc0000 [ 192.592195][ T7033] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.612701][ T7033] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.637146][ T29] audit: type=1400 audit(192.605:15131): avc: denied { mounton } for pid=11165 comm="syz-executor" path="/root/syzkaller.jjBsk8/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 192.661240][ T29] audit: type=1400 audit(192.605:15132): avc: denied { mount } for pid=11165 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 192.682970][ T29] audit: type=1400 audit(192.605:15133): avc: denied { mount } for pid=11165 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 192.691313][ T7038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.704613][ T29] audit: type=1400 audit(192.605:15134): avc: denied { mounton } for pid=11165 comm="syz-executor" path="/root/syzkaller.jjBsk8/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 192.739677][ T29] audit: type=1400 audit(192.605:15135): avc: denied { mounton } for pid=11165 comm="syz-executor" path="/root/syzkaller.jjBsk8/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 192.774881][ T7038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.861116][T11403] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 192.931791][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.942765][ T3314] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 192.956615][ T3314] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 192.967459][ T3314] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 193.446785][T11424] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 193.453429][T11424] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.461166][T11424] vhci_hcd vhci_hcd.0: Device attached [ 193.493927][T11428] vhci_hcd: connection closed [ 193.494120][ T7037] vhci_hcd vhci_hcd.3: stop threads [ 193.504100][ T7037] vhci_hcd vhci_hcd.3: release socket [ 193.509527][ T7037] vhci_hcd vhci_hcd.3: disconnect device [ 193.551364][T11426] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 193.557999][T11426] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 193.565675][T11426] vhci_hcd vhci_hcd.0: Device attached [ 193.572627][T11431] vhci_hcd: connection closed [ 193.572826][ T12] vhci_hcd vhci_hcd.0: stop threads [ 193.582873][ T12] vhci_hcd vhci_hcd.0: release socket [ 193.588394][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 194.315732][T11453] __nla_validate_parse: 5 callbacks suppressed [ 194.315750][T11453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2732'. [ 194.352087][T11456] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2733'. [ 194.405195][T11451] random: crng reseeded on system resumption [ 194.444474][T11461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2735'. [ 194.546076][T11463] loop3: detected capacity change from 0 to 512 [ 194.560886][T11463] EXT4-fs (loop3): orphan cleanup on readonly fs [ 194.568337][T11463] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2736: bg 0: block 127: padding at end of block bitmap is not set [ 194.589324][T11463] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2736: corrupted inode contents [ 194.623464][T11463] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 194.632451][T11463] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.2736: corrupted inode contents [ 194.644850][T11463] EXT4-fs error (device loop3): ext4_evict_inode:301: inode #15: comm syz.3.2736: mark_inode_dirty error [ 194.708374][T11463] EXT4-fs (loop3): 1 orphan inode deleted [ 194.715479][T11463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 194.785368][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.820991][T11478] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2742'. [ 194.845443][T11483] FAULT_INJECTION: forcing a failure. [ 194.845443][T11483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.858560][T11483] CPU: 1 UID: 0 PID: 11483 Comm: syz.4.2744 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 194.858591][T11483] Tainted: [W]=WARN [ 194.858599][T11483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 194.858669][T11483] Call Trace: [ 194.858675][T11483] [ 194.858683][T11483] __dump_stack+0x1d/0x30 [ 194.858712][T11483] dump_stack_lvl+0x95/0xd0 [ 194.858763][T11483] dump_stack+0x15/0x1b [ 194.858803][T11483] should_fail_ex+0x265/0x280 [ 194.858828][T11483] should_fail+0xb/0x20 [ 194.858959][T11483] should_fail_usercopy+0x1a/0x20 [ 194.858991][T11483] _copy_from_user+0x1c/0xb0 [ 194.859016][T11483] __sys_sendto+0x19e/0x330 [ 194.859059][T11483] __x64_sys_sendto+0x76/0x90 [ 194.859080][T11483] x64_sys_call+0x29a7/0x3000 [ 194.859101][T11483] do_syscall_64+0xca/0x2b0 [ 194.859136][T11483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.859197][T11483] RIP: 0033:0x7fa24640f749 [ 194.859214][T11483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.859256][T11483] RSP: 002b:00007fa244e77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 194.859278][T11483] RAX: ffffffffffffffda RBX: 00007fa246665fa0 RCX: 00007fa24640f749 [ 194.859288][T11483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 194.859334][T11483] RBP: 00007fa244e77090 R08: 0000200000000140 R09: 000000000000001c [ 194.859348][T11483] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 194.859362][T11483] R13: 00007fa246666038 R14: 00007fa246665fa0 R15: 00007ffd74db6598 [ 194.859383][T11483] [ 195.064687][T11489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2746'. [ 195.202638][T11495] loop4: detected capacity change from 0 to 512 [ 195.211907][T11495] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.287262][T11496] loop3: detected capacity change from 0 to 1024 [ 195.329330][T11496] EXT4-fs: Ignoring removed bh option [ 195.335114][T11496] EXT4-fs: inline encryption not supported [ 195.341353][T11496] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.353448][T11495] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2749: iget: bogus i_mode (3355) [ 195.367501][T11495] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2749: couldn't read orphan inode 15 (err -117) [ 195.380770][T11495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.437879][T11496] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 195.455588][T11496] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.2748: lblock 2 mapped to illegal pblock 2 (length 1) [ 195.494841][T11165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.585005][T11496] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.2748: lblock 0 mapped to illegal pblock 48 (length 1) [ 195.664268][T11496] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2748: Failed to acquire dquot type 0 [ 195.728554][T11496] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 195.777421][T11496] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.2748: mark_inode_dirty error [ 195.840517][T11496] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 195.893605][T11496] EXT4-fs (loop3): 1 orphan inode deleted [ 195.927554][T11496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.031631][ T7033] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 196.047381][ T7033] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 0 [ 196.209699][T11519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2757'. [ 196.242718][ T3425] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 196.260410][ T3425] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 196.308165][T11523] fido_id[11523]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 196.374671][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.384256][ T3314] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 196.419141][ T3314] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 196.439916][ T3314] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 196.461201][T11534] loop4: detected capacity change from 0 to 512 [ 196.483729][T11534] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.505500][T11534] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2763: iget: bogus i_mode (3355) [ 196.517458][T11534] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2763: couldn't read orphan inode 15 (err -117) [ 196.534687][T11534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.566507][T11165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.639200][T11541] loop0: detected capacity change from 0 to 512 [ 196.674160][T11541] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 196.713579][T11541] EXT4-fs (loop0): 1 truncate cleaned up [ 196.731233][T11541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.906747][T11548] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 196.936151][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.978441][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2770'. [ 196.991806][T11550] loop2: detected capacity change from 0 to 2048 [ 197.035595][ T3305] loop2: p1 < > p3 p4 [ 197.046223][ T3305] loop2: p3 start 458752 is beyond EOD, truncated [ 197.052778][ T3305] loop2: p4 start 268435456 is beyond EOD, truncated [ 197.108540][T11550] loop2: p1 < > p3 p4 [ 197.137927][T11550] loop2: p3 start 458752 is beyond EOD, truncated [ 197.144450][T11550] loop2: p4 start 268435456 is beyond EOD, truncated [ 197.153741][T11550] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2769'. [ 197.215158][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 197.245713][T11559] syzkaller0: entered allmulticast mode [ 197.323256][T11559] syzkaller0: entered promiscuous mode [ 197.363616][T11559] syzkaller0 (unregistering): left promiscuous mode [ 197.370331][T11559] syzkaller0 (unregistering): left allmulticast mode [ 197.433833][T11564] loop0: detected capacity change from 0 to 1024 [ 197.443808][T11564] EXT4-fs: Ignoring removed bh option [ 197.449244][T11564] EXT4-fs: inline encryption not supported [ 197.509321][T11564] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.530921][T11564] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 197.540218][T11564] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.2772: lblock 2 mapped to illegal pblock 2 (length 1) [ 197.554866][T11564] __quota_error: 75 callbacks suppressed [ 197.554880][T11564] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 197.568914][T11564] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.2772: lblock 0 mapped to illegal pblock 48 (length 1) [ 197.596583][T11564] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 197.605421][T11564] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2772: Failed to acquire dquot type 0 [ 197.616891][T11564] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 197.626627][T11564] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.2772: mark_inode_dirty error [ 197.638382][T11564] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 197.649228][T11564] EXT4-fs (loop0): 1 orphan inode deleted [ 197.655541][T11564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.668503][ T12] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.702418][ T12] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 197.711020][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 197.984510][ T29] audit: type=1326 audit(197.965:15208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.6.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03eaaf749 code=0x7ffc0000 [ 197.984725][T11590] FAULT_INJECTION: forcing a failure. [ 197.984725][T11590] name failslab, interval 1, probability 0, space 0, times 0 [ 198.007650][ T29] audit: type=1326 audit(197.965:15209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.6.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd03eaadf90 code=0x7ffc0000 [ 198.020332][T11590] CPU: 0 UID: 0 PID: 11590 Comm: syz.6.2782 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 198.020516][T11590] Tainted: [W]=WARN [ 198.020533][T11590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 198.020568][T11590] Call Trace: [ 198.020580][T11590] [ 198.020599][T11590] __dump_stack+0x1d/0x30 [ 198.020663][T11590] dump_stack_lvl+0x95/0xd0 [ 198.020725][T11590] dump_stack+0x15/0x1b [ 198.020791][T11590] should_fail_ex+0x265/0x280 [ 198.020863][T11590] should_failslab+0x8c/0xb0 [ 198.020925][T11590] kmem_cache_alloc_noprof+0x69/0x4b0 [ 198.020956][T11590] ? audit_log_start+0x342/0x720 [ 198.021064][T11590] audit_log_start+0x342/0x720 [ 198.021118][T11590] ? kstrtouint+0x76/0xc0 [ 198.021168][T11590] audit_seccomp+0x48/0x100 [ 198.021317][T11590] ? __seccomp_filter+0x832/0x1260 [ 198.021422][T11590] __seccomp_filter+0x843/0x1260 [ 198.021496][T11590] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 198.021576][T11590] ? vfs_write+0x7e8/0x960 [ 198.021621][T11590] ? __rcu_read_unlock+0x4f/0x70 [ 198.021703][T11590] ? __fget_files+0x184/0x1c0 [ 198.021768][T11590] __secure_computing+0x82/0x150 [ 198.021940][T11590] syscall_trace_enter+0xcf/0x1e0 [ 198.022009][T11590] do_syscall_64+0xa4/0x2b0 [ 198.022148][T11590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.022223][T11590] RIP: 0033:0x7fd03eaaf749 [ 198.022266][T11590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.022323][T11590] RSP: 002b:00007fd03d517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 198.022370][T11590] RAX: ffffffffffffffda RBX: 00007fd03ed05fa0 RCX: 00007fd03eaaf749 [ 198.022405][T11590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.022438][T11590] RBP: 00007fd03d517090 R08: 0000000000000000 R09: 0000000000000000 [ 198.022473][T11590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.022501][T11590] R13: 00007fd03ed06038 R14: 00007fd03ed05fa0 R15: 00007ffd0ff5de48 [ 198.022579][T11590] [ 198.022603][T11590] audit: audit_lost=11 audit_rate_limit=0 audit_backlog_limit=64 [ 198.121751][T11584] loop2: detected capacity change from 0 to 1024 [ 198.126414][T11590] audit: out of memory in audit_log_start [ 198.132505][T11584] EXT4-fs: Ignoring removed bh option [ 198.316477][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.330158][ T29] audit: type=1326 audit(197.965:15210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.6.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd03eaae1ff code=0x7ffc0000 [ 198.353023][ T29] audit: type=1326 audit(198.175:15211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.6.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd03eaae15c code=0x7ffc0000 [ 198.374149][T11584] EXT4-fs: inline encryption not supported [ 198.376046][ T29] audit: type=1326 audit(198.175:15212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.6.2782" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd03eaae1ff code=0x7ffc0000 [ 198.413195][T11584] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 198.415554][ T3318] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 198.453612][ T3318] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 198.463708][ T3318] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 198.483513][T11584] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 198.502289][T11584] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.2779: lblock 2 mapped to illegal pblock 2 (length 1) [ 198.540113][T11584] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.2779: lblock 0 mapped to illegal pblock 48 (length 1) [ 198.573367][T11584] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2779: Failed to acquire dquot type 0 [ 198.593409][T11584] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 198.612764][T11584] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.2779: mark_inode_dirty error [ 198.637908][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2785'. [ 198.649771][T11584] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 198.660425][T11584] EXT4-fs (loop2): 1 orphan inode deleted [ 198.661618][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.667756][T11584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.688526][ T7037] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 198.693713][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2785'. [ 198.723254][ T7037] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 0 [ 198.745112][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.795761][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.844965][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.857943][T11596] chnl_net:caif_netlink_parms(): no params data found [ 198.915051][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.924550][ T3316] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 198.938070][ T3316] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 198.971742][T11596] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.978885][T11596] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.997357][ T3316] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 199.008865][T11596] bridge_slave_0: entered allmulticast mode [ 199.015816][T11596] bridge_slave_0: entered promiscuous mode [ 199.022720][T11596] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.029853][T11596] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.037181][T11596] bridge_slave_1: entered allmulticast mode [ 199.053206][T11596] bridge_slave_1: entered promiscuous mode [ 199.065534][ T12] bridge_slave_1: left allmulticast mode [ 199.071290][ T12] bridge_slave_1: left promiscuous mode [ 199.077028][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.103748][ T12] bridge_slave_0: left allmulticast mode [ 199.109422][ T12] bridge_slave_0: left promiscuous mode [ 199.115246][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.602632][T11647] loop3: detected capacity change from 0 to 32768 [ 199.625450][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.635834][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.645415][ T12] bond0 (unregistering): Released all slaves [ 199.654359][ T3305] loop3: p1 p3 < > [ 199.662454][T11647] loop3: p1 p3 < > [ 199.683296][T11625] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 199.692551][T11596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.708517][ T12] tipc: Left network mode [ 199.724123][T11596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.738796][ T12] IPVS: stopping master sync thread 9923 ... [ 199.749594][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.757183][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.767412][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.773425][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 199.774945][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.801143][ T3682] udevd[3682]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 199.816815][ T12] veth1_vlan: left promiscuous mode [ 199.822138][ T12] veth0_vlan: left promiscuous mode [ 199.834228][ T3682] udevd[3682]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 199.840627][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 199.856837][T11653] __nla_validate_parse: 2 callbacks suppressed [ 199.856849][T11653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2796'. [ 199.910057][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2796'. [ 199.954214][T11666] loop3: detected capacity change from 0 to 512 [ 199.961716][T11666] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.978299][T11666] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2798: iget: bogus i_mode (3355) [ 199.988332][ T12] team0 (unregistering): Port device team_slave_1 removed [ 199.997367][T11666] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2798: couldn't read orphan inode 15 (err -117) [ 200.019471][T11666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.032420][ T12] team0 (unregistering): Port device team_slave_0 removed [ 200.055437][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.114758][T11596] team0: Port device team_slave_0 added [ 200.121561][T11596] team0: Port device team_slave_1 added [ 200.139518][T11596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.146588][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.172531][T11596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.213892][T11596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.220954][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.246930][T11596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.318072][T11596] hsr_slave_0: entered promiscuous mode [ 200.325273][T11596] hsr_slave_1: entered promiscuous mode [ 200.331603][T11596] debugfs: 'hsr0' already exists in 'hsr' [ 200.337402][T11596] Cannot create hsr debugfs directory [ 200.371284][T11678] loop2: detected capacity change from 0 to 1024 [ 200.378351][T11678] EXT4-fs: Ignoring removed bh option [ 200.384000][T11678] EXT4-fs: inline encryption not supported [ 200.397686][T11678] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 200.411957][T11678] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 200.431132][T11678] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.2801: lblock 2 mapped to illegal pblock 2 (length 1) [ 200.454931][T11688] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 200.456826][T11678] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.2801: lblock 0 mapped to illegal pblock 48 (length 1) [ 200.488083][T11678] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.2801: Failed to acquire dquot type 0 [ 200.499679][T11678] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 200.509612][T11678] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.2801: mark_inode_dirty error [ 200.521071][T11678] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 200.531574][T11678] EXT4-fs (loop2): 1 orphan inode deleted [ 200.540647][ T12] IPVS: stop unused estimator thread 0... [ 200.542493][T11678] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.558935][ T7038] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:25: lblock 1 mapped to illegal pblock 1 (length 1) [ 200.575485][ T7038] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:25: Failed to release dquot type 0 [ 200.756626][T11714] loop3: detected capacity change from 0 to 1024 [ 200.763478][T11714] EXT4-fs: Ignoring removed bh option [ 200.768934][T11714] EXT4-fs: inline encryption not supported [ 200.787942][T11714] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 200.806796][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2810'. [ 200.816367][T11728] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2810'. [ 200.826202][T11714] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 200.836512][T11714] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.2807: lblock 2 mapped to illegal pblock 2 (length 1) [ 200.853205][T11714] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.2807: lblock 0 mapped to illegal pblock 48 (length 1) [ 200.869670][T11596] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.876950][T11714] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2807: Failed to acquire dquot type 0 [ 200.888524][T11714] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 200.889621][T11596] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.905837][T11714] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.2807: mark_inode_dirty error [ 200.917771][T11714] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 200.928769][T11714] EXT4-fs (loop3): 1 orphan inode deleted [ 200.934971][T11714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.973369][T11596] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.985839][ T7037] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 201.010048][T11596] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.028173][T11741] loop6: detected capacity change from 0 to 128 [ 201.036123][ T7037] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 0 [ 201.058222][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.070041][ T3316] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 201.083753][ T3316] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 201.093566][T11741] tipc: Started in network mode [ 201.095709][ T3316] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 201.098437][T11741] tipc: Node identity 4, cluster identity 4711 [ 201.098450][T11741] tipc: Node number set to 4 [ 201.156375][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2815'. [ 201.169849][T11596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.194487][T11596] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.216800][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.223936][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.238133][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.245367][ T7038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.277157][T11764] 9p: Could not find request transport: f† [ 201.317013][T11762] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 201.340095][T11596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.421380][T11794] FAULT_INJECTION: forcing a failure. [ 201.421380][T11794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.434664][T11794] CPU: 1 UID: 0 PID: 11794 Comm: syz.6.2820 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 201.434699][T11794] Tainted: [W]=WARN [ 201.434707][T11794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.434724][T11794] Call Trace: [ 201.434730][T11794] [ 201.434737][T11794] __dump_stack+0x1d/0x30 [ 201.434802][T11794] dump_stack_lvl+0x95/0xd0 [ 201.434824][T11794] dump_stack+0x15/0x1b [ 201.434841][T11794] should_fail_ex+0x265/0x280 [ 201.434863][T11794] should_fail+0xb/0x20 [ 201.434958][T11794] should_fail_usercopy+0x1a/0x20 [ 201.434984][T11794] _copy_from_user+0x1c/0xb0 [ 201.435012][T11794] ___sys_sendmsg+0xc1/0x1d0 [ 201.435132][T11794] __x64_sys_sendmsg+0xd4/0x160 [ 201.435175][T11794] x64_sys_call+0x17ba/0x3000 [ 201.435204][T11794] do_syscall_64+0xca/0x2b0 [ 201.435257][T11794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.435277][T11794] RIP: 0033:0x7fd03eaaf749 [ 201.435290][T11794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.435309][T11794] RSP: 002b:00007fd03d517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.435331][T11794] RAX: ffffffffffffffda RBX: 00007fd03ed05fa0 RCX: 00007fd03eaaf749 [ 201.435362][T11794] RDX: 0000000004008840 RSI: 0000200000000000 RDI: 0000000000000005 [ 201.435376][T11794] RBP: 00007fd03d517090 R08: 0000000000000000 R09: 0000000000000000 [ 201.435390][T11794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.435401][T11794] R13: 00007fd03ed06038 R14: 00007fd03ed05fa0 R15: 00007ffd0ff5de48 [ 201.435419][T11794] [ 201.662743][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.680850][ T3314] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 201.695976][ T3314] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 201.706119][ T3314] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 201.744684][T11596] veth0_vlan: entered promiscuous mode [ 201.754030][T11596] veth1_vlan: entered promiscuous mode [ 201.770908][T11596] veth0_macvtap: entered promiscuous mode [ 201.782088][T11596] veth1_macvtap: entered promiscuous mode [ 201.812104][T11596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.827289][T11799] loop6: detected capacity change from 0 to 512 [ 201.846228][T11799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 201.856799][T11596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.877947][T11799] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2822: iget: bogus i_mode (3355) [ 201.890048][ T875] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.903230][T11799] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2822: couldn't read orphan inode 15 (err -117) [ 201.936269][ T875] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.946997][T11799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.956944][ T875] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.971176][ T875] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.994414][T11804] No such timeout policy "syz1" [ 202.019440][ T5978] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.084644][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2825'. [ 202.265070][T11824] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2829'. [ 202.319770][T11826] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 202.524579][T11848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2839'. [ 202.538285][ T5247] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 202.546910][ T5247] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 202.562515][T11848] loop2: detected capacity change from 0 to 2048 [ 202.584226][T11853] loop6: detected capacity change from 0 to 1024 [ 202.591450][T11848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.591914][T11853] EXT4-fs: Ignoring removed bh option [ 202.609489][T11853] EXT4-fs: inline encryption not supported [ 202.616512][T11853] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.631235][T11853] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 202.643996][T11853] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.2838: lblock 2 mapped to illegal pblock 2 (length 1) [ 202.658849][T11853] __quota_error: 55 callbacks suppressed [ 202.658864][T11853] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 202.673025][T11853] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.2838: lblock 0 mapped to illegal pblock 48 (length 1) [ 202.674120][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.696343][T11853] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 202.705294][T11853] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.2838: Failed to acquire dquot type 0 [ 202.717368][T11853] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 202.728488][T11853] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.2838: mark_inode_dirty error [ 202.740467][T11853] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 202.753978][T11853] EXT4-fs (loop6): 1 orphan inode deleted [ 202.761452][T11853] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.778458][T11859] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 202.785973][ T7033] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.817663][ T7033] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 202.826211][ T7033] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 0 [ 202.870018][T11865] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.902725][ T29] audit: type=1326 audit(202.875:15259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.0.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482efef749 code=0x7ffc0000 [ 202.925915][ T29] audit: type=1326 audit(202.875:15260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.0.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482efef749 code=0x7ffc0000 [ 202.948302][T11870] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 202.949084][ T29] audit: type=1326 audit(202.875:15261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.0.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482efef749 code=0x7ffc0000 [ 202.979692][ T29] audit: type=1326 audit(202.875:15262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.0.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f482efef749 code=0x7ffc0000 [ 203.002747][ T29] audit: type=1326 audit(202.875:15263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.0.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482efef749 code=0x7ffc0000 [ 203.025753][ T29] audit: type=1326 audit(202.875:15264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.0.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482efef749 code=0x7ffc0000 [ 203.048907][ T29] audit: type=1326 audit(202.875:15265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.0.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482efef749 code=0x7ffc0000 [ 203.248885][T11875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2846'. [ 203.258065][T11875] FAULT_INJECTION: forcing a failure. [ 203.258065][T11875] name failslab, interval 1, probability 0, space 0, times 0 [ 203.270807][T11875] CPU: 0 UID: 0 PID: 11875 Comm: syz.3.2846 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 203.270882][T11875] Tainted: [W]=WARN [ 203.270887][T11875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.270899][T11875] Call Trace: [ 203.270904][T11875] [ 203.270911][T11875] __dump_stack+0x1d/0x30 [ 203.271007][T11875] dump_stack_lvl+0x95/0xd0 [ 203.271033][T11875] dump_stack+0x15/0x1b [ 203.271053][T11875] should_fail_ex+0x265/0x280 [ 203.271079][T11875] should_failslab+0x8c/0xb0 [ 203.271139][T11875] __kmalloc_cache_noprof+0x65/0x4c0 [ 203.271162][T11875] ? nsim_fib_event_nb+0x1a0/0xcb0 [ 203.271179][T11875] ? format_decode+0xae/0x540 [ 203.271201][T11875] nsim_fib_event_nb+0x1a0/0xcb0 [ 203.271257][T11875] ? vsnprintf+0x7ee/0x860 [ 203.271282][T11875] ? fib_nh_match+0x7d1/0xa20 [ 203.271418][T11875] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 203.271441][T11875] atomic_notifier_call_chain+0x76/0x1c0 [ 203.271520][T11875] call_fib_notifiers+0x65/0xa0 [ 203.271539][T11875] call_fib4_notifiers+0x77/0xb0 [ 203.271631][T11875] fib_table_delete+0x745/0x830 [ 203.271743][T11875] fib_magic+0x1ba/0x1f0 [ 203.271773][T11875] fib_del_ifaddr+0x8fc/0xa90 [ 203.271797][T11875] ? queue_work_on+0xd1/0x130 [ 203.271834][T11875] fib_inetaddr_event+0x79/0x1f0 [ 203.271859][T11875] ? inetaddr_event+0x71/0xa0 [ 203.271923][T11875] ? __pfx_fib_inetaddr_event+0x10/0x10 [ 203.271980][T11875] blocking_notifier_call_chain+0x9b/0x1f0 [ 203.272147][T11875] __inet_del_ifa+0x473/0x750 [ 203.272164][T11875] ? ip_mc_destroy_dev+0x259/0x290 [ 203.272196][T11875] inetdev_event+0x620/0xba0 [ 203.272218][T11875] ? __pfx_ib_netdevice_event+0x10/0x10 [ 203.272294][T11875] ? ib_netdevice_event+0xeb/0x350 [ 203.272323][T11875] ? __pfx_arp_netdev_event+0x10/0x10 [ 203.272364][T11875] ? __pfx_inetdev_event+0x10/0x10 [ 203.272387][T11875] raw_notifier_call_chain+0x6f/0x1b0 [ 203.272418][T11875] ? unregister_netdevice_many_notify+0xe8c/0x16d0 [ 203.272528][T11875] unregister_netdevice_many_notify+0xea0/0x16d0 [ 203.272570][T11875] ? __pfx_veth_dellink+0x10/0x10 [ 203.272606][T11875] rtnl_dellink+0x3e1/0x5c0 [ 203.272671][T11875] ? selinux_capable+0x31/0x40 [ 203.272695][T11875] ? security_capable+0x83/0x90 [ 203.272732][T11875] ? ns_capable+0x7d/0xb0 [ 203.272764][T11875] ? __pfx_rtnl_dellink+0x10/0x10 [ 203.272786][T11875] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 203.272814][T11875] ? avc_has_perm_noaudit+0xab/0x130 [ 203.272838][T11875] netlink_rcv_skb+0x123/0x220 [ 203.272886][T11875] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 203.272919][T11875] rtnetlink_rcv+0x1c/0x30 [ 203.272999][T11875] netlink_unicast+0x5c0/0x690 [ 203.273038][T11875] netlink_sendmsg+0x58b/0x6b0 [ 203.273105][T11875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.273250][T11875] __sock_sendmsg+0x145/0x180 [ 203.273276][T11875] ____sys_sendmsg+0x31e/0x4a0 [ 203.273318][T11875] ___sys_sendmsg+0x17b/0x1d0 [ 203.273419][T11875] __x64_sys_sendmsg+0xd4/0x160 [ 203.273462][T11875] x64_sys_call+0x17ba/0x3000 [ 203.273488][T11875] do_syscall_64+0xca/0x2b0 [ 203.273538][T11875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.273624][T11875] RIP: 0033:0x7f0e1922f749 [ 203.273640][T11875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.273658][T11875] RSP: 002b:00007f0e17c97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.273677][T11875] RAX: ffffffffffffffda RBX: 00007f0e19485fa0 RCX: 00007f0e1922f749 [ 203.273689][T11875] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 203.273760][T11875] RBP: 00007f0e17c97090 R08: 0000000000000000 R09: 0000000000000000 [ 203.273772][T11875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.273785][T11875] R13: 00007f0e19486038 R14: 00007f0e19485fa0 R15: 00007fffaa7aa338 [ 203.273805][T11875] [ 203.655039][ T5978] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.664511][T11875] hsr_slave_1 (unregistering): left promiscuous mode [ 203.671723][ T5978] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 203.692590][ T5978] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 203.705067][ T5978] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 203.758925][T11882] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 203.923331][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2857'. [ 203.974528][T11904] random: crng reseeded on system resumption [ 204.038041][T11916] loop4: detected capacity change from 0 to 128 [ 204.139336][T11905] random: crng reseeded on system resumption [ 204.172297][T11918] bio_check_eod: 102 callbacks suppressed [ 204.172310][T11918] syz.4.2862: attempt to access beyond end of device [ 204.172310][T11918] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 204.191900][T11918] syz.4.2862: attempt to access beyond end of device [ 204.191900][T11918] loop4: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 204.205461][T11918] syz.4.2862: attempt to access beyond end of device [ 204.205461][T11918] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 204.219032][T11918] syz.4.2862: attempt to access beyond end of device [ 204.219032][T11918] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 204.232550][T11918] syz.4.2862: attempt to access beyond end of device [ 204.232550][T11918] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 204.246163][T11918] syz.4.2862: attempt to access beyond end of device [ 204.246163][T11918] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 204.260541][T11918] syz.4.2862: attempt to access beyond end of device [ 204.260541][T11918] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 204.274559][T11918] syz.4.2862: attempt to access beyond end of device [ 204.274559][T11918] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 204.288805][T11918] syz.4.2862: attempt to access beyond end of device [ 204.288805][T11918] loop4: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 204.306694][T11918] syz.4.2862: attempt to access beyond end of device [ 204.306694][T11918] loop4: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 204.322970][T11922] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 204.575177][T11949] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 204.638349][T11956] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 204.652802][T11959] FAULT_INJECTION: forcing a failure. [ 204.652802][T11959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.665925][T11959] CPU: 0 UID: 0 PID: 11959 Comm: syz.6.2877 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.665958][T11959] Tainted: [W]=WARN [ 204.666000][T11959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.666012][T11959] Call Trace: [ 204.666017][T11959] [ 204.666024][T11959] __dump_stack+0x1d/0x30 [ 204.666047][T11959] dump_stack_lvl+0x95/0xd0 [ 204.666146][T11959] dump_stack+0x15/0x1b [ 204.666245][T11959] should_fail_ex+0x265/0x280 [ 204.666272][T11959] should_fail+0xb/0x20 [ 204.666295][T11959] should_fail_usercopy+0x1a/0x20 [ 204.666324][T11959] _copy_from_user+0x1c/0xb0 [ 204.666453][T11959] kstrtouint_from_user+0x69/0xf0 [ 204.666481][T11959] ? 0xffffffff81000000 [ 204.666498][T11959] ? selinux_file_permission+0x1e2/0x320 [ 204.666571][T11959] proc_fail_nth_write+0x50/0x160 [ 204.666603][T11959] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 204.666765][T11959] vfs_write+0x269/0x960 [ 204.666811][T11959] ? vfs_read+0x4e6/0x770 [ 204.666911][T11959] ? __rcu_read_unlock+0x4f/0x70 [ 204.666935][T11959] ? __fget_files+0x184/0x1c0 [ 204.666955][T11959] ? mutex_lock+0x58/0x90 [ 204.666986][T11959] ksys_write+0xda/0x1a0 [ 204.667053][T11959] __x64_sys_write+0x40/0x50 [ 204.667075][T11959] x64_sys_call+0x2847/0x3000 [ 204.667098][T11959] do_syscall_64+0xca/0x2b0 [ 204.667198][T11959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.667247][T11959] RIP: 0033:0x7fd03eaae1ff [ 204.667261][T11959] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 204.667277][T11959] RSP: 002b:00007fd03d4f6030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 204.667295][T11959] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd03eaae1ff [ 204.667388][T11959] RDX: 0000000000000001 RSI: 00007fd03d4f60a0 RDI: 0000000000000006 [ 204.667409][T11959] RBP: 00007fd03d4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.667424][T11959] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 204.667438][T11959] R13: 00007fd03ed06128 R14: 00007fd03ed06090 R15: 00007ffd0ff5de48 [ 204.667465][T11959] [ 204.670481][T11943] random: crng reseeded on system resumption [ 204.837973][T11965] loop6: detected capacity change from 0 to 512 [ 204.854578][T11962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.893305][T11965] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 204.897077][T11962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.904235][T11965] EXT4-fs (loop6): mount failed [ 204.935064][T11965] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 205.016783][T11975] loop6: detected capacity change from 0 to 512 [ 205.037956][T11977] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 205.048673][T11975] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 205.063764][T11975] EXT4-fs (loop6): mount failed [ 205.071063][T11975] FAULT_INJECTION: forcing a failure. [ 205.071063][T11975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.084194][T11975] CPU: 0 UID: 0 PID: 11975 Comm: syz.6.2886 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 205.084285][T11975] Tainted: [W]=WARN [ 205.084291][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.084301][T11975] Call Trace: [ 205.084307][T11975] [ 205.084376][T11975] __dump_stack+0x1d/0x30 [ 205.084404][T11975] dump_stack_lvl+0x95/0xd0 [ 205.084426][T11975] dump_stack+0x15/0x1b [ 205.084477][T11975] should_fail_ex+0x265/0x280 [ 205.084503][T11975] should_fail+0xb/0x20 [ 205.084525][T11975] should_fail_usercopy+0x1a/0x20 [ 205.084553][T11975] _copy_from_user+0x1c/0xb0 [ 205.084636][T11975] proc_control+0x43/0xa0 [ 205.084659][T11975] usbdev_ioctl+0x93c/0x1700 [ 205.084681][T11975] ? __pfx_usbdev_ioctl+0x10/0x10 [ 205.084738][T11975] __se_sys_ioctl+0xce/0x140 [ 205.084770][T11975] __x64_sys_ioctl+0x43/0x50 [ 205.084842][T11975] x64_sys_call+0x14b0/0x3000 [ 205.084868][T11975] do_syscall_64+0xca/0x2b0 [ 205.084897][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.084917][T11975] RIP: 0033:0x7fd03eaaf749 [ 205.084942][T11975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.084957][T11975] RSP: 002b:00007fd03d517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.085027][T11975] RAX: ffffffffffffffda RBX: 00007fd03ed05fa0 RCX: 00007fd03eaaf749 [ 205.085041][T11975] RDX: 0000200000000040 RSI: 00000000c0185500 RDI: 0000000000000007 [ 205.085055][T11975] RBP: 00007fd03d517090 R08: 0000000000000000 R09: 0000000000000000 [ 205.085068][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.085134][T11975] R13: 00007fd03ed06038 R14: 00007fd03ed05fa0 R15: 00007ffd0ff5de48 [ 205.085150][T11975] [ 205.301235][T11981] 9p: Could not find request transport: f† [ 205.305844][T11985] loop2: detected capacity change from 0 to 512 [ 205.331906][T11985] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 205.347260][T11985] EXT4-fs (loop2): mount failed [ 205.367464][T11993] __nla_validate_parse: 6 callbacks suppressed [ 205.367479][T11993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2893'. [ 205.385073][T11985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2890'. [ 205.410542][T11995] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2894'. [ 205.664975][T12008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2898'. [ 205.695256][ T3476] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 205.726723][ T3476] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 205.752481][T12008] loop4: detected capacity change from 0 to 2048 [ 205.791560][T12008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.838862][T11165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.883164][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2900'. [ 205.947050][T12022] loop4: detected capacity change from 0 to 512 [ 205.984516][T12022] ext4: Unknown parameter 'appraise' [ 206.024149][ T3476] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 206.050682][ T3476] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.200674][T12027] SELinux: failed to load policy [ 206.263704][T12034] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2904'. [ 206.286694][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2905'. [ 206.641266][T12046] loop0: detected capacity change from 0 to 512 [ 206.642103][T12046] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 206.642182][T12046] EXT4-fs: error: could not find journal device path [ 207.074612][T12052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2909'. [ 207.182708][ T3476] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 207.190527][ T3476] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 207.253871][T12056] fido_id[12056]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 207.314264][T12060] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 207.384277][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2914'. [ 207.393563][T12062] loop4: detected capacity change from 0 to 1024 [ 207.400235][T12062] EXT4-fs: inline encryption not supported [ 207.406164][T12062] EXT4-fs: Ignoring removed orlov option [ 207.460981][T12062] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 207.492924][T12070] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.524416][T12070] EXT4-fs (loop3): orphan cleanup on readonly fs [ 207.542984][T12070] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2916: Allocating blocks 41-42 which overlap fs metadata [ 207.559979][T12062] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c018, mo2=0002] [ 207.571561][T12062] System zones: 0-1, 3-12 [ 207.576876][T12070] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2916: Allocating blocks 41-42 which overlap fs metadata [ 207.593519][T12062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.633222][T12070] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2916: Failed to acquire dquot type 1 [ 207.648533][T12062] FAULT_INJECTION: forcing a failure. [ 207.648533][T12062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.661836][T12062] CPU: 0 UID: 0 PID: 12062 Comm: syz.4.2912 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 207.661861][T12062] Tainted: [W]=WARN [ 207.661866][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 207.661875][T12062] Call Trace: [ 207.661880][T12062] [ 207.661886][T12062] __dump_stack+0x1d/0x30 [ 207.661906][T12062] dump_stack_lvl+0x95/0xd0 [ 207.661968][T12062] dump_stack+0x15/0x1b [ 207.661982][T12062] should_fail_ex+0x265/0x280 [ 207.662060][T12062] should_fail+0xb/0x20 [ 207.662074][T12062] should_fail_usercopy+0x1a/0x20 [ 207.662118][T12062] _copy_to_user+0x20/0xa0 [ 207.662212][T12062] simple_read_from_buffer+0xb5/0x130 [ 207.662229][T12062] proc_fail_nth_read+0x10e/0x150 [ 207.662253][T12062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 207.662274][T12062] vfs_read+0x1a8/0x770 [ 207.662294][T12062] ? __rcu_read_unlock+0x4f/0x70 [ 207.662310][T12062] ? __fget_files+0x184/0x1c0 [ 207.662326][T12062] ? mutex_lock+0x58/0x90 [ 207.662347][T12062] ksys_read+0xda/0x1a0 [ 207.662366][T12062] __x64_sys_read+0x40/0x50 [ 207.662379][T12062] x64_sys_call+0x2889/0x3000 [ 207.662400][T12062] do_syscall_64+0xca/0x2b0 [ 207.662429][T12062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.662446][T12062] RIP: 0033:0x7fa24640e15c [ 207.662490][T12062] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 207.662550][T12062] RSP: 002b:00007fa244e77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 207.662576][T12062] RAX: ffffffffffffffda RBX: 00007fa246665fa0 RCX: 00007fa24640e15c [ 207.662585][T12062] RDX: 000000000000000f RSI: 00007fa244e770a0 RDI: 0000000000000008 [ 207.662594][T12062] RBP: 00007fa244e77090 R08: 0000000000000000 R09: 0000000000000000 [ 207.662603][T12062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.662613][T12062] R13: 00007fa246666038 R14: 00007fa246665fa0 R15: 00007ffd74db6598 [ 207.662627][T12062] [ 207.866842][T12070] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 207.882052][T12070] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2916: corrupted inode contents [ 207.912665][T12070] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.2916: mark_inode_dirty error [ 207.961958][T11165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.971282][T12070] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2916: corrupted inode contents [ 208.002529][T12070] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.2916: mark_inode_dirty error [ 208.022007][T12084] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2919'. [ 208.038982][T12070] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2916: corrupted inode contents [ 208.085643][T12070] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 208.111492][T12070] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.2916: corrupted inode contents [ 208.145448][T12070] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.2916: mark_inode_dirty error [ 208.156652][T12088] SELinux: failed to load policy [ 208.198392][T12095] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 208.219292][T12070] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 208.251515][T12090] set_capacity_and_notify: 1 callbacks suppressed [ 208.251529][T12090] loop6: detected capacity change from 0 to 2048 [ 208.284263][T12070] EXT4-fs (loop3): 1 truncate cleaned up [ 208.290050][T12097] FAULT_INJECTION: forcing a failure. [ 208.290050][T12097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.303272][T12097] CPU: 0 UID: 0 PID: 12097 Comm: syz.0.2922 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.303316][T12097] Tainted: [W]=WARN [ 208.303324][T12097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.303341][T12097] Call Trace: [ 208.303349][T12097] [ 208.303358][T12097] __dump_stack+0x1d/0x30 [ 208.303382][T12097] dump_stack_lvl+0x95/0xd0 [ 208.303501][T12097] dump_stack+0x15/0x1b [ 208.303520][T12097] should_fail_ex+0x265/0x280 [ 208.303597][T12097] should_fail+0xb/0x20 [ 208.303622][T12097] should_fail_usercopy+0x1a/0x20 [ 208.303654][T12097] _copy_to_user+0x20/0xa0 [ 208.303758][T12097] simple_read_from_buffer+0xb5/0x130 [ 208.303848][T12097] proc_fail_nth_read+0x10e/0x150 [ 208.303881][T12097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.303916][T12097] vfs_read+0x1a8/0x770 [ 208.304005][T12097] ? __rcu_read_unlock+0x4f/0x70 [ 208.304025][T12097] ? __fget_files+0x184/0x1c0 [ 208.304048][T12097] ? mutex_lock+0x58/0x90 [ 208.304109][T12097] ksys_read+0xda/0x1a0 [ 208.304132][T12097] __x64_sys_read+0x40/0x50 [ 208.304188][T12097] x64_sys_call+0x2889/0x3000 [ 208.304218][T12097] do_syscall_64+0xca/0x2b0 [ 208.304255][T12097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.304331][T12097] RIP: 0033:0x7f482efee15c [ 208.304351][T12097] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 208.304374][T12097] RSP: 002b:00007f482da2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.304398][T12097] RAX: ffffffffffffffda RBX: 00007f482f246090 RCX: 00007f482efee15c [ 208.304414][T12097] RDX: 000000000000000f RSI: 00007f482da2e0a0 RDI: 0000000000000008 [ 208.304430][T12097] RBP: 00007f482da2e090 R08: 0000000000000000 R09: 0000000000000000 [ 208.304505][T12097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.304520][T12097] R13: 00007f482f246128 R14: 00007f482f246090 R15: 00007ffe29147338 [ 208.304545][T12097] [ 208.384161][T12070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 208.568255][T12070] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.578902][T12090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.616931][T12108] loop4: detected capacity change from 0 to 1024 [ 208.623961][T12108] EXT4-fs: Ignoring removed bh option [ 208.629410][T12108] EXT4-fs: inline encryption not supported [ 208.663609][T12108] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 208.709797][ T29] kauditd_printk_skb: 412 callbacks suppressed [ 208.709814][ T29] audit: type=1326 audit(208.685:15671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.2.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc0e9f749 code=0x7ffc0000 [ 208.740450][T12108] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 208.757606][T12108] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.2926: lblock 2 mapped to illegal pblock 2 (length 1) [ 208.765213][ T29] audit: type=1326 audit(208.715:15672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.2.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f0cc0e9f749 code=0x7ffc0000 [ 208.776690][ T5978] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.794589][ T29] audit: type=1326 audit(208.715:15673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.2.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc0e9f749 code=0x7ffc0000 [ 208.826487][ T29] audit: type=1326 audit(208.715:15674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.2.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0cc0e9f749 code=0x7ffc0000 [ 208.838306][T12108] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 208.849473][ T29] audit: type=1326 audit(208.715:15675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.2.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc0e9f749 code=0x7ffc0000 [ 208.880521][ T29] audit: type=1326 audit(208.715:15676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.2.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0cc0e9f749 code=0x7ffc0000 [ 208.903423][ T29] audit: type=1326 audit(208.715:15677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.2.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc0e9f749 code=0x7ffc0000 [ 208.926492][ T29] audit: type=1326 audit(208.715:15678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.2.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cc0e9f749 code=0x7ffc0000 [ 208.949522][ T29] audit: type=1326 audit(208.715:15679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12102 comm="syz.2.2927" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cc0e9f749 code=0x7ffc0000 [ 208.983120][T12108] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.2926: lblock 0 mapped to illegal pblock 48 (length 1) [ 209.004620][T12108] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2926: Failed to acquire dquot type 0 [ 209.043320][T12108] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 209.083961][T12120] loop6: detected capacity change from 0 to 512 [ 209.090408][T12108] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.2926: mark_inode_dirty error [ 209.159688][T12108] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 209.170297][T12108] EXT4-fs (loop4): 1 orphan inode deleted [ 209.204925][ T7052] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:39: lblock 1 mapped to illegal pblock 1 (length 1) [ 209.219402][ T7052] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:39: Failed to release dquot type 0 [ 209.223555][T12120] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.2931: iget: bad extra_isize 90 (inode size 256) [ 209.246176][T12108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.273385][T12120] EXT4-fs (loop6): Remounting filesystem read-only [ 209.280037][T12120] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -30) [ 209.333158][T12120] EXT4-fs (loop6): 1 orphan inode deleted [ 209.339350][T12120] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.395043][T12120] netlink: 'syz.6.2931': attribute type 10 has an invalid length. [ 209.414170][T12120] bond0: (slave dummy0): Releasing backup interface [ 209.422886][T12120] team0: Port device dummy0 added [ 209.527105][ T5978] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.576824][T11165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.606393][T11165] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 209.620967][T11165] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 209.642076][T12137] 9p: Bad value for 'rfdno' [ 209.664486][T11165] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 209.862581][T12152] team0: Device gtp6 is of different type [ 210.611721][T12180] __nla_validate_parse: 2 callbacks suppressed [ 210.611739][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2953'. [ 210.674229][T12183] loop0: detected capacity change from 0 to 512 [ 210.754261][T12183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 210.776636][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2956'. [ 210.794333][T12183] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.2955: iget: bogus i_mode (3355) [ 210.846468][T12183] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.2955: couldn't read orphan inode 15 (err -117) [ 210.969936][T12183] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.026774][T11596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.213674][T12210] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.2964'. [ 211.223134][T12211] FAULT_INJECTION: forcing a failure. [ 211.223134][T12211] name failslab, interval 1, probability 0, space 0, times 0 [ 211.235888][T12211] CPU: 0 UID: 0 PID: 12211 Comm: syz.3.2963 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 211.235915][T12211] Tainted: [W]=WARN [ 211.235920][T12211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.235931][T12211] Call Trace: [ 211.235937][T12211] [ 211.235944][T12211] __dump_stack+0x1d/0x30 [ 211.235993][T12211] dump_stack_lvl+0x95/0xd0 [ 211.236011][T12211] dump_stack+0x15/0x1b [ 211.236030][T12211] should_fail_ex+0x265/0x280 [ 211.236111][T12211] should_failslab+0x8c/0xb0 [ 211.236136][T12211] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 211.236163][T12211] ? __alloc_skb+0x2ff/0x4b0 [ 211.236191][T12211] __alloc_skb+0x2ff/0x4b0 [ 211.236285][T12211] ? __alloc_skb+0x228/0x4b0 [ 211.236306][T12211] netlink_alloc_large_skb+0xbf/0xf0 [ 211.236331][T12211] netlink_sendmsg+0x3cf/0x6b0 [ 211.236455][T12211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.236487][T12211] __sock_sendmsg+0x145/0x180 [ 211.236505][T12211] ____sys_sendmsg+0x31e/0x4a0 [ 211.236535][T12211] ___sys_sendmsg+0x17b/0x1d0 [ 211.236613][T12211] __x64_sys_sendmsg+0xd4/0x160 [ 211.236642][T12211] x64_sys_call+0x17ba/0x3000 [ 211.236663][T12211] do_syscall_64+0xca/0x2b0 [ 211.236730][T12211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.236749][T12211] RIP: 0033:0x7f0e1922f749 [ 211.236762][T12211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.236777][T12211] RSP: 002b:00007f0e17c97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.236832][T12211] RAX: ffffffffffffffda RBX: 00007f0e19485fa0 RCX: 00007f0e1922f749 [ 211.236846][T12211] RDX: 0000000004004010 RSI: 0000200000000300 RDI: 0000000000000006 [ 211.236859][T12211] RBP: 00007f0e17c97090 R08: 0000000000000000 R09: 0000000000000000 [ 211.236873][T12211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.236886][T12211] R13: 00007f0e19486038 R14: 00007f0e19485fa0 R15: 00007fffaa7aa338 [ 211.236907][T12211] [ 211.537386][T12210] loop4: detected capacity change from 0 to 512 [ 211.544480][T12210] EXT4-fs: Ignoring removed bh option [ 211.549908][T12210] EXT4-fs: Ignoring removed nobh option [ 211.802036][T12210] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #3: comm syz.4.2964: corrupted inode contents [ 211.835098][T12210] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #3: comm syz.4.2964: mark_inode_dirty error [ 211.871350][T12210] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #3: comm syz.4.2964: corrupted inode contents [ 211.890225][T12210] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.2964: mark_inode_dirty error [ 211.909698][T12210] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2964: Failed to acquire dquot type 0 [ 211.933023][T12210] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2964: corrupted inode contents [ 211.958904][T12210] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #16: comm syz.4.2964: mark_inode_dirty error [ 211.970700][T12210] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2964: corrupted inode contents [ 211.982964][T12210] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.2964: mark_inode_dirty error [ 211.995918][T12210] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2964: corrupted inode contents [ 212.008374][T12210] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 212.017080][T12210] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.2964: corrupted inode contents [ 212.029513][T12210] EXT4-fs error (device loop4): ext4_truncate:4635: inode #16: comm syz.4.2964: mark_inode_dirty error [ 212.041644][T12210] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 212.054595][T12210] EXT4-fs (loop4): 1 truncate cleaned up [ 212.063003][T12210] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.083334][T12212] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 212.142857][T11165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.163691][T12212] SELinux: failed to load policy [ 212.326918][T12235] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2970'. [ 212.476762][T12242] loop6: detected capacity change from 0 to 512 [ 212.513404][T12242] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 212.548281][T12242] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2971: iget: bogus i_mode (3355) [ 212.609038][T12242] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2971: couldn't read orphan inode 15 (err -117) [ 212.648346][T12246] FAULT_INJECTION: forcing a failure. [ 212.648346][T12246] name failslab, interval 1, probability 0, space 0, times 0 [ 212.661172][T12246] CPU: 1 UID: 0 PID: 12246 Comm: syz.2.2973 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.661208][T12246] Tainted: [W]=WARN [ 212.661215][T12246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.661229][T12246] Call Trace: [ 212.661236][T12246] [ 212.661244][T12246] __dump_stack+0x1d/0x30 [ 212.661342][T12246] dump_stack_lvl+0x95/0xd0 [ 212.661366][T12246] dump_stack+0x15/0x1b [ 212.661389][T12246] should_fail_ex+0x265/0x280 [ 212.661431][T12246] should_failslab+0x8c/0xb0 [ 212.661502][T12246] kmem_cache_alloc_noprof+0x69/0x4b0 [ 212.661527][T12246] ? fcntl_setlk+0x53/0x950 [ 212.661625][T12246] fcntl_setlk+0x53/0x950 [ 212.661691][T12246] ? avc_has_perm+0xf7/0x180 [ 212.661714][T12246] ? should_fail_ex+0xdb/0x280 [ 212.661741][T12246] do_fcntl+0x6a1/0xf60 [ 212.661777][T12246] __se_sys_fcntl+0xb1/0x120 [ 212.661880][T12246] __x64_sys_fcntl+0x43/0x50 [ 212.661912][T12246] x64_sys_call+0x2d6f/0x3000 [ 212.661949][T12246] do_syscall_64+0xca/0x2b0 [ 212.661983][T12246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.662003][T12246] RIP: 0033:0x7f0cc0e9f749 [ 212.662034][T12246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.662067][T12246] RSP: 002b:00007f0cbf8ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 212.662084][T12246] RAX: ffffffffffffffda RBX: 00007f0cc10f5fa0 RCX: 00007f0cc0e9f749 [ 212.662095][T12246] RDX: 00002000000031c0 RSI: 0000000000000026 RDI: 0000000000000004 [ 212.662106][T12246] RBP: 00007f0cbf8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 212.662117][T12246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.662128][T12246] R13: 00007f0cc10f6038 R14: 00007f0cc10f5fa0 R15: 00007fff6243ace8 [ 212.662191][T12246] [ 212.845867][T12242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.874769][ T5978] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.912773][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2974'. [ 213.000590][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2978'. [ 213.049309][T12264] loop3: detected capacity change from 0 to 1024 [ 213.067135][T12265] loop2: detected capacity change from 0 to 512 [ 213.096443][T12265] EXT4-fs: Ignoring removed nomblk_io_submit option [ 213.137282][T12264] EXT4-fs: Ignoring removed bh option [ 213.142734][T12264] EXT4-fs: inline encryption not supported [ 213.155682][T12265] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2979: iget: bad extended attribute block 262144 [ 213.168970][T12265] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2979: couldn't read orphan inode 15 (err -117) [ 213.181358][T12264] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.194177][T12265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.212495][T12264] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 213.228780][T12264] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.2972: lblock 2 mapped to illegal pblock 2 (length 1) [ 213.243462][T12264] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.2972: lblock 0 mapped to illegal pblock 48 (length 1) [ 213.261238][T12265] vhci_hcd vhci_hcd.2: default hub control req: 0317 v0000 i0000 l173 [ 213.276955][T12264] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.2972: Failed to acquire dquot type 0 [ 213.289024][T12264] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 213.304207][T12264] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.2972: mark_inode_dirty error [ 213.316298][T12273] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 213.348911][T12264] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 213.365859][T12264] EXT4-fs (loop3): 1 orphan inode deleted [ 213.371809][ T7037] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:24: lblock 1 mapped to illegal pblock 1 (length 1) [ 213.393958][ T7037] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:24: Failed to release dquot type 0 [ 213.408766][T12264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.427155][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.464565][T12282] loop6: detected capacity change from 0 to 512 [ 213.473826][T12284] netlink: 'syz.2.2983': attribute type 10 has an invalid length. [ 213.481706][T12284] netlink: 'syz.2.2983': attribute type 11 has an invalid length. [ 213.489694][T12284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2983'. [ 213.498744][T12282] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 213.508054][T12285] uprobe: syz.2.2983:12285 failed to unregister, leaking uprobe [ 213.516924][T12287] loop0: detected capacity change from 0 to 128 [ 213.525853][T12287] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.538968][T12282] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2984: iget: bogus i_mode (3355) [ 213.571095][T12282] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2984: couldn't read orphan inode 15 (err -117) [ 213.603510][T12287] FAULT_INJECTION: forcing a failure. [ 213.603510][T12287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.616698][T12287] CPU: 1 UID: 0 PID: 12287 Comm: syz.0.2982 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 213.616735][T12287] Tainted: [W]=WARN [ 213.616743][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 213.616758][T12287] Call Trace: [ 213.616765][T12287] [ 213.616810][T12287] __dump_stack+0x1d/0x30 [ 213.616847][T12287] dump_stack_lvl+0x95/0xd0 [ 213.616937][T12287] dump_stack+0x15/0x1b [ 213.616957][T12287] should_fail_ex+0x265/0x280 [ 213.616987][T12287] should_fail+0xb/0x20 [ 213.617075][T12287] should_fail_usercopy+0x1a/0x20 [ 213.617106][T12287] _copy_to_user+0x20/0xa0 [ 213.617141][T12287] simple_read_from_buffer+0xb5/0x130 [ 213.617178][T12287] proc_fail_nth_read+0x10e/0x150 [ 213.617206][T12287] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.617233][T12287] vfs_read+0x1a8/0x770 [ 213.617283][T12287] ? __rcu_read_unlock+0x4f/0x70 [ 213.617362][T12287] ? __fget_files+0x184/0x1c0 [ 213.617386][T12287] ? mutex_lock+0x58/0x90 [ 213.617416][T12287] ksys_read+0xda/0x1a0 [ 213.617435][T12287] __x64_sys_read+0x40/0x50 [ 213.617512][T12287] x64_sys_call+0x2889/0x3000 [ 213.617536][T12287] do_syscall_64+0xca/0x2b0 [ 213.617579][T12287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.617677][T12287] RIP: 0033:0x7f482efee15c [ 213.617695][T12287] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.617717][T12287] RSP: 002b:00007f482da2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.617741][T12287] RAX: ffffffffffffffda RBX: 00007f482f246090 RCX: 00007f482efee15c [ 213.617757][T12287] RDX: 000000000000000f RSI: 00007f482da2e0a0 RDI: 0000000000000005 [ 213.617792][T12287] RBP: 00007f482da2e090 R08: 0000000000000000 R09: 0000000000000000 [ 213.617808][T12287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.617825][T12287] R13: 00007f482f246128 R14: 00007f482f246090 R15: 00007ffe29147338 [ 213.617845][T12287] [ 213.627693][T12282] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.833820][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.842842][ T29] kauditd_printk_skb: 557 callbacks suppressed [ 213.842906][ T29] audit: type=1326 audit(213.815:16228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.6.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03eaaf749 code=0x7ffc0000 [ 213.872177][ T29] audit: type=1326 audit(213.815:16229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.6.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03eaaf749 code=0x7ffc0000 [ 213.895192][ T29] audit: type=1326 audit(213.815:16230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.6.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd03eaaf749 code=0x7ffc0000 [ 213.918184][ T29] audit: type=1326 audit(213.815:16231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.6.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03eaaf749 code=0x7ffc0000 [ 213.941143][ T29] audit: type=1326 audit(213.815:16232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.6.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03eaaf749 code=0x7ffc0000 [ 213.964181][ T29] audit: type=1326 audit(213.815:16233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.6.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd03eaaf749 code=0x7ffc0000 [ 213.987649][ T29] audit: type=1326 audit(213.825:16234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.6.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03eaaf749 code=0x7ffc0000 [ 214.003684][ T3314] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 214.010687][ T29] audit: type=1326 audit(213.825:16235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.6.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03eaaf749 code=0x7ffc0000 [ 214.010713][ T29] audit: type=1326 audit(213.825:16236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.6.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fd03eaaf749 code=0x7ffc0000 [ 214.010736][ T29] audit: type=1326 audit(213.825:16237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12281 comm="syz.6.2984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd03eaaf749 code=0x7ffc0000 [ 214.046626][ T3314] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 214.073808][T11596] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.112588][ T3314] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 214.135731][ T5978] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.186529][T12300] FAULT_INJECTION: forcing a failure. [ 214.186529][T12300] name failslab, interval 1, probability 0, space 0, times 0 [ 214.199269][T12300] CPU: 0 UID: 0 PID: 12300 Comm: syz.6.2988 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 214.199364][T12300] Tainted: [W]=WARN [ 214.199370][T12300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 214.199384][T12300] Call Trace: [ 214.199390][T12300] [ 214.199397][T12300] __dump_stack+0x1d/0x30 [ 214.199419][T12300] dump_stack_lvl+0x95/0xd0 [ 214.199438][T12300] dump_stack+0x15/0x1b [ 214.199519][T12300] should_fail_ex+0x265/0x280 [ 214.199568][T12300] should_failslab+0x8c/0xb0 [ 214.199588][T12300] __kmalloc_noprof+0xb9/0x5a0 [ 214.199608][T12300] ? iovec_from_user+0x84/0x210 [ 214.199646][T12300] iovec_from_user+0x84/0x210 [ 214.199673][T12300] __import_iovec+0xf3/0x540 [ 214.199698][T12300] ? _parse_integer_limit+0x170/0x190 [ 214.199726][T12300] import_iovec+0x61/0x80 [ 214.199752][T12300] ___sys_sendmsg+0x146/0x1d0 [ 214.199797][T12300] __x64_sys_sendmsg+0xd4/0x160 [ 214.199849][T12300] x64_sys_call+0x17ba/0x3000 [ 214.199871][T12300] do_syscall_64+0xca/0x2b0 [ 214.199903][T12300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.199959][T12300] RIP: 0033:0x7fd03eaaf749 [ 214.199973][T12300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.199989][T12300] RSP: 002b:00007fd03d517038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.200006][T12300] RAX: ffffffffffffffda RBX: 00007fd03ed05fa0 RCX: 00007fd03eaaf749 [ 214.200099][T12300] RDX: 0000000000020001 RSI: 0000200000000d40 RDI: 0000000000000003 [ 214.200110][T12300] RBP: 00007fd03d517090 R08: 0000000000000000 R09: 0000000000000000 [ 214.200121][T12300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.200132][T12300] R13: 00007fd03ed06038 R14: 00007fd03ed05fa0 R15: 00007ffd0ff5de48 [ 214.200163][T12300] [ 214.399454][T12302] wg1 speed is unknown, defaulting to 1000 [ 214.405609][T12302] wg1 speed is unknown, defaulting to 1000 [ 214.411634][T12302] wg1 speed is unknown, defaulting to 1000 [ 214.418390][T12302] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 214.435798][T12302] wg1 speed is unknown, defaulting to 1000 [ 214.453031][T12298] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2989'. [ 214.471308][T12298] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.485029][T12307] loop3: detected capacity change from 0 to 512 [ 214.499653][T12306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2991'. [ 214.511739][T12302] wg1 speed is unknown, defaulting to 1000 [ 214.518908][T12307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.533796][T12309] loop6: detected capacity change from 0 to 512 [ 214.541638][T12309] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 214.566547][T12298] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.588785][T12309] EXT4-fs (loop6): invalid journal inode [ 214.594557][T12309] EXT4-fs (loop6): can't get journal size [ 214.609115][T12302] wg1 speed is unknown, defaulting to 1000 [ 214.625297][T12302] wg1 speed is unknown, defaulting to 1000 [ 214.631360][T12309] EXT4-fs (loop6): 1 truncate cleaned up [ 214.638583][T12309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.654961][T12302] wg1 speed is unknown, defaulting to 1000 [ 214.699169][T12298] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.777073][T12325] wg1 speed is unknown, defaulting to 1000 [ 214.846519][T12298] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.895602][T12326] loop0: detected capacity change from 0 to 1024 [ 214.906214][ T7033] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.920745][ T7033] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.925275][T12326] EXT4-fs: Ignoring removed bh option [ 215.033170][T12326] EXT4-fs: inline encryption not supported [ 215.038129][ T7043] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.061208][T12326] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 215.062190][ T7043] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.098771][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.112642][T12326] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 215.132256][T12326] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.2997: lblock 2 mapped to illegal pblock 2 (length 1) [ 215.167268][T12334] netlink: 'syz.4.3000': attribute type 13 has an invalid length. [ 215.207376][T12334] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.214639][T12334] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.332400][T12326] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.2997: lblock 0 mapped to illegal pblock 48 (length 1) [ 215.373914][T12326] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2997: Failed to acquire dquot type 0 [ 215.399265][T12334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.409710][T12334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.420792][T12326] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 215.453161][T12340] loop4: detected capacity change from 0 to 512 [ 215.462826][T12340] EXT4-fs: Ignoring removed bh option [ 215.483377][T12326] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.2997: mark_inode_dirty error [ 215.506447][T12340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.512713][ T7038] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.527481][T12326] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 215.532542][ T7038] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.546898][ T7038] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.568956][T12326] EXT4-fs (loop0): 1 orphan inode deleted [ 215.586230][ T7038] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.594259][T12326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.596274][ T12] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 215.626965][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 215.865524][ T5978] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.932607][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3005'. [ 215.944323][T12351] hub 9-0:1.0: USB hub found [ 215.949088][T12351] hub 9-0:1.0: 8 ports detected [ 215.960554][T12351] openvswitch: netlink: Missing key (keys=40, expected=80) [ 216.015081][T11165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.025707][T11596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.045919][T12355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.064004][T11596] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 216.094051][T12355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 216.139605][T11596] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 216.154677][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3009'. [ 216.162067][T11596] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 216.291495][T12375] loop2: detected capacity change from 0 to 2048 [ 216.303744][T12375] EXT4-fs: Ignoring removed oldalloc option [ 216.346503][T12375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 216.347006][T12363] xt_TPROXY: Can be used only with -p tcp or -p udp [ 216.373362][T12375] FAULT_INJECTION: forcing a failure. [ 216.373362][T12375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.386703][T12375] CPU: 1 UID: 0 PID: 12375 Comm: syz.2.3014 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.386737][T12375] Tainted: [W]=WARN [ 216.386745][T12375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.386760][T12375] Call Trace: [ 216.386768][T12375] [ 216.386776][T12375] __dump_stack+0x1d/0x30 [ 216.386810][T12375] dump_stack_lvl+0x95/0xd0 [ 216.386830][T12375] dump_stack+0x15/0x1b [ 216.386885][T12375] should_fail_ex+0x265/0x280 [ 216.386913][T12375] should_fail+0xb/0x20 [ 216.386938][T12375] should_fail_usercopy+0x1a/0x20 [ 216.386981][T12375] strncpy_from_user+0x27/0x260 [ 216.387045][T12375] getname_flags+0xae/0x3b0 [ 216.387075][T12375] io_openat_prep+0x12b/0x2c0 [ 216.387118][T12375] io_submit_sqes+0x70f/0x11b0 [ 216.387156][T12375] __se_sys_io_uring_enter+0x1bd/0x1a30 [ 216.387327][T12375] ? 0xffffffff81000000 [ 216.387395][T12375] ? __rcu_read_unlock+0x4f/0x70 [ 216.387420][T12375] ? strncpy_from_kernel_nofault+0xbe/0x130 [ 216.387457][T12375] ? bpf_probe_read_kernel_str+0x6c/0x70 [ 216.387485][T12375] ? __rcu_read_unlock+0x4f/0x70 [ 216.387590][T12375] ? bpf_trace_run2+0x124/0x1d0 [ 216.387677][T12375] ? mutex_unlock+0x4f/0x90 [ 216.387704][T12375] ? __bpf_trace_sys_enter+0x10/0x30 [ 216.387724][T12375] __x64_sys_io_uring_enter+0x78/0x90 [ 216.387753][T12375] x64_sys_call+0x27e4/0x3000 [ 216.387884][T12375] do_syscall_64+0xca/0x2b0 [ 216.387913][T12375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.387974][T12375] RIP: 0033:0x7f0cc0e9f749 [ 216.387992][T12375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.388013][T12375] RSP: 002b:00007f0cbf8ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 216.388034][T12375] RAX: ffffffffffffffda RBX: 00007f0cc10f5fa0 RCX: 00007f0cc0e9f749 [ 216.388108][T12375] RDX: 000000000000addf RSI: 0000000000003518 RDI: 0000000000000004 [ 216.388122][T12375] RBP: 00007f0cbf8ff090 R08: 0000000000000000 R09: 0000000000000000 [ 216.388133][T12375] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 216.388180][T12375] R13: 00007f0cc10f6038 R14: 00007f0cc10f5fa0 R15: 00007fff6243ace8 [ 216.388201][T12375] [ 216.623733][T12383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'. [ 216.654644][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 216.739525][T12393] FAULT_INJECTION: forcing a failure. [ 216.739525][T12393] name failslab, interval 1, probability 0, space 0, times 0 [ 216.752548][T12393] CPU: 0 UID: 0 PID: 12393 Comm: syz.0.3021 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.752581][T12393] Tainted: [W]=WARN [ 216.752588][T12393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.752600][T12393] Call Trace: [ 216.752605][T12393] [ 216.752612][T12393] __dump_stack+0x1d/0x30 [ 216.752640][T12393] dump_stack_lvl+0x95/0xd0 [ 216.752663][T12393] dump_stack+0x15/0x1b [ 216.752702][T12393] should_fail_ex+0x265/0x280 [ 216.752754][T12393] should_failslab+0x8c/0xb0 [ 216.752780][T12393] kmem_cache_alloc_noprof+0x69/0x4b0 [ 216.752806][T12393] ? vm_area_alloc+0x2c/0xb0 [ 216.752835][T12393] vm_area_alloc+0x2c/0xb0 [ 216.752861][T12393] mmap_region+0xadf/0x1410 [ 216.752919][T12393] do_mmap+0x9b3/0xbe0 [ 216.752953][T12393] vm_mmap_pgoff+0x17a/0x2e0 [ 216.752983][T12393] ksys_mmap_pgoff+0xc2/0x310 [ 216.753012][T12393] ? __x64_sys_mmap+0x49/0x70 [ 216.753046][T12393] x64_sys_call+0x16bb/0x3000 [ 216.753075][T12393] do_syscall_64+0xca/0x2b0 [ 216.753119][T12393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.753147][T12393] RIP: 0033:0x7f482efef783 [ 216.753166][T12393] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 216.753189][T12393] RSP: 002b:00007f482da4ed68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 216.753213][T12393] RAX: ffffffffffffffda RBX: 000000000000059b RCX: 00007f482efef783 [ 216.753229][T12393] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 216.753244][T12393] RBP: 0000200000000002 R08: 00000000ffffffff R09: 0000000000000000 [ 216.753259][T12393] R10: 0000000000000022 R11: 0000000000000246 R12: 000000000000000b [ 216.753274][T12393] R13: 00007f482da4edec R14: 00007f482da4edf0 R15: 00007ffe29147338 [ 216.753307][T12393] [ 216.957165][T12396] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.977175][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3020'. [ 216.991773][ T3004] udevd[3004]: worker [3305] terminated by signal 33 (Unknown signal 33) [ 217.082513][T12409] loop0: detected capacity change from 0 to 1024 [ 217.089592][T12409] EXT4-fs: Ignoring removed mblk_io_submit option [ 217.115765][T12409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.141268][T11596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.206104][T12422] netlink: 'syz.3.3026': attribute type 3 has an invalid length. [ 217.213955][T12422] netlink: 'syz.3.3026': attribute type 1 has an invalid length. [ 217.221727][T12422] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3026'. [ 217.570603][T12431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3031'. [ 217.673538][T12435] loop0: detected capacity change from 0 to 512 [ 217.680870][T12435] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 217.690653][T12435] EXT4-fs (loop0): invalid journal inode [ 217.696753][T12435] EXT4-fs (loop0): can't get journal size [ 217.714806][T12435] EXT4-fs (loop0): 1 truncate cleaned up [ 217.721442][T12435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.747797][T11596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.856485][T12444] wg1 speed is unknown, defaulting to 1000 [ 217.884187][T12445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3036'. [ 217.893327][T12445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3036'. [ 217.907669][T12445] loop0: detected capacity change from 0 to 128 [ 217.930656][T12445] bio_check_eod: 98 callbacks suppressed [ 217.930683][T12445] syz.0.3036: attempt to access beyond end of device [ 217.930683][T12445] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 217.950372][T12445] syz.0.3036: attempt to access beyond end of device [ 217.950372][T12445] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 217.964078][T12445] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 217.978343][T12445] syz.0.3036: attempt to access beyond end of device [ 217.978343][T12445] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 217.992090][T12445] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 218.010051][T12445] syz.0.3036: attempt to access beyond end of device [ 218.010051][T12445] loop0: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 218.032474][T12445] syz.0.3036: attempt to access beyond end of device [ 218.032474][T12445] loop0: rw=8390657, sector=166, nr_sectors = 2 limit=128 [ 218.046209][T12445] Buffer I/O error on dev loop0, logical block 83, lost async page write [ 218.063996][T12445] syz.0.3036: attempt to access beyond end of device [ 218.063996][T12445] loop0: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 218.077826][T12445] Buffer I/O error on dev loop0, logical block 84, lost async page write [ 218.087894][T12452] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 218.096512][T12452] EXT4-fs (loop2): orphan cleanup on readonly fs [ 218.099436][T12445] syz.0.3036: attempt to access beyond end of device [ 218.099436][T12445] loop0: rw=2049, sector=186, nr_sectors = 6 limit=128 [ 218.114371][T12452] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #16: comm syz.2.3039: corrupted inode contents [ 218.123652][T12445] syz.0.3036: attempt to access beyond end of device [ 218.123652][T12445] loop0: rw=8390657, sector=190, nr_sectors = 2 limit=128 [ 218.129020][T12452] EXT4-fs (loop2): Remounting filesystem read-only [ 218.141800][T12445] Buffer I/O error on dev loop0, logical block 95, lost async page write [ 218.143799][T12457] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20000 [ 218.149587][T12452] EXT4-fs (loop2): 1 truncate cleaned up [ 218.159198][T12445] syz.0.3036: attempt to access beyond end of device [ 218.159198][T12445] loop0: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 218.164275][ T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.169273][T12445] Buffer I/O error on dev loop0, logical block 96, lost async page write [ 218.182938][ T52] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 218.196745][T12445] syz.0.3036: attempt to access beyond end of device [ 218.196745][T12445] loop0: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 218.201995][ T52] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 218.220529][T12445] Buffer I/O error on dev loop0, logical block 99, lost async page write [ 218.227161][T12452] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 218.236906][T12445] Buffer I/O error on dev loop0, logical block 100, lost async page write [ 218.267195][T12445] Buffer I/O error on dev loop0, logical block 87, lost async page write [ 218.269624][T12452] EXT4-fs (loop2): shut down requested (1) [ 218.276625][T12445] Buffer I/O error on dev loop0, logical block 88, lost async page write [ 218.664760][T12462] set_capacity_and_notify: 1 callbacks suppressed [ 218.664772][T12462] loop4: detected capacity change from 0 to 2048 [ 218.678034][T12462] EXT4-fs: Ignoring removed oldalloc option [ 218.694586][T12462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 218.716121][T11165] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 218.736906][T12466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.752870][T12466] batadv_slave_1: entered promiscuous mode [ 218.759501][T12466] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 218.769099][T12466] batadv_slave_1 (unregistering): left promiscuous mode [ 218.776218][T12466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.883354][ T29] kauditd_printk_skb: 999 callbacks suppressed [ 218.883369][ T29] audit: type=1400 audit(218.865:17228): avc: denied { setopt } for pid=12467 comm="syz.0.3044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 218.911173][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.018755][ T29] audit: type=1400 audit(218.995:17229): avc: denied { shutdown } for pid=12475 comm="syz.2.3047" laddr=fe80::c474:e9ff:fe84:8a7a lport=53484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.050048][ T29] audit: type=1400 audit(218.995:17230): avc: denied { getopt } for pid=12475 comm="syz.2.3047" laddr=fe80::c474:e9ff:fe84:8a7a lport=53484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.073172][ T29] audit: type=1400 audit(219.025:17231): avc: denied { write } for pid=12475 comm="syz.2.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.105328][T12487] FAULT_INJECTION: forcing a failure. [ 219.105328][T12487] name failslab, interval 1, probability 0, space 0, times 0 [ 219.118026][T12487] CPU: 1 UID: 0 PID: 12487 Comm: syz.3.3051 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.118064][T12487] Tainted: [W]=WARN [ 219.118074][T12487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.118089][T12487] Call Trace: [ 219.118096][T12487] [ 219.118105][T12487] __dump_stack+0x1d/0x30 [ 219.118134][T12487] dump_stack_lvl+0x95/0xd0 [ 219.118187][T12487] dump_stack+0x15/0x1b [ 219.118290][T12487] should_fail_ex+0x265/0x280 [ 219.118322][T12487] should_failslab+0x8c/0xb0 [ 219.118347][T12487] __kmalloc_noprof+0xb9/0x5a0 [ 219.118373][T12487] ? nla_strdup+0x78/0xc0 [ 219.118426][T12487] nla_strdup+0x78/0xc0 [ 219.118456][T12487] nf_tables_newtable+0x3ba/0xea0 [ 219.118504][T12487] nfnetlink_rcv+0xbc9/0x16c0 [ 219.118601][T12487] netlink_unicast+0x5c0/0x690 [ 219.118666][T12487] netlink_sendmsg+0x58b/0x6b0 [ 219.118725][T12487] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.118770][T12487] __sock_sendmsg+0x145/0x180 [ 219.118833][T12487] ____sys_sendmsg+0x31e/0x4a0 [ 219.118876][T12487] ___sys_sendmsg+0x17b/0x1d0 [ 219.118974][T12487] __x64_sys_sendmsg+0xd4/0x160 [ 219.119015][T12487] x64_sys_call+0x17ba/0x3000 [ 219.119129][T12487] do_syscall_64+0xca/0x2b0 [ 219.119212][T12487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.119241][T12487] RIP: 0033:0x7f0e1922f749 [ 219.119262][T12487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.119286][T12487] RSP: 002b:00007f0e17c97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.119311][T12487] RAX: ffffffffffffffda RBX: 00007f0e19485fa0 RCX: 00007f0e1922f749 [ 219.119329][T12487] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 219.119424][T12487] RBP: 00007f0e17c97090 R08: 0000000000000000 R09: 0000000000000000 [ 219.119441][T12487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.119458][T12487] R13: 00007f0e19486038 R14: 00007f0e19485fa0 R15: 00007fffaa7aa338 [ 219.119551][T12487] [ 219.373989][ T29] audit: type=1326 audit(219.355:17232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1922f749 code=0x7ffc0000 [ 219.382969][T12494] loop6: detected capacity change from 0 to 512 [ 219.397974][ T29] audit: type=1326 audit(219.355:17233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1922f749 code=0x7ffc0000 [ 219.427171][T12497] FAULT_INJECTION: forcing a failure. [ 219.427171][T12497] name failslab, interval 1, probability 0, space 0, times 0 [ 219.427745][ T29] audit: type=1326 audit(219.385:17234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e1922f749 code=0x7ffc0000 [ 219.440072][T12497] CPU: 1 UID: 0 PID: 12497 Comm: syz.3.3055 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.440162][T12497] Tainted: [W]=WARN [ 219.440181][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.440227][T12497] Call Trace: [ 219.440245][T12497] [ 219.440272][T12497] __dump_stack+0x1d/0x30 [ 219.440390][T12497] dump_stack_lvl+0x95/0xd0 [ 219.440446][T12497] dump_stack+0x15/0x1b [ 219.440500][T12497] should_fail_ex+0x265/0x280 [ 219.440608][T12497] should_failslab+0x8c/0xb0 [ 219.440670][T12497] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 219.440741][T12497] ? sidtab_sid2str_get+0xa0/0x130 [ 219.440907][T12497] kmemdup_noprof+0x2b/0x70 [ 219.440956][T12497] sidtab_sid2str_get+0xa0/0x130 [ 219.441056][T12497] security_sid_to_context_core+0x1eb/0x2e0 [ 219.441155][T12497] security_sid_to_context+0x27/0x40 [ 219.441247][T12497] selinux_lsmprop_to_secctx+0x67/0xf0 [ 219.441339][T12497] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 219.441419][T12497] audit_log_subj_ctx+0xa4/0x3e0 [ 219.441488][T12497] ? skb_put+0xa9/0xf0 [ 219.441554][T12497] audit_log_task_context+0x48/0x70 [ 219.441611][T12497] audit_log_task+0xf4/0x250 [ 219.441765][T12497] ? kstrtouint+0x76/0xc0 [ 219.441818][T12497] audit_seccomp+0x61/0x100 [ 219.441893][T12497] ? __seccomp_filter+0x832/0x1260 [ 219.442049][T12497] __seccomp_filter+0x843/0x1260 [ 219.442128][T12497] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 219.442246][T12497] ? vfs_write+0x7e8/0x960 [ 219.442298][T12497] ? __rcu_read_unlock+0x4f/0x70 [ 219.442354][T12497] ? __fget_files+0x184/0x1c0 [ 219.442408][T12497] __secure_computing+0x82/0x150 [ 219.442473][T12497] syscall_trace_enter+0xcf/0x1e0 [ 219.442539][T12497] do_syscall_64+0xa4/0x2b0 [ 219.442758][T12497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.442832][T12497] RIP: 0033:0x7f0e1922f749 [ 219.442894][T12497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.442942][T12497] RSP: 002b:00007f0e17c97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 219.442995][T12497] RAX: ffffffffffffffda RBX: 00007f0e19485fa0 RCX: 00007f0e1922f749 [ 219.443031][T12497] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 219.443064][T12497] RBP: 00007f0e17c97090 R08: 0000000000000000 R09: 0000000000000000 [ 219.443174][T12497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.443203][T12497] R13: 00007f0e19486038 R14: 00007f0e19485fa0 R15: 00007fffaa7aa338 [ 219.443252][T12497] [ 219.443377][T12497] audit: error in audit_log_subj_ctx [ 219.462958][ T29] audit: type=1326 audit(219.385:17235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1922f749 code=0x7ffc0000 [ 219.507789][T12494] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 219.511973][ T29] audit: type=1326 audit(219.385:17236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.3.3055" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e1922f749 code=0x7ffc0000 [ 219.571089][T12499] loop3: detected capacity change from 0 to 512 [ 219.604391][T12494] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 219.609319][T12499] EXT4-fs: inline encryption not supported [ 219.799799][ T5978] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 219.809445][T12499] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 219.817855][T12499] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3056: invalid indirect mapped block 2683928664 (level 1) [ 219.832833][T12499] EXT4-fs (loop3): 1 truncate cleaned up [ 219.839450][T12499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.855412][T12499] FAULT_INJECTION: forcing a failure. [ 219.855412][T12499] name failslab, interval 1, probability 0, space 0, times 0 [ 219.868163][T12499] CPU: 1 UID: 0 PID: 12499 Comm: syz.3.3056 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 219.868247][T12499] Tainted: [W]=WARN [ 219.868254][T12499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.868271][T12499] Call Trace: [ 219.868278][T12499] [ 219.868285][T12499] __dump_stack+0x1d/0x30 [ 219.868309][T12499] dump_stack_lvl+0x95/0xd0 [ 219.868329][T12499] dump_stack+0x15/0x1b [ 219.868379][T12499] should_fail_ex+0x265/0x280 [ 219.868401][T12499] should_failslab+0x8c/0xb0 [ 219.868421][T12499] __kmalloc_noprof+0xb9/0x5a0 [ 219.868456][T12499] ? ext4_htree_store_dirent+0x52/0x2e0 [ 219.868476][T12499] ? __pfx_str2hashbuf_signed+0x10/0x10 [ 219.868557][T12499] ext4_htree_store_dirent+0x52/0x2e0 [ 219.868579][T12499] ext4_inlinedir_to_tree+0x639/0x770 [ 219.868620][T12499] ext4_htree_fill_tree+0x327/0xa10 [ 219.868699][T12499] ? path_openat+0x1d88/0x23b0 [ 219.868730][T12499] ? path_openat+0x1e82/0x23b0 [ 219.868762][T12499] ? inode_query_iversion+0xb9/0x110 [ 219.868784][T12499] ext4_readdir+0x18b1/0x1f10 [ 219.868914][T12499] ? kstrtouint_from_user+0x9f/0xf0 [ 219.868937][T12499] ? get_pid_task+0x96/0xd0 [ 219.868983][T12499] ? proc_fail_nth_write+0x13b/0x160 [ 219.869009][T12499] ? avc_policy_seqno+0x15/0x30 [ 219.869076][T12499] ? selinux_file_permission+0x1e2/0x320 [ 219.869156][T12499] iterate_dir+0x114/0x330 [ 219.869186][T12499] __se_sys_getdents64+0x88/0x1b0 [ 219.869294][T12499] ? __pfx_filldir64+0x10/0x10 [ 219.869367][T12499] __x64_sys_getdents64+0x43/0x50 [ 219.869437][T12499] x64_sys_call+0x2f27/0x3000 [ 219.869465][T12499] do_syscall_64+0xca/0x2b0 [ 219.869497][T12499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.869516][T12499] RIP: 0033:0x7f0e1922f749 [ 219.869530][T12499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.869546][T12499] RSP: 002b:00007f0e17c97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 219.869616][T12499] RAX: ffffffffffffffda RBX: 00007f0e19485fa0 RCX: 00007f0e1922f749 [ 219.869628][T12499] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 219.869656][T12499] RBP: 00007f0e17c97090 R08: 0000000000000000 R09: 0000000000000000 [ 219.869668][T12499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.869680][T12499] R13: 00007f0e19486038 R14: 00007f0e19485fa0 R15: 00007fffaa7aa338 [ 219.869699][T12499] [ 220.120626][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.144972][T12508] loop3: detected capacity change from 0 to 2048 [ 220.154455][T12508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.219890][T12511] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3058: bg 0: block 345: padding at end of block bitmap is not set [ 220.234781][T12511] EXT4-fs (loop3): Remounting filesystem read-only [ 220.311059][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3061'. [ 220.372399][T12518] ================================================================== [ 220.380544][T12518] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 220.387963][T12518] [ 220.390315][T12518] write to 0xffff888149b53000 of 4096 bytes by task 12519 on cpu 0: [ 220.398325][T12518] _copy_from_iter+0x106/0xe70 [ 220.403121][T12518] copy_page_from_iter+0x178/0x2a0 [ 220.408266][T12518] process_vm_rw+0x659/0x960 [ 220.412875][T12518] __x64_sys_process_vm_writev+0x78/0x90 [ 220.418613][T12518] x64_sys_call+0x27ef/0x3000 [ 220.423316][T12518] do_syscall_64+0xca/0x2b0 [ 220.427865][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.433780][T12518] [ 220.436143][T12518] write to 0xffff888149b53000 of 4096 bytes by task 12518 on cpu 1: [ 220.444168][T12518] _copy_from_iter+0x106/0xe70 [ 220.448980][T12518] copy_page_from_iter+0x178/0x2a0 [ 220.454141][T12518] process_vm_rw+0x659/0x960 [ 220.458723][T12518] __x64_sys_process_vm_writev+0x78/0x90 [ 220.464368][T12518] x64_sys_call+0x27ef/0x3000 [ 220.469074][T12518] do_syscall_64+0xca/0x2b0 [ 220.473591][T12518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.479496][T12518] [ 220.481815][T12518] Reported by Kernel Concurrency Sanitizer on: [ 220.487986][T12518] CPU: 1 UID: 0 PID: 12518 Comm: syz.3.3061 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 220.499381][T12518] Tainted: [W]=WARN [ 220.503183][T12518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 220.513242][T12518] ==================================================================