last executing test programs: 34.999630383s ago: executing program 1 (id=1078): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@local, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x2b}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x35}, [@coaddr={0x14, 0xe, @in6=@loopback}]}, 0x104}}, 0x0) 34.947654413s ago: executing program 1 (id=1080): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) acct(&(0x7f00000001c0)='./file0\x00') 34.919045724s ago: executing program 1 (id=1082): r0 = syz_io_uring_setup(0x4237, &(0x7f0000000100), &(0x7f0000000040), &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0x1b, 0x20000000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffbd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r4}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 34.727644584s ago: executing program 1 (id=1086): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x1, 0xfffffff8, 0x20, @mcast1, @empty, 0x7800, 0x8000, 0x0, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8, 0x1, 0x4, 0x5, {{0x19, 0x4, 0x2, 0x0, 0x64, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@ssrr={0x89, 0xf, 0x92, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @broadcast]}, @lsrr={0x83, 0x17, 0x44, [@local, @loopback, @remote, @multicast2, @local]}, @ssrr={0x89, 0x17, 0x19, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @broadcast, @rand_addr=0x64010101]}, @noop, @generic={0x94, 0xf, "0b434d3121a9b36dcb02867343"}, @generic={0x86, 0x3, "f8"}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff06, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="340000001400000426bd7000fcdbdf25021888ff", @ANYRES32=r0, @ANYBLOB="140003007866726d30000000001000eebb957c2bab4e206102a7b64125b63f6cd109608f00"/49], 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = getpgrp(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000440)={0x0, r5}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUuzYjmfymGFIMjAJZCDzIJYfDLFnBoZZzcwiMExgNjOQurbippYtY8lpbLJw2l0WXZSWFkoX3fcv6KZZNRRK1y3dli5KSpu60AcFFV1JiR+So6aO1Pj+fqDo3HNv9J0j8R1fnXuvbgCpdbr2TyZiOCLei4jD9cWtG5yuP23cvT5Te2SiWr34WSbZrrbc3LT5/w5FxHpEDETEf/4R8WRmZ9zy6tr8dLFYWG4s5ysLS/ny6tq5KwvTc4W5wuLY5PmpqcnRifGpPevrzeefvnnhzX/1v/HVc3duv/D2W7VmDTfWbe7HXqp3vS+Obqo7EBF/fRTBeiDX6M9grxvCQ6l9fr+IiDNJ/h+OXPJpAmlQrVar31UPtlu9XgX2rWyyD5zJjkREvZzNjozU9+F/GUPZYqlc+ePl0sribH1f+Uj0ZS9fKRZGG98VjkRfprY8lpTvL49vW56ISPaBX8wNJssjM6XibHeHOmCbQ9vy/8tcPf+BlPCVH9JL/kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rtlv/9XWwH0FX/vnCh9qg2r3+fvbq6Ml+6em62UJ4fWViZGZkpLS+NzJVKc8k1OwsPer1iqbQ09qdYuZavFMqVfHl17dJCaWWxcim5rv9Soa8rvQI6cfTUrQ8yEbH+58HkEZv+5MtV2N+q1Uz0+hpkoDdyvR6AgJ4x9Q/p9QO+47f9kTDg8dbiJ3q3GGhd/bdYehStAboh2+sGAD1z9oTjf5BW5v8hvcz/Q3rZxwcecv4/zP/D48v8P6TXcJv7f/1s0727RiPi5xHxfq7vYPNeX8B+kP0k09j/P3v4t8Pb1/Znvk4OEfRHxDOvXnz52nSlsjxWq/98sFlfeaVRP96L9gOdauZpM48BgPTauHt9pvnoZtxP/14/CWFn/AONucmB5Bjl0EZmy7kKmT06d2H9RkQcbxU/07jfef3Ix9BGbkf8Y43nTP0lkvYeSO6b3p34JzbF/82m+CeTLb79ke8M7H+3auPPaKv8yyY5Hffyb+v4M7xH5060H/+y98a/XJvx71SHMZ567dmP28a/EXGyZfxmvIEk1vb4tbad7TD+nf//91ft1lVfr79Oq/hNtVK+srCUL6+unUt+R26usDg2eX5qanJ0Ynwqn8xR55sz1Tv95fi7t3fr/1Cb+PX+ftiy/7W633fY/29+/c7/Tu8S/3dnWn/+x5Ln1u//YET8ocP4X4x/9ES7dbX4s236n90lfq1uosP45Zf+6dphAPgJKa+uzU8Xi4VlBQUFhXuFB40c690ZoIBH5n7S97olAAAAAAAAAAAAQKe6cTpxr/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAffB8AAP//WQzY+g==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) prctl$PR_SET_NAME(0xf, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x300, 0xf5ff) utime(&(0x7f0000000480)='./file1\x00', &(0x7f0000000a40)={0xffffffffffffff01}) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1) r7 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r7, 0x6, 0x1, 0x0, 0x0) accept4$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14, 0xea55ab2a6ac2d485) 33.499811419s ago: executing program 1 (id=1096): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x8400, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0xf9fd}}]}) 33.24896731s ago: executing program 1 (id=1103): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x3a3}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, r4, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}}, 0x4000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x2c0, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfe}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_OURS={0x27c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x73, 0x5, "7cedd5fcaa092d869fd2cf43b58af7ed09e36706d47d13dd367006b9aa240288823b070f7b85b618b0f710cea843ce3d309ad58c38b1edd91abc6f3f7cf76114d3eef576813cf3dd5ab466efb1dc6126a2addae08b81647d7a270b489df496fdf20bb1e0f6beb9421f4f0a8cdc71f8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xcb, 0x4, "2b4a19a57a595f039d785c3f290b5abd5693d26981d41f6d6c64b10ca0700be21957375c07d521e0ddc06c55b3774829039dd49a320d40339cad3335189cfb05725be9f5c2d864e33461df7f1f3f83ccfb846e4c3268455f0b49382338e0070a1e5f6381d557bcf0e01ebf67d84ddee56b05c12d3a9053244bb4087939bad6b97405508e51004c152c1fe26c6beed72d86b0e1fd263124b56e5a5d858d0a6c7525099e354f065ebc18db2d4502969f37e160c3082d17760a7e027b048c3053a07a17e1b73062df"}, @ETHTOOL_A_BITSET_MASK={0x57, 0x5, "b15efb96c1bd7ec934ffff2c67977883fba9f98469a9351e00006b0fe8fc95e4ff0b2d7599e94fc525b9c251964b5f4eb0c976549c371b47f0834db818e3a85bba9ee4ece7f58de6281788bf61b26dfd6f2ccb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0xbf, 0x5, "e8fcc64e500d3918820f7a5bd373fb6b2422b42f690b50a862517dc20fb92697b12a2f4951ab07d9f18999140ea74f3d947a29e7edd8dbdd6d1faee8240559cb7d61aa3a0a5bb0cc13a59e0710058c27a9797b69aa25efec2bad1a999b8b5914d8762eaa87b1d708fc8cc4b5f04becda6d70132e4c058ae0bb8526027adf579884be286befcc03325537f283dbbc79701de9bec0dbfa961454eea37c797d50efe6fb26531f6e38e8d17b5be91f22ff92fbea51fb1a81c277c01250"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) 33.24874658s ago: executing program 32 (id=1103): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x61) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x3a3}, 0x14}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, r4, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}}, 0x4000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x2c0, r4, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfe}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_OURS={0x27c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x73, 0x5, "7cedd5fcaa092d869fd2cf43b58af7ed09e36706d47d13dd367006b9aa240288823b070f7b85b618b0f710cea843ce3d309ad58c38b1edd91abc6f3f7cf76114d3eef576813cf3dd5ab466efb1dc6126a2addae08b81647d7a270b489df496fdf20bb1e0f6beb9421f4f0a8cdc71f8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xcb, 0x4, "2b4a19a57a595f039d785c3f290b5abd5693d26981d41f6d6c64b10ca0700be21957375c07d521e0ddc06c55b3774829039dd49a320d40339cad3335189cfb05725be9f5c2d864e33461df7f1f3f83ccfb846e4c3268455f0b49382338e0070a1e5f6381d557bcf0e01ebf67d84ddee56b05c12d3a9053244bb4087939bad6b97405508e51004c152c1fe26c6beed72d86b0e1fd263124b56e5a5d858d0a6c7525099e354f065ebc18db2d4502969f37e160c3082d17760a7e027b048c3053a07a17e1b73062df"}, @ETHTOOL_A_BITSET_MASK={0x57, 0x5, "b15efb96c1bd7ec934ffff2c67977883fba9f98469a9351e00006b0fe8fc95e4ff0b2d7599e94fc525b9c251964b5f4eb0c976549c371b47f0834db818e3a85bba9ee4ece7f58de6281788bf61b26dfd6f2ccb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0xbf, 0x5, "e8fcc64e500d3918820f7a5bd373fb6b2422b42f690b50a862517dc20fb92697b12a2f4951ab07d9f18999140ea74f3d947a29e7edd8dbdd6d1faee8240559cb7d61aa3a0a5bb0cc13a59e0710058c27a9797b69aa25efec2bad1a999b8b5914d8762eaa87b1d708fc8cc4b5f04becda6d70132e4c058ae0bb8526027adf579884be286befcc03325537f283dbbc79701de9bec0dbfa961454eea37c797d50efe6fb26531f6e38e8d17b5be91f22ff92fbea51fb1a81c277c01250"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7f}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x56, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) 22.590897135s ago: executing program 4 (id=1302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x1, 0xfffffff8, 0x20, @mcast1, @empty, 0x7800, 0x8000, 0x0, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8, 0x1, 0x4, 0x5, {{0x19, 0x4, 0x2, 0x0, 0x64, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@ssrr={0x89, 0xf, 0x92, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @broadcast]}, @lsrr={0x83, 0x17, 0x44, [@local, @loopback, @remote, @multicast2, @local]}, @ssrr={0x89, 0x17, 0x19, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @broadcast, @rand_addr=0x64010101]}, @noop, @generic={0x94, 0xf, "0b434d3121a9b36dcb02867343"}, @generic={0x86, 0x3, "f8"}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff06, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="340000001400000426bd7000fcdbdf25021888ff", @ANYRES32=r0, @ANYBLOB="140003007866726d30000000001000eebb957c2bab4e206102a7b64125b63f6cd109608f00"/49], 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = getpgrp(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000440)={0x0, r5}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$eJzs3ctrW1caAPBPUuzYjmfymGFIMjAJZCDzIJYfDLFnBoZZzcwiMExgNjOQurbippYtY8lpbLJw2l0WXZSWFkoX3fcv6KZZNRRK1y3dli5KSpu60AcFFV1JiR+So6aO1Pj+fqDo3HNv9J0j8R1fnXuvbgCpdbr2TyZiOCLei4jD9cWtG5yuP23cvT5Te2SiWr34WSbZrrbc3LT5/w5FxHpEDETEf/4R8WRmZ9zy6tr8dLFYWG4s5ysLS/ny6tq5KwvTc4W5wuLY5PmpqcnRifGpPevrzeefvnnhzX/1v/HVc3duv/D2W7VmDTfWbe7HXqp3vS+Obqo7EBF/fRTBeiDX6M9grxvCQ6l9fr+IiDNJ/h+OXPJpAmlQrVar31UPtlu9XgX2rWyyD5zJjkREvZzNjozU9+F/GUPZYqlc+ePl0sribH1f+Uj0ZS9fKRZGG98VjkRfprY8lpTvL49vW56ISPaBX8wNJssjM6XibHeHOmCbQ9vy/8tcPf+BlPCVH9JL/kN6yX9IL/kP6SX/Ib3kP6SX/If0kv+QXvIf0kv+Q3rtlv/9XWwH0FX/vnCh9qg2r3+fvbq6Ml+6em62UJ4fWViZGZkpLS+NzJVKc8k1OwsPer1iqbQ09qdYuZavFMqVfHl17dJCaWWxcim5rv9Soa8rvQI6cfTUrQ8yEbH+58HkEZv+5MtV2N+q1Uz0+hpkoDdyvR6AgJ4x9Q/p9QO+47f9kTDg8dbiJ3q3GGhd/bdYehStAboh2+sGAD1z9oTjf5BW5v8hvcz/Q3rZxwcecv4/zP/D48v8P6TXcJv7f/1s0727RiPi5xHxfq7vYPNeX8B+kP0k09j/P3v4t8Pb1/Znvk4OEfRHxDOvXnz52nSlsjxWq/98sFlfeaVRP96L9gOdauZpM48BgPTauHt9pvnoZtxP/14/CWFn/AONucmB5Bjl0EZmy7kKmT06d2H9RkQcbxU/07jfef3Ix9BGbkf8Y43nTP0lkvYeSO6b3p34JzbF/82m+CeTLb79ke8M7H+3auPPaKv8yyY5Hffyb+v4M7xH5060H/+y98a/XJvx71SHMZ567dmP28a/EXGyZfxmvIEk1vb4tbad7TD+nf//91ft1lVfr79Oq/hNtVK+srCUL6+unUt+R26usDg2eX5qanJ0Ynwqn8xR55sz1Tv95fi7t3fr/1Cb+PX+ftiy/7W633fY/29+/c7/Tu8S/3dnWn/+x5Ln1u//YET8ocP4X4x/9ES7dbX4s236n90lfq1uosP45Zf+6dphAPgJKa+uzU8Xi4VlBQUFhXuFB40c690ZoIBH5n7S97olAAAAAAAAAAAAQKe6cTpxr/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALAffB8AAP//WQzY+g==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) utime(&(0x7f0000000480)='./file1\x00', &(0x7f0000000a40)={0xffffffffffffff01}) accept4$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14, 0xea55ab2a6ac2d485) 22.329423646s ago: executing program 4 (id=1307): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 21.814975309s ago: executing program 4 (id=1309): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x9, 0x1, 0xfffffff8, 0x20, @mcast1, @empty, 0x7800, 0x8000, 0x0, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8, 0x1, 0x4, 0x5, {{0x19, 0x4, 0x2, 0x0, 0x64, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@ssrr={0x89, 0xf, 0x92, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @broadcast]}, @lsrr={0x83, 0x17, 0x44, [@local, @loopback, @remote, @multicast2, @local]}, @ssrr={0x89, 0x17, 0x19, [@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @broadcast, @rand_addr=0x64010101]}, @noop, @generic={0x94, 0xf, "0b434d3121a9b36dcb02867343"}, @generic={0x86, 0x3, "f8"}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff06, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="340000001400000426bd7000fcdbdf25021888ff", @ANYRES32=r0, @ANYBLOB="140003007866726d30000000001000eebb957c2bab4e206102a7b64125b63f6cd109608f00"/49], 0x34}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = getpgrp(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000440)={0x0, r5}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r6, 0x400, 0x0) prctl$PR_SET_NAME(0xf, 0x0) utime(&(0x7f0000000480)='./file1\x00', &(0x7f0000000a40)={0xffffffffffffff01}) accept4$packet(r6, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000b00)=0x14, 0xea55ab2a6ac2d485) 21.640879009s ago: executing program 4 (id=1311): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@loopback}, {@in=@multicast2, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) 21.238645331s ago: executing program 4 (id=1316): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/108, 0x6c) getdents64(r2, 0xfffffffffffffffe, 0x29) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x1000, &(0x7f0000000000)="0be33aad3d91b4d8ee2388d97bc6693a790ef0", 0x13, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000002c0)="9fe25f3c895c1754f6e8a47d98b9b64e2c9e8607e23ba047aa79d4abf87cd0da00ad6b8c3ff74b48a18672093db2c2d6e400eb6c2c2a03bc9870651665d74c32344892d8fb90cc871f1c32d4e1973140f8b30dc367c57c") ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) symlink(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) 20.179146865s ago: executing program 4 (id=1349): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "fdffffffffffffff"}) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[@ANYRES8=r5, @ANYBLOB="4b0ec2221df2a4c1e8d2304e114a8bb2b8"], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) creat(&(0x7f0000002200)='./file0\x00', 0x80) 15.835690254s ago: executing program 3 (id=1399): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x18) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x8000, 0x132, 0x1}, 0x18) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000683c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80340001800a0001006c69"], 0xf8}}, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x100, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)="e39b78b7210e560000dcc33d193e257bb6627631074c", &(0x7f0000000480)="0492e1dbdb98fe455ca1708868cbc6abea7c", 0x5}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='cq_drain_complete\x00'}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='./file0/../file0/../file0\x00', 0x3) open_tree(r2, &(0x7f0000000100)='./file0\x00', 0x1) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r6, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) r7 = fcntl$getown(r3, 0x9) syz_open_procfs(r7, &(0x7f0000000140)='mountstats\x00') 15.321333726s ago: executing program 3 (id=1404): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x20, r0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 14.997636558s ago: executing program 3 (id=1405): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) mount(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) 14.890131838s ago: executing program 3 (id=1407): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000840)=@id, &(0x7f0000000880)=0x10, 0x400) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000008c0)={0x42, 0x1, 0x2}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000940)={'ip6_vti0\x00', &(0x7f0000000a80)={'ip6gre0\x00', 0x0, 0x2f, 0x4, 0x0, 0xec, 0xbc839b21e541155c, @mcast2, @remote, 0xbe97d3d28293d883, 0x8000, 0x4, 0x401}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000a00)={'erspan0\x00', &(0x7f0000000b00)={'gretap0\x00', r4, 0x0, 0x7800, 0x7f5, 0x3, {{0x1e, 0x4, 0x0, 0x2, 0x78, 0x67, 0x0, 0x4, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x13, 0xf1, [@empty, @multicast1, @dev={0xac, 0x14, 0x14, 0x39}, @private=0xa010100]}, @timestamp={0x44, 0xc, 0xea, 0x0, 0x5, [0x9, 0xffffffba]}, @timestamp_prespec={0x44, 0x44, 0x7c, 0x3, 0x8, [{@local, 0x8}, {@rand_addr=0x64010101, 0x428}, {@broadcast, 0x8744}, {@loopback, 0x8000}, {@empty, 0x2}, {@empty, 0x401}, {@rand_addr=0x64010100, 0x5}, {@empty, 0x2}]}]}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) copy_file_range(r5, &(0x7f0000000600)=0x58, r1, &(0x7f0000000800), 0x6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r7}, 0x10) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r8, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r10}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000500)=@known='security.selinux\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r12, &(0x7f0000000100)="9916f27c", 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r12}, &(0x7f0000000440), &(0x7f0000000480)=r11}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r12, &(0x7f0000000100), 0x20000000}, 0x20) bind$vsock_stream(r1, &(0x7f0000000900)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) utime(&(0x7f0000000640)='./file0\x00', 0x0) 14.176882321s ago: executing program 3 (id=1412): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/108, 0x6c) getdents64(r2, 0xfffffffffffffffe, 0x29) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x1000, &(0x7f0000000000)="0be33aad3d91b4d8ee2388d97bc6693a790ef0", 0x13, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000002c0)="9fe25f3c895c1754f6e8a47d98b9b64e2c9e8607e23ba047aa79d4abf87cd0da00ad6b8c3ff74b48a18672093db2c2d6e400eb6c2c2a03bc9870651665d74c32344892d8fb90cc871f1c32d4e1973140f8b30dc367c57c") ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) symlink(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 13.803882183s ago: executing program 3 (id=1415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000740)={0x0, 0x0, 0x10, 0xfffffffc, 0x1}, &(0x7f0000000480), &(0x7f0000000500)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x546, &(0x7f0000002340)="$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") 12.328071269s ago: executing program 5 (id=1432): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) r1 = dup(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f00000007c0), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f00000000c0)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8e}, 0x0) getrlimit(0x7, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) getrlimit(0xc, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_SET_OPTION(r1, 0x0, 0x0) 12.242332659s ago: executing program 5 (id=1433): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x20, r0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 12.16687049s ago: executing program 5 (id=1434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0xb, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_COMPAT_NAME={0x6, 0x1, '\x92\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x6, 0x1, '\xae\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x40040) r1 = syz_open_dev$mouse(&(0x7f0000000140), 0xa3d8, 0xa000) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0xa8, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x7}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000014}, 0x20000850) (async) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000380)={0x2, 0x8, '\x00', 0x1, &(0x7f0000000340)=[0x0]}) fcntl$setstatus(r0, 0x4, 0x42400) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x20, 0x4, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000881) (async) r4 = openat$incfs(r1, &(0x7f00000004c0)='.pending_reads\x00', 0x208c3, 0x8) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000540), r1) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000640)={&(0x7f0000000500), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x48, r5, 0x100, 0x70bd29, 0x25dfdbff, {}, [@GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8010) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000740)={'ip6gre0\x00', &(0x7f00000006c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x9, 0xe, 0x4, @private1, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8, 0x40, 0xb, 0x101}}) sendmsg$nl_route_sched(r4, &(0x7f00000008c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=@newtclass={0xe4, 0x28, 0x8, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {0xf, 0xfff1}, {0x1, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x8, 0xb6}}, @tclass_kind_options=@c_red={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x7f}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x5ec}}}, @TCA_RATE={0x6, 0x5, {0xc, 0xf8}}, @TCA_RATE={0x6, 0x5, {0xd, 0x6}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x64, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x0, 0x9, 0x7}}, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x6, 0x5c69}}, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x7ff, 0x8}}, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x2, 0x2}}, @TCA_HFSC_USC={0x10, 0x3, {0xa9, 0xb}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2, 0x2}}]}}, @tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x400, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, 0x424, 0x10}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0xffff}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48010}, 0x4004040) sendto$packet(r4, &(0x7f0000000a00)="9b19c06b4bfabcb78bd2e9db0519715757c4", 0x12, 0x4000881, &(0x7f0000000a40)={0x11, 0x1a, r6, 0x1, 0xb8, 0x6, @multicast}, 0x14) ppoll(&(0x7f0000000a80)=[{r0, 0x8380}, {r4, 0x2100}, {r7, 0x4000}], 0x3, &(0x7f0000000ac0)={0x0, 0x989680}, &(0x7f0000000b00)={[0x800]}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = msgget$private(0x0, 0x485) msgsnd(r8, &(0x7f0000000b40)={0x2, "dbcd262d48d92ce0c64ad0f31b5dd4a652d6bbf103949d5dd8196fdf5b90ff78708e1495f13984455c9e5c3646b4ee606523e29b69d29ad1a6b92e0b42458dda235a0278f61f930f0dacc88c9cc1b9624b1c4990f0d6247164ac704608f45d5b74bdb2739e0e56a2e19faf7a7123a020fcc7708adb7a891a0adfbf1498f23aba2a7801f29a242b5af6281c9c8f364cf8b6fef7d8d86ae5412b5e1613b693f8b28f21e1b6f888a9255193082f9ec466615289a05a105a65e62fe4dcd1de567241167095b0f8c8eaf70ea9f93b4e8963d446bc11d8e9b4f313"}, 0xe0, 0x800) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, r9, 0x500, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xb}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4048490}, 0x4000800) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000d80), 0x40, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=@bloom_filter={0x1e, 0x5, 0x229f, 0x0, 0x4, r4, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x4, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f80)={0x6, 0x3, &(0x7f0000000dc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xaab1}}, &(0x7f0000000e00)='GPL\x00', 0x84, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000e40)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000e80)={0x5, 0x4, 0x5, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[r10, r4], 0x0, 0x10, 0x10, @void, @value}, 0x94) (async) accept4$packet(r4, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001080)=0x14, 0xc00) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r4) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x54, r11, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x21, 0x5d}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x61, 0x40, 0x1ff, 0x9, 0xfff9, 0x3, 0x5, 0x18db]}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x2000c880) 11.98484671s ago: executing program 5 (id=1436): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x3, [@decl_tag={0xc, 0x0, 0x0, 0x11, 0x2, 0x4}, @typedef={0xf, 0x0, 0x0, 0x8, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0xaa}}, @type_tag={0x9, 0x0, 0x0, 0x12, 0x4}, @float={0x6}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x2}}, @struct={0x9, 0x4, 0x0, 0x4, 0x1, 0x9, [{0x7, 0x3, 0x7ff}, {0xa, 0x2, 0x73}, {0x3, 0x1, 0x9}, {0x8, 0x2, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x8}}, @func={0xe, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61]}}, &(0x7f00000002c0)=""/180, 0xeb, 0xb4, 0x1, 0xfdb, 0x10000, @value}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x9e) syz_clone3(&(0x7f0000000580)={0x200000400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0x7, 0x3}) r6 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000000000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioprio_set$pid(0x1, 0x0, 0x0) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[], 0x53) 11.9532004s ago: executing program 5 (id=1438): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/108, 0x6c) getdents64(r2, 0xfffffffffffffffe, 0x29) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x1000, &(0x7f0000000000)="0be33aad3d91b4d8ee2388d97bc6693a790ef0", 0x13, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000002c0)="9fe25f3c895c1754f6e8a47d98b9b64e2c9e8607e23ba047aa79d4abf87cd0da00ad6b8c3ff74b48a18672093db2c2d6e400eb6c2c2a03bc9870651665d74c32344892d8fb90cc871f1c32d4e1973140f8b30dc367c57c") ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) symlink(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 11.776506371s ago: executing program 5 (id=1441): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x1405, 0x0, 0x70bd2a, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) syz_io_uring_setup(0x3fc5, &(0x7f0000000240)={0x0, 0x14f3, 0x20, 0x3, 0xbe}, &(0x7f0000000080), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010003b1500000000995f42ad533b8330", @ANYRES32=0x0, @ANYBLOB="2000000000000000280012800b00010065727370616e000018000280040012000600020000000000080004"], 0x48}}, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0xa, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000020940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c00028008000340000000000800024000000004080001400000080f14000180090001006c61737400000000040002800900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r11, &(0x7f00000022c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) readv(r10, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32, @ANYBLOB="d506330080"], 0x6f4}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) listxattr(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x34, r9, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x500000, 0x80}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xc76}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x4041) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r6) sendmsg$NFT_BATCH(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}, 0x1, 0x0, 0x0, 0x804}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="883e61ec4774787d2d646ac0dacb8e6703d5a0847b413cf073a954609555ad02d7558eec88bbac127aef9443b160d2ba5ee76f224a782382a4b42f72dcad3a1b926c4cdf51bf75eb5f733b2e2376f17e5a2664151af4ddf29f7aa2c2b8ed47dbbd91780becc9"], 0x44}}, 0x0) readahead(r12, 0x7fff, 0xffff) 6.665600303s ago: executing program 0 (id=1472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000740)={0x0, 0x0, 0x10, 0xfffffffc, 0x1}, &(0x7f0000000480), &(0x7f0000000500)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x546, &(0x7f0000002340)="$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") 5.663746637s ago: executing program 0 (id=1476): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r0}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 5.591277077s ago: executing program 0 (id=1477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000003c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000000f14010000000000000000000d0045"], 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x0) 5.524010827s ago: executing program 0 (id=1479): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x20, r0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 5.386690478s ago: executing program 0 (id=1480): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000000000000026001811", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r2, &(0x7f00000000c0)=""/108, 0x6c) getdents64(r2, 0xfffffffffffffffe, 0x29) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_clone(0x1000, &(0x7f0000000000)="0be33aad3d91b4d8ee2388d97bc6693a790ef0", 0x13, &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000002c0)="9fe25f3c895c1754f6e8a47d98b9b64e2c9e8607e23ba047aa79d4abf87cd0da00ad6b8c3ff74b48a18672093db2c2d6e400eb6c2c2a03bc9870651665d74c32344892d8fb90cc871f1c32d4e1973140f8b30dc367c57c") ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) symlink(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.016399409s ago: executing program 0 (id=1481): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = getpid() setreuid(0xee00, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1], 0x1}, 0x58) 4.085736424s ago: executing program 33 (id=1349): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "fdffffffffffffff"}) write$binfmt_aout(r5, &(0x7f00000003c0)=ANY=[@ANYRES8=r5, @ANYBLOB="4b0ec2221df2a4c1e8d2304e114a8bb2b8"], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x90, 0x1b, "00bf46f8bbde7047bcd4a280000400"}) r6 = syz_open_pts(r5, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000000)=0x17) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fcae68da850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) creat(&(0x7f0000002200)='./file0\x00', 0x80) 675.885428ms ago: executing program 6 (id=1487): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r0}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 485.134339ms ago: executing program 6 (id=1512): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="160000000000a200040000000100000000000000", @ANYRESHEX=r0, @ANYBLOB='\x00'/20, @ANYRESDEC=r0, @ANYRES32, @ANYRESOCT=r0], 0x48) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x31, 0x1}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0xc, &(0x7f0000000680)=ANY=[@ANYRES16=r4, @ANYRESHEX=r2, @ANYBLOB="6f19f8cf1e479adf5e8c5d68bd26efa4926cb02faee9c9a8bba86b8238bd2fdea68511accc727953b27f7e2c1c6f6bb6bcf7939c0dd2c721505790a77fab1e850e5a6f11c1c227a07bda27f3d42f097a3d69110e7b77edba085a15efe4c4b51ec4524a804454ff5b50bb12c489befb08e6466877811aa0577ce9a46c59259efc4497335c8eab12207074544e6940ccf0c0b442cd6187c48c10c52a73f12c6b243a538282277e166c1f80487f13f960583fb911", @ANYRES16=0x0, @ANYRES64=r5], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000a40)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='fsi_master_aspeed_opb_read\x00', r7, 0x0, 0x800}, 0x18) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002780), 0x80000, 0x0) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x3a1000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, &(0x7f0000000300)={{0x1, 0x3, 0x2251, 0x2, 0xfffff801}, 0x48, 0x8, 'id1\x00', 'timer1\x00', 0x0, 0xa4, 0x7d74dfea, 0xbc2d}) ppoll(&(0x7f00000027c0)=[{r8, 0x2000}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r8, &(0x7f0000002880), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"/643], 0x1, 0x120b, &(0x7f00000036c0)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x4, &(0x7f0000000880)=ANY=[@ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) connect$inet(r10, &(0x7f0000000480)={0x2, 0xffff, @multicast2}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 120.04456ms ago: executing program 2 (id=1520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0x82, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000200)="68008b7f9cb0507b64ea9d3d03e3", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0xd, 0x6, @random="bf73a9e561c5"}, 0x14) 56.98865ms ago: executing program 2 (id=1521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x40000000015, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000400), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e40)={{r5}, &(0x7f0000000dc0), &(0x7f0000000e00)=r6}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000040)={{{0xc, 0x1}}, 0xbb, 0x7ff, &(0x7f0000000240)="db1e5486f1ccb62e693ebd4f4d83e1655944c87dbea0331f35855c349a822b0836244488b2946518c1aaf7e0a96fff3c46509353d3e256b82fcfcbaf3904c32059e0dc82962a6cb2ba48129dda8f0617bcf537a7a20da69f8fdafe8ad8c8ddaac54704d0ea479ee685d7276fdeef6b5a0ca435ae5793049bb6939cacad5f41883cd06e2920b8a25f4ddaff0848fff1e9d3d8f1fd1ce15e499831a0944b69f904df6e9e00a95c37b709819fd2840b2322d0ca49272adc483dc4d038"}) 54.28867ms ago: executing program 2 (id=1522): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000580)={[{@jqfmt_vfsv1}, {@stripe={'stripe', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0x1, 0x572, &(0x7f0000003780)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x17) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r0}, 0x10) truncate(&(0x7f0000000140)='./file2\x00', 0x0) 44.669431ms ago: executing program 2 (id=1523): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x20, r0, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) 22.73651ms ago: executing program 2 (id=1524): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@local, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x2b}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x35}, [@coaddr={0x14, 0xe, @in6=@loopback}]}, 0x104}}, 0x0) 0s ago: executing program 2 (id=1525): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in=@loopback}, {@in=@multicast2, 0x0, 0x32}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) kernel console output (not intermixed with test programs): 56] syz.0.850[6256] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.319083][ T6260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.852'. [ 86.333157][ T6264] smc: net device bond0 applied user defined pnetid SYZ0 [ 86.366824][ T6264] smc: net device bond0 erased user defined pnetid SYZ0 [ 86.427921][ T6262] lo speed is unknown, defaulting to 1000 [ 86.440360][ T1040] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x4 [ 86.448216][ T1040] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x2 [ 86.492626][ T3374] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x4 [ 86.500428][ T3374] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x2 [ 86.520910][ T3374] hid-generic 0000:3000000:0000.0010: unknown main item tag 0x3 [ 86.533349][ T1040] hid-generic 0000:3000000:0000.000F: unknown main item tag 0x3 [ 86.545884][ T3374] hid-generic 0000:3000000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 86.546247][ T1040] hid-generic 0000:3000000:0000.000F: hidraw1: HID v0.00 Device [sy] on syz0 [ 86.643732][ T6283] 9pnet_fd: Insufficient options for proto=fd [ 86.660043][ T6287] loop1: detected capacity change from 0 to 512 [ 86.696658][ T6287] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.794764][ T6300] netlink: 80 bytes leftover after parsing attributes in process `syz.1.864'. [ 86.888209][ T6309] devtmpfs: Bad value for 'mode' [ 87.560238][ T6319] loop3: detected capacity change from 0 to 164 [ 87.568204][ T29] kauditd_printk_skb: 683 callbacks suppressed [ 87.568221][ T29] audit: type=1400 audit(1733132288.609:7340): avc: denied { read } for pid=6315 comm="syz.3.871" dev="nsfs" ino=4026532515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.595643][ T29] audit: type=1400 audit(1733132288.609:7341): avc: denied { open } for pid=6315 comm="syz.3.871" path="net:[4026532515]" dev="nsfs" ino=4026532515 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 87.618871][ T29] audit: type=1400 audit(1733132288.609:7342): avc: denied { create } for pid=6315 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.639245][ T29] audit: type=1400 audit(1733132288.609:7343): avc: denied { write } for pid=6315 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.659660][ T29] audit: type=1400 audit(1733132288.609:7344): avc: denied { read } for pid=6315 comm="syz.3.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 87.679853][ T29] audit: type=1326 audit(1733132288.618:7345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.3.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14218b0849 code=0x7ffc0000 [ 87.703248][ T29] audit: type=1326 audit(1733132288.618:7346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.3.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14218b0849 code=0x7ffc0000 [ 87.726667][ T29] audit: type=1326 audit(1733132288.618:7347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.3.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f14218b0849 code=0x7ffc0000 [ 87.750043][ T29] audit: type=1326 audit(1733132288.618:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.3.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14218b0849 code=0x7ffc0000 [ 87.773441][ T29] audit: type=1326 audit(1733132288.618:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.3.871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14218b0849 code=0x7ffc0000 [ 87.801604][ T6319] ISOFS: unable to read i-node block [ 87.806949][ T6319] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 87.954555][ T3377] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 87.962360][ T3377] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 87.973282][ T3377] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x3 [ 87.984723][ T6323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.873'. [ 87.985510][ T3377] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 88.005690][ T6323] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 88.095021][ T6330] syz.0.878[6330] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.169799][ T6342] loop1: detected capacity change from 0 to 1024 [ 88.214574][ T6342] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 88.216438][ T6349] Invalid ELF header magic: != ELF [ 88.316929][ T6342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.370955][ T6342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.411521][ T6342] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 88.423221][ T6369] netlink: 'syz.0.881': attribute type 10 has an invalid length. [ 88.550691][ T6375] loop3: detected capacity change from 0 to 164 [ 88.558871][ T6375] ISOFS: unable to read i-node block [ 88.564219][ T6375] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 88.646721][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 88.727877][ T6374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.892'. [ 88.891898][ T6376] loop4: detected capacity change from 0 to 164 [ 88.939990][ T6376] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 89.108908][ T6390] Invalid ELF header magic: != ELF [ 89.178315][ T6396] loop1: detected capacity change from 0 to 512 [ 89.193020][ T6396] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.337837][ T6413] loop1: detected capacity change from 0 to 512 [ 89.352696][ T6414] loop3: detected capacity change from 0 to 512 [ 89.360181][ T6414] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.360181][ T6413] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.396998][ T6414] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.664593][ T6425] loop4: detected capacity change from 0 to 1024 [ 89.692281][ T6425] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 89.745028][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.765423][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.832789][ T6425] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 89.909582][ T6431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.918106][ T6431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.950081][ T6431] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 90.448369][ T3372] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 90.456459][ T3372] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 90.464606][ T3372] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x3 [ 90.495348][ T3372] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 90.536114][ T6451] TCP: tcp_parse_options: Illegal window scaling value 112 > 14 received [ 90.583976][ T6455] loop1: detected capacity change from 0 to 512 [ 90.592878][ T6455] EXT4-fs: Ignoring removed oldalloc option [ 90.599628][ T6455] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.667379][ T6461] loop4: detected capacity change from 0 to 164 [ 90.676368][ T6461] ISOFS: unable to read i-node block [ 90.681758][ T6461] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 90.776104][ T6466] loop3: detected capacity change from 0 to 512 [ 90.785817][ T6455] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.872019][ T6466] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.173171][ T6474] veth0_vlan: left promiscuous mode [ 91.178972][ T6474] veth0_vlan: entered promiscuous mode [ 91.210344][ T6480] loop1: detected capacity change from 0 to 1024 [ 91.218496][ T6485] Invalid ELF header magic: != ELF [ 91.219201][ T3372] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 91.231525][ T3372] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 91.232327][ T6480] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 91.250003][ T3372] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x3 [ 91.258509][ T3372] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 91.291022][ T6491] TCP: tcp_parse_options: Illegal window scaling value 112 > 14 received [ 91.300999][ T6480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.309628][ T6480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.321477][ T6491] loop3: detected capacity change from 0 to 256 [ 91.337336][ T6491] FAT-fs (loop3): Directory bread(block 64) failed [ 91.343949][ T6491] FAT-fs (loop3): Directory bread(block 65) failed [ 91.368832][ T6491] FAT-fs (loop3): Directory bread(block 66) failed [ 91.378347][ T6491] FAT-fs (loop3): Directory bread(block 67) failed [ 91.385151][ T6491] FAT-fs (loop3): Directory bread(block 68) failed [ 91.392009][ T6491] FAT-fs (loop3): Directory bread(block 69) failed [ 91.399083][ T6491] FAT-fs (loop3): Directory bread(block 70) failed [ 91.406049][ T6491] FAT-fs (loop3): Directory bread(block 71) failed [ 91.413561][ T6491] FAT-fs (loop3): Directory bread(block 72) failed [ 91.420355][ T6491] FAT-fs (loop3): Directory bread(block 73) failed [ 91.461835][ T6505] bpf_get_probe_write_proto: 8 callbacks suppressed [ 91.461853][ T6505] syz.0.935[6505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.468761][ T6505] syz.0.935[6505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.476950][ T6491] syz.3.930: attempt to access beyond end of device [ 91.476950][ T6491] loop3: rw=2049, sector=1224, nr_sectors = 132 limit=256 [ 91.480267][ T6505] syz.0.935[6505] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.582218][ T6510] loop3: detected capacity change from 0 to 8192 [ 91.600225][ T6510] vfat: Unknown parameter 'GPL' [ 91.648541][ T3375] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 91.656244][ T3375] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 91.664698][ T3375] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x3 [ 91.665943][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.939'. [ 91.682451][ T3375] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 91.727912][ T6525] loop3: detected capacity change from 0 to 164 [ 91.735768][ T6525] ISOFS: unable to read i-node block [ 91.741091][ T6525] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 91.752577][ T6514] lo speed is unknown, defaulting to 1000 [ 91.783856][ T6529] pim6reg1: entered promiscuous mode [ 91.789248][ T6529] pim6reg1: entered allmulticast mode [ 92.019813][ T6540] loop1: detected capacity change from 0 to 512 [ 92.026594][ T6540] EXT4-fs: Ignoring removed oldalloc option [ 92.032942][ T6540] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.046710][ T6540] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.077418][ T6546] netlink: 'syz.3.950': attribute type 4 has an invalid length. [ 92.117406][ T6548] loop4: detected capacity change from 0 to 512 [ 92.121990][ T6546] netlink: 'syz.3.950': attribute type 4 has an invalid length. [ 92.164883][ T6548] ext4 filesystem being mounted at /163/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.242904][ T3372] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 92.250626][ T3372] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 92.258503][ T3372] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x3 [ 92.266758][ T3372] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 92.369266][ T6572] loop4: detected capacity change from 0 to 512 [ 92.398097][ T6572] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 92.406196][ T6572] System zones: 0-2, 18-18, 34-34 [ 92.412214][ T6572] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.959: bg 0: block 248: padding at end of block bitmap is not set [ 92.426757][ T6572] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.959: Failed to acquire dquot type 1 [ 92.438752][ T6572] EXT4-fs (loop4): 1 truncate cleaned up [ 92.445262][ T6572] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.480330][ T6580] syz.4.961[6580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.480388][ T6580] syz.4.961[6580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.491916][ T6580] syz.4.961[6580] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.522009][ T6582] netlink: 'syz.4.962': attribute type 10 has an invalid length. [ 92.748385][ T6590] netlink: 28 bytes leftover after parsing attributes in process `syz.0.966'. [ 92.772482][ T3377] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x4 [ 92.780183][ T3377] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x2 [ 92.793909][ T3377] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x3 [ 92.803864][ T3377] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 92.947832][ T6604] loop4: detected capacity change from 0 to 164 [ 92.963715][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 92.963729][ T29] audit: type=1400 audit(1733132293.595:7837): avc: denied { create } for pid=6597 comm="syz.4.970" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.991106][ T29] audit: type=1400 audit(1733132293.595:7838): avc: denied { map } for pid=6597 comm="syz.4.970" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.015303][ T29] audit: type=1400 audit(1733132293.595:7839): avc: denied { read write } for pid=6597 comm="syz.4.970" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14545 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.040155][ T29] audit: type=1400 audit(1733132293.642:7840): avc: denied { read } for pid=6597 comm="syz.4.970" dev="nsfs" ino=4026532642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.061242][ T29] audit: type=1400 audit(1733132293.642:7841): avc: denied { open } for pid=6597 comm="syz.4.970" path="net:[4026532642]" dev="nsfs" ino=4026532642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.084497][ T29] audit: type=1326 audit(1733132293.642:7842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9849b0849 code=0x7ffc0000 [ 93.107963][ T29] audit: type=1326 audit(1733132293.642:7843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9849b0849 code=0x7ffc0000 [ 93.131332][ T29] audit: type=1326 audit(1733132293.642:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9849b0849 code=0x7ffc0000 [ 93.154666][ T29] audit: type=1326 audit(1733132293.642:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9849b0849 code=0x7ffc0000 [ 93.178013][ T29] audit: type=1326 audit(1733132293.642:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6597 comm="syz.4.970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9849b0849 code=0x7ffc0000 [ 93.209030][ T6604] ISOFS: unable to read i-node block [ 93.214389][ T6604] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 93.311708][ T6605] netlink: 'syz.1.971': attribute type 4 has an invalid length. [ 93.394985][ T6605] infiniband syz2: set down [ 93.399649][ T3374] lo speed is unknown, defaulting to 1000 [ 93.405481][ T3374] lo speed is unknown, defaulting to 1000 [ 93.410158][ T6606] netlink: 'syz.1.971': attribute type 4 has an invalid length. [ 93.422670][ T6606] infiniband syz2: set active [ 93.428124][ T3376] lo speed is unknown, defaulting to 1000 [ 93.434110][ T3376] lo speed is unknown, defaulting to 1000 [ 93.440799][ T6605] FAULT_INJECTION: forcing a failure. [ 93.440799][ T6605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.454136][ T6605] CPU: 1 UID: 0 PID: 6605 Comm: syz.1.971 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 93.464472][ T6605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 93.474554][ T6605] Call Trace: [ 93.477849][ T6605] [ 93.480804][ T6605] dump_stack_lvl+0xf2/0x150 [ 93.485447][ T6605] dump_stack+0x15/0x1a [ 93.489698][ T6605] should_fail_ex+0x223/0x230 [ 93.494406][ T6605] should_fail+0xb/0x10 [ 93.498599][ T6605] should_fail_usercopy+0x1a/0x20 [ 93.503703][ T6605] _copy_to_user+0x20/0xa0 [ 93.508159][ T6605] simple_read_from_buffer+0xa0/0x110 [ 93.513644][ T6605] proc_fail_nth_read+0xf9/0x140 [ 93.518618][ T6605] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 93.524200][ T6605] vfs_read+0x1a2/0x700 [ 93.528384][ T6605] ? ip_setsockopt+0xa3/0x100 [ 93.533087][ T6605] ? __rcu_read_unlock+0x4e/0x70 [ 93.538108][ T6605] ? __fget_files+0x17c/0x1c0 [ 93.542837][ T6605] ksys_read+0xe8/0x1b0 [ 93.547148][ T6605] __x64_sys_read+0x42/0x50 [ 93.551682][ T6605] x64_sys_call+0x2874/0x2dc0 [ 93.556383][ T6605] do_syscall_64+0xc9/0x1c0 [ 93.560976][ T6605] ? clear_bhb_loop+0x55/0xb0 [ 93.565734][ T6605] ? clear_bhb_loop+0x55/0xb0 [ 93.570441][ T6605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.576353][ T6605] RIP: 0033:0x7ff53b77f25c [ 93.580772][ T6605] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 93.600393][ T6605] RSP: 002b:00007ff539df7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.608815][ T6605] RAX: ffffffffffffffda RBX: 00007ff53b945fa0 RCX: 00007ff53b77f25c [ 93.616867][ T6605] RDX: 000000000000000f RSI: 00007ff539df70b0 RDI: 0000000000000006 [ 93.624923][ T6605] RBP: 00007ff539df70a0 R08: 0000000000000000 R09: 0000000000000000 [ 93.632988][ T6605] R10: 0000000020000440 R11: 0000000000000246 R12: 0000000000000001 [ 93.641038][ T6605] R13: 0000000000000000 R14: 00007ff53b945fa0 R15: 00007ffd7b045248 [ 93.649112][ T6605] [ 93.959061][ T6623] netlink: 'syz.2.977': attribute type 10 has an invalid length. [ 93.982371][ T6623] batman_adv: batadv0: Adding interface: team0 [ 93.988589][ T6623] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.013845][ T6623] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 94.078004][ T6629] syz.0.980[6629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.078163][ T6629] syz.0.980[6629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.098458][ T6629] syz.0.980[6629] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.200911][ T6642] Invalid ELF header magic: != ELF [ 94.264697][ T6651] Invalid ELF header magic: != ELF [ 94.301326][ T6654] netlink: 'syz.3.992': attribute type 10 has an invalid length. [ 94.340418][ T6657] syz.1.993[6657] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.369527][ T6661] loop1: detected capacity change from 0 to 1024 [ 94.390956][ T6661] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 94.498530][ T6679] loop3: detected capacity change from 0 to 2048 [ 94.505124][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 94.538988][ T6679] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 94.561711][ T6679] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 94.574075][ T6679] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.574075][ T6679] [ 94.583771][ T6679] EXT4-fs (loop3): Total free blocks count 0 [ 94.589815][ T6679] EXT4-fs (loop3): Free/Dirty block details [ 94.595769][ T6679] EXT4-fs (loop3): free_blocks=2415919104 [ 94.597521][ T6692] netlink: 'syz.1.1007': attribute type 4 has an invalid length. [ 94.601515][ T6679] EXT4-fs (loop3): dirty_blocks=32 [ 94.601533][ T6679] EXT4-fs (loop3): Block reservation details [ 94.601546][ T6679] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 94.638878][ T28] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 94.651560][ T28] EXT4-fs (loop3): This should not happen!! Data will be lost [ 94.651560][ T28] [ 94.664694][ T6692] infiniband syz2: set down [ 94.669326][ T6669] hub 9-0:1.0: USB hub found [ 94.674051][ T6669] hub 9-0:1.0: 8 ports detected [ 94.674979][ T3374] lo speed is unknown, defaulting to 1000 [ 94.694889][ T6697] netlink: 'syz.1.1007': attribute type 4 has an invalid length. [ 94.697154][ T3374] lo speed is unknown, defaulting to 1000 [ 94.744579][ T6706] loop3: detected capacity change from 0 to 1024 [ 94.763782][ T6697] infiniband syz2: set active [ 94.767119][ T6706] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 94.768511][ T3376] lo speed is unknown, defaulting to 1000 [ 94.779557][ T6706] JBD2: no valid journal superblock found [ 94.788355][ T35] lo speed is unknown, defaulting to 1000 [ 94.790135][ T6706] EXT4-fs (loop3): Could not load journal inode [ 94.865190][ T3375] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x4 [ 94.873079][ T3375] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x2 [ 94.982100][ T3375] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x3 [ 94.993004][ T3375] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 95.155097][ T6738] loop4: detected capacity change from 0 to 164 [ 95.165151][ T6738] ISOFS: unable to read i-node block [ 95.170485][ T6738] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 95.196254][ T6739] netlink: 'syz.3.1009': attribute type 10 has an invalid length. [ 95.308865][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1026'. [ 95.607857][ T6762] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6762 comm=syz.0.1030 [ 95.620419][ T6762] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6762 comm=syz.0.1030 [ 95.667335][ T3375] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x4 [ 95.675245][ T3375] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x2 [ 95.689468][ T3375] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x3 [ 95.706417][ T3375] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 95.828065][ T6785] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1039'. [ 95.959307][ T6788] loop1: detected capacity change from 0 to 4096 [ 95.976827][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 95.984386][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 95.994709][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.002327][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.009906][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.017345][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.021558][ T3374] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 96.024995][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.032436][ T3374] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 96.039744][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.047779][ T3374] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x3 [ 96.054943][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.063042][ T3374] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 96.069813][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.087242][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.094637][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.102183][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.109706][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.117190][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.124969][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.132622][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.140127][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.147525][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.152408][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.154931][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.162380][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.169672][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.177084][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.184625][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.199591][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.207190][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.209336][ T6810] loop4: detected capacity change from 0 to 512 [ 96.214635][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.228581][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.236001][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.236197][ T6810] EXT4-fs: journaled quota format not specified [ 96.243382][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.243410][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.257121][ T6807] netlink: 'syz.2.1046': attribute type 10 has an invalid length. [ 96.264390][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.264419][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.276217][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.279589][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.279623][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.287017][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.294370][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.301759][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.309110][ T3376] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 96.316500][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.327594][ T3376] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz0 [ 96.331247][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.343671][ T6810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.346100][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.355879][ T6810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.363062][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.394226][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.401737][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.409193][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.416779][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.424685][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.432181][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.439750][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.447149][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.454585][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.462031][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.469442][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.476919][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.484378][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.491853][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.499366][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.506882][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.514326][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.521703][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.529486][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.536938][ T3374] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 96.546331][ T3374] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 96.711052][ T6826] loop3: detected capacity change from 0 to 1024 [ 96.719171][ T6826] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 96.783301][ T3374] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x4 [ 96.791050][ T3374] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x2 [ 96.799823][ T3374] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x3 [ 96.817146][ T3374] hid-generic 0000:3000000:0000.001C: hidraw0: HID v0.00 Device [sy] on syz0 [ 96.837862][ T6843] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1059'. [ 96.858115][ T6843] loop3: detected capacity change from 0 to 512 [ 97.043660][ T6872] netlink: 'syz.2.1064': attribute type 10 has an invalid length. [ 97.055269][ T6871] loop4: detected capacity change from 0 to 1024 [ 97.063649][ T6871] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 97.174147][ T6875] delete_channel: no stack [ 97.180796][ T6875] delete_channel: no stack [ 97.470921][ T6885] netlink: 'syz.1.1075': attribute type 10 has an invalid length. [ 97.489142][ T6885] geneve1: entered promiscuous mode [ 97.500075][ T6885] @: (slave geneve1): Enslaving as an active interface with an up link [ 97.617397][ T6886] lo speed is unknown, defaulting to 1000 [ 97.750879][ T6906] loop1: detected capacity change from 0 to 1024 [ 97.759307][ T6906] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 97.885223][ T6910] Cannot find del_set index 0 as target [ 97.895497][ T6910] SET target dimension over the limit! [ 98.005523][ T3376] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x4 [ 98.013332][ T3376] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x2 [ 98.029375][ T6922] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1086'. [ 98.070165][ T6922] loop1: detected capacity change from 0 to 512 [ 98.113514][ T3376] hid-generic 0000:3000000:0000.001D: unknown main item tag 0x3 [ 98.125412][ T3376] hid-generic 0000:3000000:0000.001D: hidraw0: HID v0.00 Device [sy] on syz0 [ 98.143162][ T6922] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.168024][ T6922] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1086: corrupted xattr block 32: e_value out of bounds [ 98.308577][ T6932] loop4: detected capacity change from 0 to 164 [ 98.661444][ T6932] ISOFS: unable to read i-node block [ 98.662143][ T6922] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 98.667222][ T6932] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 98.676805][ T6922] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1086: corrupted xattr block 32: e_value out of bounds [ 98.699626][ T6933] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1086: corrupted xattr block 32: e_value out of bounds [ 98.725951][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 98.726023][ T29] audit: type=1400 audit(1733132298.608:8443): avc: denied { create } for pid=6912 comm="syz.4.1084" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.753513][ T29] audit: type=1400 audit(1733132298.608:8444): avc: denied { map } for pid=6912 comm="syz.4.1084" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.777824][ T29] audit: type=1400 audit(1733132298.608:8445): avc: denied { read write } for pid=6912 comm="syz.4.1084" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15033 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 98.802742][ T29] audit: type=1400 audit(1733132298.665:8446): avc: denied { read } for pid=6912 comm="syz.4.1084" dev="nsfs" ino=4026532642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.824028][ T29] audit: type=1400 audit(1733132298.665:8447): avc: denied { open } for pid=6912 comm="syz.4.1084" path="net:[4026532642]" dev="nsfs" ino=4026532642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 98.847413][ T29] audit: type=1400 audit(1733132298.665:8448): avc: denied { read } for pid=6912 comm="syz.4.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 98.860968][ T6936] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1086: corrupted xattr block 32: e_value out of bounds [ 98.868141][ T29] audit: type=1326 audit(1733132298.665:8449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9849b0849 code=0x7ffc0000 [ 98.868182][ T29] audit: type=1326 audit(1733132298.665:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9849b0849 code=0x7ffc0000 [ 98.917718][ T6922] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 98.929336][ T29] audit: type=1326 audit(1733132298.665:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9849b0849 code=0x7ffc0000 [ 98.938585][ T6922] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1086: corrupted xattr block 32: e_value out of bounds [ 98.961796][ T29] audit: type=1326 audit(1733132298.665:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6912 comm="syz.4.1084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9849b0849 code=0x7ffc0000 [ 98.989157][ T6933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 99.008493][ T6933] EXT4-fs error (device loop1): ext4_xattr_block_get:596: inode #15: comm syz.1.1086: corrupted xattr block 32: e_value out of bounds [ 99.036504][ T6936] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 99.049248][ T6933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 99.052540][ T6922] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 99.223675][ T6951] loop4: detected capacity change from 0 to 1024 [ 99.236747][ T6951] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 99.293913][ T3376] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x4 [ 99.301617][ T3376] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x2 [ 99.312251][ T3376] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x3 [ 99.322237][ T3376] hid-generic 0000:3000000:0000.001E: hidraw0: HID v0.00 Device [sy] on syz0 [ 99.460423][ T6967] loop4: detected capacity change from 0 to 512 [ 99.468665][ T6967] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 99.492702][ T6967] ext4 filesystem being mounted at /192/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.501126][ T6966] loop3: detected capacity change from 0 to 2048 [ 99.525491][ T6967] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.553573][ T6967] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.1106: Failed to acquire dquot type 0 [ 99.741199][ T6971] lo speed is unknown, defaulting to 1000 [ 99.757565][ T6983] Invalid ELF header magic: != ELF [ 99.791007][ T6992] loop3: detected capacity change from 0 to 2048 [ 99.813909][ T3376] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x4 [ 99.821620][ T3376] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x2 [ 99.829463][ T3376] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x3 [ 99.838296][ T3376] hid-generic 0000:3000000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 99.874849][ T7002] loop4: detected capacity change from 0 to 512 [ 99.881855][ T7002] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 99.892431][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 99.925506][ T6999] FAULT_INJECTION: forcing a failure. [ 99.925506][ T6999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.928296][ T7002] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.938711][ T6999] CPU: 0 UID: 0 PID: 6999 Comm: syz.0.1113 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 99.938745][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.953488][ T7002] EXT4-fs (loop4): mount failed [ 99.963604][ T6999] Call Trace: [ 99.963613][ T6999] [ 99.963623][ T6999] dump_stack_lvl+0xf2/0x150 [ 99.989394][ T6999] dump_stack+0x15/0x1a [ 99.993711][ T6999] should_fail_ex+0x223/0x230 [ 99.998443][ T6999] should_fail+0xb/0x10 [ 100.002622][ T6999] should_fail_usercopy+0x1a/0x20 [ 100.007667][ T6999] _copy_from_user+0x1e/0xb0 [ 100.012319][ T6999] restore_altstack+0x48/0xd0 [ 100.017033][ T6999] __do_sys_rt_sigreturn+0xd7/0x160 [ 100.022281][ T6999] x64_sys_call+0x2982/0x2dc0 [ 100.026983][ T6999] do_syscall_64+0xc9/0x1c0 [ 100.031579][ T6999] ? clear_bhb_loop+0x55/0xb0 [ 100.036378][ T6999] ? clear_bhb_loop+0x55/0xb0 [ 100.041093][ T6999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.047004][ T6999] RIP: 0033:0x7f363f1cc189 [ 100.051424][ T6999] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 100.071151][ T6999] RSP: 002b:00007f363d8a6ac0 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 100.079612][ T6999] RAX: ffffffffffffffda RBX: 00007f363f3f5fa0 RCX: 00007f363f1cc189 [ 100.087586][ T6999] RDX: 00007f363d8a6ac0 RSI: 00007f363d8a6bf0 RDI: 0000000000000021 [ 100.095560][ T6999] RBP: 00007f363d8a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.103554][ T6999] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 100.111593][ T6999] R13: 0000000000000000 R14: 00007f363f3f5fa0 R15: 00007ffe442bf728 [ 100.119576][ T6999] [ 100.145055][ T7014] 9pnet_fd: Insufficient options for proto=fd [ 100.247270][ T6971] chnl_net:caif_netlink_parms(): no params data found [ 100.280317][ T7027] FAULT_INJECTION: forcing a failure. [ 100.280317][ T7027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.293511][ T7027] CPU: 0 UID: 0 PID: 7027 Comm: syz.0.1122 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 100.303944][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.304091][ T24] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x4 [ 100.313996][ T7027] Call Trace: [ 100.314005][ T7027] [ 100.314014][ T7027] dump_stack_lvl+0xf2/0x150 [ 100.314058][ T7027] dump_stack+0x15/0x1a [ 100.314107][ T7027] should_fail_ex+0x223/0x230 [ 100.321805][ T24] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x2 [ 100.325028][ T7027] should_fail+0xb/0x10 [ 100.325087][ T7027] should_fail_usercopy+0x1a/0x20 [ 100.329141][ T24] hid-generic 0000:3000000:0000.0020: unknown main item tag 0x3 [ 100.332596][ T7027] strncpy_from_user+0x25/0x210 [ 100.346750][ T24] hid-generic 0000:3000000:0000.0020: hidraw0: HID v0.00 Device [sy] on syz0 [ 100.349076][ T7027] ? __kmalloc_cache_noprof+0x186/0x320 [ 100.375865][ T7034] netlink: 'syz.4.1126': attribute type 10 has an invalid length. [ 100.380628][ T7027] getname_flags+0x21b/0x3b0 [ 100.398814][ T7027] __x64_sys_mknod+0x40/0x60 [ 100.403415][ T7027] x64_sys_call+0x16be/0x2dc0 [ 100.408158][ T7027] do_syscall_64+0xc9/0x1c0 [ 100.412706][ T7027] ? clear_bhb_loop+0x55/0xb0 [ 100.417408][ T7027] ? clear_bhb_loop+0x55/0xb0 [ 100.422131][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.428086][ T7027] RIP: 0033:0x7f363f230849 [ 100.432512][ T7027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.452240][ T7027] RSP: 002b:00007f363d8a7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 100.460725][ T7027] RAX: ffffffffffffffda RBX: 00007f363f3f5fa0 RCX: 00007f363f230849 [ 100.468773][ T7027] RDX: 0000000000000701 RSI: 0000000000000004 RDI: 0000000020002040 [ 100.476925][ T7027] RBP: 00007f363d8a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.484981][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.492975][ T7027] R13: 0000000000000000 R14: 00007f363f3f5fa0 R15: 00007ffe442bf728 [ 100.501028][ T7027] [ 100.509669][ T7034] geneve1: entered promiscuous mode [ 100.528037][ T7034] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 100.614068][ T7047] loop3: detected capacity change from 0 to 128 [ 100.625686][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.632998][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.640479][ T6971] bridge_slave_0: entered allmulticast mode [ 100.646877][ T6971] bridge_slave_0: entered promiscuous mode [ 100.655276][ T7050] xt_hashlimit: size too large, truncated to 1048576 [ 100.655310][ T7052] SELinux: failed to load policy [ 100.669625][ T6971] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.676820][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.697955][ T7047] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1128'. [ 100.707577][ T6971] bridge_slave_1: entered allmulticast mode [ 100.714678][ T6971] bridge_slave_1: entered promiscuous mode [ 100.767472][ T3374] IPVS: starting estimator thread 0... [ 100.844039][ T7052] bridge0: entered allmulticast mode [ 100.868655][ T6971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.899018][ T6971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.964759][ T6971] team0: Port device team_slave_0 added [ 100.971786][ T7056] IPVS: using max 2496 ests per chain, 124800 per kthread [ 100.973786][ T7060] pim6reg: entered allmulticast mode [ 100.985194][ T6971] team0: Port device team_slave_1 added [ 100.995096][ T7066] loop3: detected capacity change from 0 to 256 [ 101.013012][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.020086][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.046069][ T6971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.089680][ T6971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.096663][ T6971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.100471][ T3374] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x4 [ 101.122733][ T6971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.130361][ T3374] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x2 [ 101.195002][ T3374] hid-generic 0000:3000000:0000.0021: unknown main item tag 0x3 [ 101.195240][ T6971] hsr_slave_0: entered promiscuous mode [ 101.210013][ T6971] hsr_slave_1: entered promiscuous mode [ 101.216790][ T3374] hid-generic 0000:3000000:0000.0021: hidraw0: HID v0.00 Device [sy] on syz0 [ 101.244542][ T6971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.252230][ T6971] Cannot create hsr debugfs directory [ 101.272299][ T7070] loop3: detected capacity change from 0 to 1024 [ 101.282825][ T7070] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 101.295578][ T7070] JBD2: no valid journal superblock found [ 101.301352][ T7070] EXT4-fs (loop3): Could not load journal inode [ 101.370630][ T6971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.382537][ T6971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.404649][ T6971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.414070][ T6971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.471628][ T6971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.493100][ T6971] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.507868][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.514981][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.519378][ T7080] netlink: 'syz.3.1137': attribute type 10 has an invalid length. [ 101.535678][ T6971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.546143][ T6971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.570457][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.577573][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.650041][ T7089] loop4: detected capacity change from 0 to 1024 [ 101.661762][ T7089] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 101.681770][ T6971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.702399][ T7089] EXT4-fs mount: 48 callbacks suppressed [ 101.702418][ T7089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.755456][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.838972][ T3375] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x4 [ 101.846704][ T3375] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x2 [ 101.875356][ T3375] hid-generic 0000:3000000:0000.0022: unknown main item tag 0x3 [ 101.889937][ T3375] hid-generic 0000:3000000:0000.0022: hidraw0: HID v0.00 Device [sy] on syz0 [ 101.910365][ T7118] FAULT_INJECTION: forcing a failure. [ 101.910365][ T7118] name failslab, interval 1, probability 0, space 0, times 0 [ 101.923108][ T7118] CPU: 1 UID: 0 PID: 7118 Comm: syz.0.1148 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 101.933294][ T6971] veth0_vlan: entered promiscuous mode [ 101.933519][ T7118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.943161][ T6971] veth1_vlan: entered promiscuous mode [ 101.949013][ T7118] Call Trace: [ 101.949097][ T7118] [ 101.960859][ T7118] dump_stack_lvl+0xf2/0x150 [ 101.965519][ T7118] dump_stack+0x15/0x1a [ 101.969780][ T7118] should_fail_ex+0x223/0x230 [ 101.974549][ T7118] should_failslab+0x8f/0xb0 [ 101.979173][ T7118] kmem_cache_alloc_noprof+0x52/0x320 [ 101.982203][ T6971] veth0_macvtap: entered promiscuous mode [ 101.984625][ T7118] ? getname_kernel+0x3d/0x1e0 [ 101.994514][ T6971] veth1_macvtap: entered promiscuous mode [ 101.995095][ T7118] ? selinux_capable+0x1f2/0x260 [ 102.005876][ T7118] getname_kernel+0x3d/0x1e0 [ 102.007661][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.010577][ T7118] kern_path+0x21/0x120 [ 102.010609][ T7118] do_move_mount_old+0x5d/0xd0 [ 102.021197][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.025332][ T7118] path_mount+0x536/0xb30 [ 102.030114][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.039864][ T7118] __se_sys_mount+0x27c/0x2d0 [ 102.044209][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.054583][ T7118] ? fput+0x1c4/0x200 [ 102.061738][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.069078][ T7118] __x64_sys_mount+0x67/0x80 [ 102.078144][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.080404][ T7118] x64_sys_call+0x2c84/0x2dc0 [ 102.085076][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.095387][ T7118] do_syscall_64+0xc9/0x1c0 [ 102.095424][ T7118] ? clear_bhb_loop+0x55/0xb0 [ 102.100086][ T6971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.109866][ T7118] ? clear_bhb_loop+0x55/0xb0 [ 102.109904][ T7118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.114397][ T6971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.119057][ T7118] RIP: 0033:0x7f363f230849 [ 102.119078][ T7118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.132262][ T6971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.134133][ T7118] RSP: 002b:00007f363d8a7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.134158][ T7118] RAX: ffffffffffffffda RBX: 00007f363f3f5fa0 RCX: 00007f363f230849 [ 102.143131][ T6971] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.149896][ T7118] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000020000480 [ 102.149916][ T7118] RBP: 00007f363d8a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.149933][ T7118] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 102.149950][ T7118] R13: 0000000000000000 R14: 00007f363f3f5fa0 R15: 00007ffe442bf728 [ 102.149975][ T7118] [ 102.154438][ T6971] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.251347][ T6971] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.260070][ T6971] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.444870][ T7154] loop4: detected capacity change from 0 to 1764 [ 102.520263][ T7157] netlink: 'syz.2.1163': attribute type 10 has an invalid length. [ 102.615460][ T7171] FAULT_INJECTION: forcing a failure. [ 102.615460][ T7171] name failslab, interval 1, probability 0, space 0, times 0 [ 102.628245][ T7171] CPU: 0 UID: 0 PID: 7171 Comm: syz.0.1167 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 102.638602][ T7171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.648705][ T7171] Call Trace: [ 102.652000][ T7171] [ 102.654946][ T7171] dump_stack_lvl+0xf2/0x150 [ 102.659565][ T7171] dump_stack+0x15/0x1a [ 102.663833][ T7171] should_fail_ex+0x223/0x230 [ 102.668553][ T7171] should_failslab+0x8f/0xb0 [ 102.673238][ T7171] kmem_cache_alloc_noprof+0x52/0x320 [ 102.678638][ T7171] ? getname_kernel+0x3d/0x1e0 [ 102.683518][ T7171] ? should_fail_ex+0xd7/0x230 [ 102.688422][ T7171] ? __pfx_resume_store+0x10/0x10 [ 102.693543][ T7171] getname_kernel+0x3d/0x1e0 [ 102.698171][ T7171] ? __pfx_resume_store+0x10/0x10 [ 102.703242][ T7171] kern_path+0x21/0x120 [ 102.707449][ T7171] lookup_bdev+0x62/0x140 [ 102.711819][ T7171] resume_store+0x10a/0x3a0 [ 102.716355][ T7171] ? _copy_from_iter+0x3ae/0xd00 [ 102.721392][ T7171] kobj_attr_store+0x47/0x70 [ 102.726128][ T7171] ? __pfx_kobj_attr_store+0x10/0x10 [ 102.731455][ T7171] sysfs_kf_write+0xae/0xd0 [ 102.735986][ T7171] ? __pfx_sysfs_kf_write+0x10/0x10 [ 102.741240][ T7171] kernfs_fop_write_iter+0x1c8/0x2c0 [ 102.746670][ T7171] do_iter_readv_writev+0x394/0x450 [ 102.751982][ T7171] vfs_writev+0x2d4/0x880 [ 102.756341][ T7171] ? proc_fail_nth_write+0x12a/0x150 [ 102.761677][ T7171] ? mutex_lock+0xd/0x40 [ 102.766027][ T7171] do_writev+0xf4/0x220 [ 102.770350][ T7171] __x64_sys_writev+0x45/0x50 [ 102.775074][ T7171] x64_sys_call+0x1fab/0x2dc0 [ 102.779796][ T7171] do_syscall_64+0xc9/0x1c0 [ 102.784346][ T7171] ? clear_bhb_loop+0x55/0xb0 [ 102.789202][ T7171] ? clear_bhb_loop+0x55/0xb0 [ 102.793913][ T7171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.799845][ T7171] RIP: 0033:0x7f363f230849 [ 102.804284][ T7171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.824028][ T7171] RSP: 002b:00007f363d8a7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 102.832551][ T7171] RAX: ffffffffffffffda RBX: 00007f363f3f5fa0 RCX: 00007f363f230849 [ 102.840548][ T7171] RDX: 10000000000001a2 RSI: 0000000020000a40 RDI: 0000000000000006 [ 102.848551][ T7171] RBP: 00007f363d8a70a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.856549][ T7171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.864830][ T7171] R13: 0000000000000000 R14: 00007f363f3f5fa0 R15: 00007ffe442bf728 [ 102.872877][ T7171] [ 102.946258][ T7173] loop5: detected capacity change from 0 to 164 [ 102.955681][ T7173] ISOFS: unable to read i-node block [ 102.961338][ T7173] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 103.566410][ T7188] loop5: detected capacity change from 0 to 1024 [ 103.610719][ T7188] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 103.641129][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 103.664694][ T7188] JBD2: no valid journal superblock found [ 103.670512][ T7188] EXT4-fs (loop5): Could not load journal inode [ 103.721300][ T7202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1181'. [ 103.736799][ T7202] FAULT_INJECTION: forcing a failure. [ 103.736799][ T7202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.749929][ T7202] CPU: 0 UID: 0 PID: 7202 Comm: syz.4.1181 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 103.760287][ T7202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.770362][ T7202] Call Trace: [ 103.773649][ T7202] [ 103.776596][ T7202] dump_stack_lvl+0xf2/0x150 [ 103.781300][ T7202] dump_stack+0x15/0x1a [ 103.785543][ T7202] should_fail_ex+0x223/0x230 [ 103.790254][ T7202] should_fail+0xb/0x10 [ 103.794476][ T7202] should_fail_usercopy+0x1a/0x20 [ 103.799603][ T7202] _copy_from_user+0x1e/0xb0 [ 103.804230][ T7202] kstrtouint_from_user+0x76/0xe0 [ 103.809286][ T7202] ? 0xffffffff81000000 [ 103.813456][ T7202] ? selinux_file_permission+0x22a/0x360 [ 103.819108][ T7202] proc_fail_nth_write+0x4f/0x150 [ 103.824183][ T7202] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.829855][ T7202] vfs_write+0x281/0x920 [ 103.834122][ T7202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.839771][ T7202] ? __fget_files+0x17c/0x1c0 [ 103.842645][ T7203] lo speed is unknown, defaulting to 1000 [ 103.844473][ T7202] ksys_write+0xe8/0x1b0 [ 103.854467][ T7202] __x64_sys_write+0x42/0x50 [ 103.859082][ T7202] x64_sys_call+0x287e/0x2dc0 [ 103.863791][ T7202] do_syscall_64+0xc9/0x1c0 [ 103.868437][ T7202] ? clear_bhb_loop+0x55/0xb0 [ 103.873169][ T7202] ? clear_bhb_loop+0x55/0xb0 [ 103.877904][ T7202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.883853][ T7202] RIP: 0033:0x7fd9849af2ff [ 103.888335][ T7202] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 8e 02 00 48 [ 103.908066][ T7202] RSP: 002b:00007fd983027050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 103.916501][ T7202] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd9849af2ff [ 103.924493][ T7202] RDX: 0000000000000001 RSI: 00007fd9830270b0 RDI: 0000000000000006 [ 103.925620][ T7217] netlink: 'syz.5.1175': attribute type 10 has an invalid length. [ 103.932469][ T7202] RBP: 00007fd9830270a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.932490][ T7202] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 103.932505][ T7202] R13: 0000000000000000 R14: 00007fd984b75fa0 R15: 00007ffc45c6e0f8 [ 103.932535][ T7202] [ 103.978865][ T7217] batman_adv: batadv0: Adding interface: team0 [ 103.985071][ T7217] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.010353][ T7217] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 104.221179][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 104.221195][ T29] audit: type=1400 audit(1733132304.202:8917): avc: denied { create } for pid=7234 comm="syz.0.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.260987][ T7235] SELinux: syz.0.1191 (7235) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 104.277903][ T7235] lo speed is unknown, defaulting to 1000 [ 104.284459][ T7235] lo speed is unknown, defaulting to 1000 [ 104.301081][ T7235] lo speed is unknown, defaulting to 1000 [ 104.303952][ T29] audit: type=1400 audit(1733132304.277:8918): avc: denied { create } for pid=7240 comm="syz.2.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.350476][ T29] audit: type=1400 audit(1733132304.296:8919): avc: denied { getopt } for pid=7240 comm="syz.2.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.369943][ T29] audit: type=1400 audit(1733132304.296:8920): avc: denied { kernel } for pid=7240 comm="syz.2.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 104.373652][ T7235] infiniband sz1: set active [ 104.389459][ T29] audit: type=1400 audit(1733132304.305:8921): avc: denied { ioctl } for pid=7234 comm="syz.0.1191" path="socket:[15663]" dev="sockfs" ino=15663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.394187][ T7235] infiniband sz1: added lo [ 104.394328][ T3372] lo speed is unknown, defaulting to 1000 [ 104.419098][ T29] audit: type=1400 audit(1733132304.314:8922): avc: denied { create } for pid=7233 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.419130][ T29] audit: type=1400 audit(1733132304.314:8923): avc: denied { write } for pid=7233 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 104.470823][ T29] audit: type=1400 audit(1733132304.314:8924): avc: denied { ioctl } for pid=7233 comm="syz.4.1190" path="socket:[16867]" dev="sockfs" ino=16867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.533239][ T7235] RDS/IB: sz1: added [ 104.537282][ T7235] smc: adding ib device sz1 with port count 1 [ 104.545339][ T7235] smc: ib device sz1 port 1 has pnetid [ 104.551362][ T3372] lo speed is unknown, defaulting to 1000 [ 104.557995][ T7235] lo speed is unknown, defaulting to 1000 [ 104.587842][ T29] audit: type=1400 audit(1733132304.548:8925): avc: denied { getopt } for pid=7250 comm="syz.2.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 104.641324][ T7235] lo speed is unknown, defaulting to 1000 [ 104.659212][ T29] audit: type=1400 audit(1733132304.576:8926): avc: denied { execmem } for pid=7254 comm="syz.5.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 104.741818][ T7235] lo speed is unknown, defaulting to 1000 [ 104.754779][ T7256] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1198'. [ 104.779209][ T7256] loop4: detected capacity change from 0 to 512 [ 104.827019][ T7235] lo speed is unknown, defaulting to 1000 [ 104.870993][ T7267] loop5: detected capacity change from 0 to 164 [ 104.879601][ T7267] ISOFS: unable to read i-node block [ 104.885030][ T7267] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 104.994152][ T7256] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.160917][ T7235] lo speed is unknown, defaulting to 1000 [ 105.184717][ T7256] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.359862][ T7274] loop3: detected capacity change from 0 to 164 [ 105.368284][ T7274] ISOFS: unable to read i-node block [ 105.373597][ T7274] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 105.445509][ T7256] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1198: corrupted xattr block 32: e_value out of bounds [ 105.692348][ T7235] lo speed is unknown, defaulting to 1000 [ 105.715334][ T7256] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 105.738824][ T7256] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1198: corrupted xattr block 32: e_value out of bounds [ 105.740333][ T7277] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1198: corrupted xattr block 32: e_value out of bounds [ 105.768288][ T7258] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1198: corrupted xattr block 32: e_value out of bounds [ 105.793423][ T7256] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 105.809978][ T7235] lo speed is unknown, defaulting to 1000 [ 105.832661][ T7256] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1198: corrupted xattr block 32: e_value out of bounds [ 105.863568][ T7277] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 105.873818][ T7258] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 105.888469][ T7256] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 105.908856][ T7258] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1198: corrupted xattr block 32: e_value out of bounds [ 105.933672][ T7258] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 105.960356][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.982320][ T3372] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x4 [ 105.990065][ T3372] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x2 [ 106.005024][ T7300] Invalid ELF header magic: != ELF [ 106.005291][ T3372] hid-generic 0000:3000000:0000.0023: unknown main item tag 0x3 [ 106.055850][ T3372] hid-generic 0000:3000000:0000.0023: hidraw0: HID v0.00 Device [sy] on syz0 [ 106.100905][ T7307] program syz.4.1217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.179864][ T7319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1223'. [ 106.207300][ T7325] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1224'. [ 106.259010][ T3372] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x4 [ 106.266791][ T3372] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x2 [ 106.296046][ T3372] hid-generic 0000:3000000:0000.0024: unknown main item tag 0x3 [ 106.327891][ T3372] hid-generic 0000:3000000:0000.0024: hidraw0: HID v0.00 Device [sy] on syz0 [ 106.465890][ T7347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1234'. [ 106.613633][ T7362] loop5: detected capacity change from 0 to 1024 [ 106.632800][ T7367] FAULT_INJECTION: forcing a failure. [ 106.632800][ T7367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.646163][ T7367] CPU: 1 UID: 0 PID: 7367 Comm: syz.3.1239 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 106.656511][ T7367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.666647][ T7367] Call Trace: [ 106.669940][ T7367] [ 106.672875][ T7367] dump_stack_lvl+0xf2/0x150 [ 106.677629][ T7367] dump_stack+0x15/0x1a [ 106.681849][ T7367] should_fail_ex+0x223/0x230 [ 106.686540][ T7367] should_fail+0xb/0x10 [ 106.690703][ T7367] should_fail_usercopy+0x1a/0x20 [ 106.695927][ T7367] _copy_to_user+0x20/0xa0 [ 106.700411][ T7367] pagemap_read+0x3af/0x610 [ 106.704932][ T7367] ? __pfx_pagemap_read+0x10/0x10 [ 106.710039][ T7367] vfs_read+0x1a2/0x700 [ 106.714210][ T7367] ? __fget_files+0x17c/0x1c0 [ 106.719032][ T7367] ? __rcu_read_unlock+0x4e/0x70 [ 106.723996][ T7367] ? __fget_files+0x17c/0x1c0 [ 106.728698][ T7367] __x64_sys_pread64+0xf6/0x150 [ 106.733628][ T7367] x64_sys_call+0x26ee/0x2dc0 [ 106.738328][ T7367] do_syscall_64+0xc9/0x1c0 [ 106.743097][ T7367] ? clear_bhb_loop+0x55/0xb0 [ 106.747799][ T7367] ? clear_bhb_loop+0x55/0xb0 [ 106.752631][ T7367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.758538][ T7367] RIP: 0033:0x7f14218b0849 [ 106.762956][ T7367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.782635][ T7367] RSP: 002b:00007f141ff06058 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 106.791130][ T7367] RAX: ffffffffffffffda RBX: 00007f1421a76080 RCX: 00007f14218b0849 [ 106.799171][ T7367] RDX: 0000000000019000 RSI: 000000002001a240 RDI: 0000000000000007 [ 106.807162][ T7367] RBP: 00007f141ff060a0 R08: 0000000000000000 R09: 0000000000000000 [ 106.815141][ T7367] R10: 0000000000100008 R11: 0000000000000246 R12: 0000000000000001 [ 106.823118][ T7367] R13: 0000000000000000 R14: 00007f1421a76080 R15: 00007ffdf223f088 [ 106.831100][ T7367] [ 106.838425][ T7362] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 106.894138][ T7362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.931814][ T6971] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.103242][ T7387] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 107.154517][ T7391] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 107.322260][ T7404] loop3: detected capacity change from 0 to 164 [ 107.333888][ T7404] ISOFS: unable to read i-node block [ 107.339290][ T7404] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 107.603070][ T7411] loop4: detected capacity change from 0 to 512 [ 107.647944][ T7411] journal_path: Non-blockdev passed as './file0' [ 107.654454][ T7411] EXT4-fs: error: could not find journal device path [ 107.954918][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.997183][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.089285][ T24] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x4 [ 108.097133][ T24] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x2 [ 108.104991][ T24] hid-generic 0000:3000000:0000.0025: unknown main item tag 0x3 [ 108.114449][ T24] hid-generic 0000:3000000:0000.0025: hidraw0: HID v0.00 Device [sy] on syz0 [ 108.216271][ T7453] block device autoloading is deprecated and will be removed. [ 108.244531][ T7456] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1277'. [ 108.258488][ T7456] loop5: detected capacity change from 0 to 512 [ 108.295803][ T7456] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.308606][ T7456] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.321877][ T7456] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1277: corrupted xattr block 32: e_value out of bounds [ 108.335857][ T7456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 108.344911][ T7456] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1277: corrupted xattr block 32: e_value out of bounds [ 108.359142][ T7456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 108.368246][ T7456] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1277: corrupted xattr block 32: e_value out of bounds [ 108.375856][ T7459] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1277: corrupted xattr block 32: e_value out of bounds [ 108.392860][ T7456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 108.396672][ T7459] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 108.431967][ T6971] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.576016][ T7464] loop4: detected capacity change from 0 to 1024 [ 108.583169][ T7464] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 108.735414][ T7464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.786560][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.028736][ T7469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7469 comm=syz.0.1281 [ 109.152503][ T24] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x4 [ 109.160364][ T24] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x2 [ 109.170211][ T24] hid-generic 0000:3000000:0000.0026: unknown main item tag 0x3 [ 109.178753][ T24] hid-generic 0000:3000000:0000.0026: hidraw0: HID v0.00 Device [sy] on syz0 [ 109.264136][ T7492] loop4: detected capacity change from 0 to 1024 [ 109.271259][ T7492] EXT4-fs: Ignoring removed orlov option [ 109.277445][ T7492] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.289154][ T7496] loop3: detected capacity change from 0 to 1024 [ 109.297771][ T7496] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 109.321035][ T7492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.334774][ T7496] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.431848][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.440892][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.482240][ T7506] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 109.491575][ T3374] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x4 [ 109.499155][ T7506] FAULT_INJECTION: forcing a failure. [ 109.499155][ T7506] name failslab, interval 1, probability 0, space 0, times 0 [ 109.499250][ T3374] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x2 [ 109.511825][ T7506] CPU: 1 UID: 0 PID: 7506 Comm: syz.3.1294 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 109.520530][ T3374] hid-generic 0000:3000000:0000.0027: unknown main item tag 0x3 [ 109.529983][ T7506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.540307][ T3374] hid-generic 0000:3000000:0000.0027: hidraw0: HID v0.00 Device [sy] on syz0 [ 109.547750][ T7506] Call Trace: [ 109.547760][ T7506] [ 109.547770][ T7506] dump_stack_lvl+0xf2/0x150 [ 109.568912][ T7506] dump_stack+0x15/0x1a [ 109.573118][ T7506] should_fail_ex+0x223/0x230 [ 109.577827][ T7506] should_failslab+0x8f/0xb0 [ 109.582519][ T7506] __kmalloc_node_noprof+0xad/0x410 [ 109.587807][ T7506] ? __kvmalloc_node_noprof+0x72/0x170 [ 109.593315][ T7506] __kvmalloc_node_noprof+0x72/0x170 [ 109.598619][ T7506] __nf_hook_entries_try_shrink+0x23a/0x440 [ 109.604583][ T7506] __nf_unregister_net_hook+0x31e/0x3f0 [ 109.610247][ T7506] nf_unregister_net_hooks+0xb0/0xe0 [ 109.615582][ T7506] nf_ct_netns_do_put+0x1b1/0x250 [ 109.620888][ T7506] ? __pfx_synproxy_tg6_destroy+0x10/0x10 [ 109.626715][ T7506] nf_ct_netns_put+0xe3/0x1e0 [ 109.631521][ T7506] synproxy_tg6_destroy+0x8c/0xa0 [ 109.636557][ T7506] cleanup_entry+0x166/0x1c0 [ 109.641166][ T7506] translate_table+0xfd3/0x1040 [ 109.646116][ T7506] do_ip6t_set_ctl+0x7cc/0x8c0 [ 109.650916][ T7506] ? kstrtouint+0x77/0xc0 [ 109.655279][ T7506] ? __rcu_read_unlock+0x4e/0x70 [ 109.660433][ T7506] nf_setsockopt+0x195/0x1b0 [ 109.665044][ T7506] ipv6_setsockopt+0x10f/0x130 [ 109.669856][ T7506] udpv6_setsockopt+0x95/0xb0 [ 109.674606][ T7506] sock_common_setsockopt+0x64/0x80 [ 109.679876][ T7506] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 109.685784][ T7506] __sys_setsockopt+0x187/0x200 [ 109.690698][ T7506] __x64_sys_setsockopt+0x66/0x80 [ 109.695757][ T7506] x64_sys_call+0x282e/0x2dc0 [ 109.700439][ T7506] do_syscall_64+0xc9/0x1c0 [ 109.705003][ T7506] ? clear_bhb_loop+0x55/0xb0 [ 109.709701][ T7506] ? clear_bhb_loop+0x55/0xb0 [ 109.714412][ T7506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.720338][ T7506] RIP: 0033:0x7f14218b0849 [ 109.724819][ T7506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.744453][ T7506] RSP: 002b:00007f141ff27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 109.752926][ T7506] RAX: ffffffffffffffda RBX: 00007f1421a75fa0 RCX: 00007f14218b0849 [ 109.760903][ T7506] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 109.768879][ T7506] RBP: 00007f141ff270a0 R08: 00000000000003d8 R09: 0000000000000000 [ 109.776878][ T7506] R10: 0000000020003a80 R11: 0000000000000246 R12: 0000000000000002 [ 109.784855][ T7506] R13: 0000000000000000 R14: 00007f1421a75fa0 R15: 00007ffdf223f088 [ 109.792908][ T7506] [ 109.796203][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 109.796217][ T29] audit: type=1400 audit(1733132309.216:9301): avc: denied { create } for pid=7511 comm="syz.2.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.804938][ T3374] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x4 [ 109.831009][ T3374] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x2 [ 109.837703][ T29] audit: type=1400 audit(1733132309.450:9302): avc: denied { ioctl } for pid=7511 comm="syz.2.1295" path="socket:[16042]" dev="sockfs" ino=16042 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.864555][ T29] audit: type=1400 audit(1733132309.459:9303): avc: denied { write } for pid=7511 comm="syz.2.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 109.905761][ T3374] hid-generic 0000:3000000:0000.0028: unknown main item tag 0x3 [ 109.918013][ T3374] hid-generic 0000:3000000:0000.0028: hidraw0: HID v0.00 Device [sy] on syz0 [ 109.947372][ T29] audit: type=1400 audit(1733132309.553:9304): avc: denied { create } for pid=7515 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 109.984033][ T29] audit: type=1400 audit(1733132309.553:9305): avc: denied { write } for pid=7515 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.004411][ T29] audit: type=1400 audit(1733132309.553:9306): avc: denied { nlmsg_write } for pid=7515 comm="syz.2.1298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 110.009010][ T7520] audit: audit_backlog=65 > audit_backlog_limit=64 [ 110.026359][ T29] audit: type=1400 audit(1733132309.562:9307): avc: denied { create } for pid=7517 comm="syz.0.1300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.032632][ T7520] audit: audit_lost=9 audit_rate_limit=0 audit_backlog_limit=64 [ 110.032650][ T7520] audit: backlog limit exceeded [ 110.037980][ T7522] 9pnet_fd: Insufficient options for proto=fd [ 110.069675][ T7525] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1302'. [ 110.084916][ T7525] loop4: detected capacity change from 0 to 512 [ 110.102778][ T7525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.123023][ T7525] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.134491][ T7531] loop3: detected capacity change from 0 to 1024 [ 110.139583][ T7525] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1302: corrupted xattr block 32: e_value out of bounds [ 110.146294][ T7531] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 110.189557][ T7531] JBD2: no valid journal superblock found [ 110.195344][ T7531] EXT4-fs (loop3): Could not load journal inode [ 110.203976][ T7525] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 110.213489][ T7525] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1302: corrupted xattr block 32: e_value out of bounds [ 110.228305][ T7525] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 110.237984][ T7525] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1302: corrupted xattr block 32: e_value out of bounds [ 110.254744][ T7525] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 110.259144][ T7540] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1302: corrupted xattr block 32: e_value out of bounds [ 110.277796][ T7540] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 110.318949][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.343484][ T3374] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x4 [ 110.351274][ T3374] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x2 [ 110.359309][ T3374] hid-generic 0000:3000000:0000.0029: unknown main item tag 0x3 [ 110.367551][ T3374] hid-generic 0000:3000000:0000.0029: hidraw0: HID v0.00 Device [sy] on syz0 [ 110.513061][ T7555] netlink: 'syz.3.1303': attribute type 10 has an invalid length. [ 110.837545][ T7557] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1309'. [ 110.851443][ T7557] loop4: detected capacity change from 0 to 512 [ 110.862212][ T7557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.875092][ T7557] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.887821][ T7557] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1309: corrupted xattr block 32: e_value out of bounds [ 110.901929][ T7557] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 110.911135][ T7557] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1309: corrupted xattr block 32: e_value out of bounds [ 110.925137][ T7557] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 110.934108][ T7557] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1309: corrupted xattr block 32: e_value out of bounds [ 110.941578][ T7564] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.1309: corrupted xattr block 32: e_value out of bounds [ 110.950035][ T7557] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 110.962430][ T7564] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 111.002812][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.014368][ T3374] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x4 [ 111.022304][ T3374] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x2 [ 111.030099][ T3374] hid-generic 0000:3000000:0000.002A: unknown main item tag 0x3 [ 111.038534][ T3374] hid-generic 0000:3000000:0000.002A: hidraw0: HID v0.00 Device [sy] on syz0 [ 111.097187][ T7570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1314'. [ 111.115393][ T7571] FAULT_INJECTION: forcing a failure. [ 111.115393][ T7571] name failslab, interval 1, probability 0, space 0, times 0 [ 111.128083][ T7571] CPU: 0 UID: 0 PID: 7571 Comm: syz.3.1313 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 111.138429][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.148496][ T7571] Call Trace: [ 111.151782][ T7571] [ 111.154723][ T7571] dump_stack_lvl+0xf2/0x150 [ 111.159416][ T7571] dump_stack+0x15/0x1a [ 111.163635][ T7571] should_fail_ex+0x223/0x230 [ 111.168342][ T7571] should_failslab+0x8f/0xb0 [ 111.172991][ T7571] kmem_cache_alloc_noprof+0x52/0x320 [ 111.178443][ T7571] ? p9_client_prepare_req+0xf9/0x870 [ 111.183883][ T7571] p9_client_prepare_req+0xf9/0x870 [ 111.189168][ T7571] ? copy_from_kernel_nofault+0xbf/0x1d0 [ 111.194932][ T7571] ? copy_from_kernel_nofault+0x1a6/0x1d0 [ 111.200680][ T7571] ? bpf_probe_read_compat+0x123/0x130 [ 111.206228][ T7571] p9_client_rpc+0xf0/0x710 [ 111.210741][ T7571] ? __rcu_read_unlock+0x4e/0x70 [ 111.215909][ T7571] ? bpf_trace_run2+0x123/0x1d0 [ 111.220777][ T7571] ? p9_req_put+0x122/0x160 [ 111.225333][ T7571] ? kfree+0x247/0x2f0 [ 111.229474][ T7571] p9_client_open+0xfe/0x2c0 [ 111.234164][ T7571] v9fs_file_open+0x24d/0x530 [ 111.238858][ T7571] ? __pfx_v9fs_file_open+0x10/0x10 [ 111.244199][ T7571] do_dentry_open+0x621/0xa20 [ 111.248926][ T7571] vfs_open+0x38/0x1f0 [ 111.253002][ T7571] path_openat+0x1ac2/0x1fa0 [ 111.257686][ T7571] ? _parse_integer+0x27/0x30 [ 111.262368][ T7571] ? kstrtoull+0x110/0x140 [ 111.266863][ T7571] do_filp_open+0x107/0x230 [ 111.271402][ T7571] do_sys_openat2+0xab/0x120 [ 111.276039][ T7571] __x64_sys_creat+0x66/0x90 [ 111.280685][ T7571] x64_sys_call+0x1084/0x2dc0 [ 111.285379][ T7571] do_syscall_64+0xc9/0x1c0 [ 111.289991][ T7571] ? clear_bhb_loop+0x55/0xb0 [ 111.294707][ T7571] ? clear_bhb_loop+0x55/0xb0 [ 111.299931][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.305907][ T7571] RIP: 0033:0x7f14218b0849 [ 111.310351][ T7571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.330048][ T7571] RSP: 002b:00007f141ff27058 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 111.338546][ T7571] RAX: ffffffffffffffda RBX: 00007f1421a75fa0 RCX: 00007f14218b0849 [ 111.346531][ T7571] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000020002200 [ 111.354529][ T7571] RBP: 00007f141ff270a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.362581][ T7571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.370561][ T7571] R13: 0000000000000000 R14: 00007f1421a75fa0 R15: 00007ffdf223f088 [ 111.378545][ T7571] [ 111.481312][ T7581] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1318'. [ 111.611073][ T7597] 9pnet_fd: Insufficient options for proto=fd [ 111.631520][ T7599] Invalid ELF header magic: != ELF [ 111.655307][ T7593] netlink: 'syz.0.1323': attribute type 10 has an invalid length. [ 111.696242][ T1040] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x4 [ 111.703955][ T1040] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x2 [ 111.712925][ T1040] hid-generic 0000:3000000:0000.002B: unknown main item tag 0x3 [ 111.737353][ T1040] hid-generic 0000:3000000:0000.002B: hidraw0: HID v0.00 Device [sy] on syz0 [ 111.750666][ T7605] SELinux: syz.0.1326 (7605) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 111.778149][ T7605] sz1: rxe_newlink: already configured on lo [ 111.835828][ T7615] pimreg: entered allmulticast mode [ 111.843528][ T7620] bpf_get_probe_write_proto: 14 callbacks suppressed [ 111.843546][ T7620] syz.0.1332[7620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.855730][ T7617] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1330'. [ 111.861214][ T7620] syz.0.1332[7620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.876919][ T7615] pimreg: left allmulticast mode [ 111.905360][ T7620] syz.0.1332[7620] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.941706][ T7629] loop3: detected capacity change from 0 to 164 [ 111.965794][ T7629] ISOFS: unable to read i-node block [ 111.971231][ T7629] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 112.049277][ T3360] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x4 [ 112.057121][ T3360] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x2 [ 112.069013][ T3360] hid-generic 0000:3000000:0000.002C: unknown main item tag 0x3 [ 112.081441][ T7631] netlink: 'syz.0.1336': attribute type 10 has an invalid length. [ 112.089965][ T3360] hid-generic 0000:3000000:0000.002C: hidraw0: HID v0.00 Device [sy] on syz0 [ 112.244481][ T7660] SELinux: syz.0.1344 (7660) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 112.266138][ T7660] sz1: rxe_newlink: already configured on lo [ 112.362888][ T7665] loop5: detected capacity change from 0 to 164 [ 112.388331][ T7665] ISOFS: unable to read i-node block [ 112.393722][ T7665] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 112.647535][ T7668] kernel profiling enabled (shift: 2) [ 112.909091][ T3372] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x4 [ 112.916831][ T3372] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x2 [ 112.924802][ T3372] hid-generic 0000:3000000:0000.002D: unknown main item tag 0x3 [ 112.932919][ T3372] hid-generic 0000:3000000:0000.002D: hidraw0: HID v0.00 Device [sy] on syz0 [ 112.973731][ T7687] loop3: detected capacity change from 0 to 2048 [ 112.996259][ T7680] netlink: 'syz.0.1354': attribute type 10 has an invalid length. [ 113.124130][ T7694] SELinux: syz.5.1358 (7694) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 113.161743][ T7694] rdma_rxe: rxe_newlink: failed to add lo [ 113.270743][ T7697] netlink: 'syz.0.1360': attribute type 10 has an invalid length. [ 113.402944][ T7715] Invalid ELF header magic: != ELF [ 113.441435][ T3360] hid-generic 0000:3000000:0000.002E: unknown main item tag 0x4 [ 113.449331][ T3360] hid-generic 0000:3000000:0000.002E: unknown main item tag 0x2 [ 113.470341][ T3360] hid-generic 0000:3000000:0000.002E: unknown main item tag 0x3 [ 113.482997][ T3360] hid-generic 0000:3000000:0000.002E: hidraw0: HID v0.00 Device [sy] on syz0 [ 113.639950][ T7722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.672856][ T7722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.868841][ T7728] loop3: detected capacity change from 0 to 164 [ 113.936168][ T7728] ISOFS: unable to read i-node block [ 113.941647][ T7728] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 113.964171][ T7731] loop5: detected capacity change from 0 to 2048 [ 114.946955][ T7753] Invalid ELF header magic: != ELF [ 115.038432][ T3360] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x4 [ 115.046188][ T3360] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x2 [ 115.082841][ T3360] hid-generic 0000:3000000:0000.002F: unknown main item tag 0x3 [ 115.098535][ T7760] loop3: detected capacity change from 0 to 1024 [ 115.116945][ T3360] hid-generic 0000:3000000:0000.002F: hidraw0: HID v0.00 Device [sy] on syz0 [ 115.134608][ T7760] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 115.307726][ T7760] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.406439][ T7775] loop5: detected capacity change from 0 to 164 [ 115.416085][ T7775] ISOFS: unable to read i-node block [ 115.421451][ T7775] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 115.454404][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 115.454421][ T29] audit: type=1326 audit(1733132314.651:9724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526100849 code=0x7ffc0000 [ 115.484094][ T29] audit: type=1326 audit(1733132314.651:9725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526100849 code=0x7ffc0000 [ 115.507530][ T29] audit: type=1326 audit(1733132314.651:9726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff526100849 code=0x7ffc0000 [ 115.531032][ T29] audit: type=1326 audit(1733132314.651:9727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526100849 code=0x7ffc0000 [ 115.554690][ T29] audit: type=1326 audit(1733132314.651:9728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526100849 code=0x7ffc0000 [ 115.578130][ T29] audit: type=1326 audit(1733132314.651:9729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff526100849 code=0x7ffc0000 [ 115.601538][ T29] audit: type=1326 audit(1733132314.651:9730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526100849 code=0x7ffc0000 [ 115.625017][ T29] audit: type=1326 audit(1733132314.651:9731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526100849 code=0x7ffc0000 [ 115.648438][ T29] audit: type=1326 audit(1733132314.651:9732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff526100849 code=0x7ffc0000 [ 115.671902][ T29] audit: type=1326 audit(1733132314.651:9733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7762 comm="syz.5.1384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff526100849 code=0x7ffc0000 [ 115.753015][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.173907][ T7804] loop3: detected capacity change from 0 to 164 [ 116.244741][ T7804] ISOFS: unable to read i-node block [ 116.250139][ T7804] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 116.326176][ T7809] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1395'. [ 116.450096][ T7811] loop5: detected capacity change from 0 to 512 [ 116.510240][ T7811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.563808][ T7811] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.616905][ T7809] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1395: corrupted xattr block 32: e_value out of bounds [ 116.676107][ T7809] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 116.685203][ T7809] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1395: corrupted xattr block 32: e_value out of bounds [ 116.712252][ T7817] lo speed is unknown, defaulting to 1000 [ 116.722193][ T7809] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 116.828443][ T6971] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.845259][ T7817] lo speed is unknown, defaulting to 1000 [ 116.858698][ T7822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1399'. [ 116.867705][ T7822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1399'. [ 116.876782][ T7822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1399'. [ 116.975058][ T7822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1399'. [ 116.984115][ T7822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1399'. [ 116.993135][ T7822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1399'. [ 117.108150][ T7824] tmpfs: Bad value for 'mpol' [ 117.139814][ T7824] pimreg4: entered allmulticast mode [ 117.149309][ T7822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1399'. [ 117.158433][ T7822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1399'. [ 117.256344][ T7817] ------------[ cut here ]------------ [ 117.261984][ T7817] WARNING: CPU: 1 PID: 7817 at net/ipv6/ip6mr.c:419 ip6mr_rules_exit+0x18c/0x210 [ 117.271263][ T7817] Modules linked in: [ 117.275208][ T7817] CPU: 1 UID: 0 PID: 7817 Comm: syz.0.1397 Not tainted 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 117.285622][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.295740][ T7817] RIP: 0010:ip6mr_rules_exit+0x18c/0x210 [ 117.301478][ T7817] Code: 00 31 f6 31 d2 e8 a4 3d 34 fd 48 89 df e8 dc 2b d3 fc 4d 39 fd 74 18 e8 72 7b a4 fc 4c 89 eb e9 f7 fe ff ff e8 65 7b a4 fc 90 <0f> 0b 90 eb b5 e8 5a 7b a4 fc 48 8b 2c 24 eb 05 e8 4f 7b a4 fc 48 [ 117.321362][ T7817] RSP: 0018:ffffc90011687cf8 EFLAGS: 00010246 [ 117.327824][ T7817] RAX: ffffffff848e2f7b RBX: ffff888116e3b000 RCX: 0000000000080000 [ 117.336837][ T7817] RDX: ffffc90001fb2000 RSI: 000000000007ffff RDI: 0000000000080000 [ 117.345311][ T7817] RBP: 0000000000000001 R08: 0001888116a46a1f R09: 0000000000000000 [ 117.353427][ T7817] R10: 0001ffffffffffff R11: 0001888116e3b008 R12: ffff888116a46040 [ 117.361450][ T7817] R13: ffff888116a46a08 R14: dead000000000122 R15: ffff888116a46a08 [ 117.369458][ T7817] FS: 00007f363d8a76c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 117.378438][ T7817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.385130][ T7817] CR2: ffffffffde000000 CR3: 0000000108a9e000 CR4: 00000000003506f0 [ 117.393145][ T7817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.401145][ T7817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.409202][ T7817] Call Trace: [ 117.412517][ T7817] [ 117.415492][ T7817] ? __warn+0x141/0x350 [ 117.419681][ T7817] ? report_bug+0x315/0x420 [ 117.424252][ T7817] ? ip6mr_rules_exit+0x18c/0x210 [ 117.429405][ T7817] ? handle_bug+0x60/0x90 [ 117.433856][ T7817] ? exc_invalid_op+0x1a/0x50 [ 117.438642][ T7817] ? asm_exc_invalid_op+0x1a/0x20 [ 117.443712][ T7817] ? ip6mr_rules_exit+0x18b/0x210 [ 117.448813][ T7817] ? ip6mr_rules_exit+0x18c/0x210 [ 117.453926][ T7817] ? ip6mr_rules_exit+0x18b/0x210 [ 117.459089][ T7817] ip6mr_net_exit_batch+0x2d/0x60 [ 117.464155][ T7817] ? __pfx_ip6mr_net_exit_batch+0x10/0x10 [ 117.470007][ T7817] setup_net+0x474/0x600 [ 117.474351][ T7817] copy_net_ns+0x290/0x430 [ 117.478884][ T7817] create_new_namespaces+0x228/0x430 [ 117.484206][ T7817] unshare_nsproxy_namespaces+0xe6/0x120 [ 117.489983][ T7817] ksys_unshare+0x3c9/0x6e0 [ 117.494544][ T7817] __x64_sys_unshare+0x1f/0x30 [ 117.499415][ T7817] x64_sys_call+0x1a3e/0x2dc0 [ 117.504167][ T7817] do_syscall_64+0xc9/0x1c0 [ 117.508719][ T7817] ? clear_bhb_loop+0x55/0xb0 [ 117.513471][ T7817] ? clear_bhb_loop+0x55/0xb0 [ 117.518208][ T7817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.524387][ T7817] RIP: 0033:0x7f363f230849 [ 117.528908][ T7817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.548563][ T7817] RSP: 002b:00007f363d8a7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 117.557180][ T7817] RAX: ffffffffffffffda RBX: 00007f363f3f5fa0 RCX: 00007f363f230849 [ 117.565305][ T7817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 117.573304][ T7817] RBP: 00007f363f2a3986 R08: 0000000000000000 R09: 0000000000000000 [ 117.581425][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.589546][ T7817] R13: 0000000000000000 R14: 00007f363f3f5fa0 R15: 00007ffe442bf728 [ 117.597685][ T7817] [ 117.600785][ T7817] ---[ end trace 0000000000000000 ]--- [ 117.617485][ T7817] ------------[ cut here ]------------ [ 117.622967][ T7817] WARNING: CPU: 1 PID: 7817 at net/ipv4/ipmr.c:440 ipmr_rules_exit+0x18c/0x210 [ 117.632049][ T7817] Modules linked in: [ 117.636024][ T7817] CPU: 1 UID: 0 PID: 7817 Comm: syz.0.1397 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 117.648370][ T7817] Tainted: [W]=WARN [ 117.652210][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.662516][ T7817] RIP: 0010:ipmr_rules_exit+0x18c/0x210 [ 117.668173][ T7817] Code: 00 31 f6 31 d2 e8 64 52 4d fd 48 89 df e8 9c 40 ec fc 4d 39 fd 74 18 e8 32 90 bd fc 4c 89 eb e9 f7 fe ff ff e8 25 90 bd fc 90 <0f> 0b 90 eb b5 e8 1a 90 bd fc 48 8b 2c 24 eb 05 e8 0f 90 bd fc 48 [ 117.687842][ T7817] RSP: 0018:ffffc90011687cf8 EFLAGS: 00010246 [ 117.694030][ T7817] RAX: ffffffff84751abb RBX: ffff888104727000 RCX: 0000000000080000 [ 117.702245][ T7817] RDX: ffffc90001fb2000 RSI: 000000000007ffff RDI: 0000000000080000 [ 117.710512][ T7817] RBP: 0000000000000001 R08: 0001888116a4667f R09: 0000000000000000 [ 117.718609][ T7817] R10: 0001ffffffffffff R11: 0001888104727008 R12: ffff888116a46040 [ 117.726943][ T7817] R13: ffff888116a46668 R14: dead000000000122 R15: ffff888116a46668 [ 117.735286][ T7817] FS: 00007f363d8a76c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 117.744264][ T7817] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.751211][ T7817] CR2: ffffffffde000000 CR3: 0000000108a9e000 CR4: 00000000003506f0 [ 117.759278][ T7817] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.767580][ T7817] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.775668][ T7817] Call Trace: [ 117.779043][ T7817] [ 117.782031][ T7817] ? __warn+0x141/0x350 [ 117.786290][ T7817] ? report_bug+0x315/0x420 [ 117.790854][ T7817] ? ipmr_rules_exit+0x18c/0x210 [ 117.795841][ T7817] ? handle_bug+0x60/0x90 [ 117.800240][ T7817] ? exc_invalid_op+0x1a/0x50 [ 117.804947][ T7817] ? asm_exc_invalid_op+0x1a/0x20 [ 117.810098][ T7817] ? ipmr_rules_exit+0x18b/0x210 [ 117.815085][ T7817] ? ipmr_rules_exit+0x18c/0x210 [ 117.820145][ T7817] ? ipmr_rules_exit+0x18b/0x210 [ 117.825200][ T7817] ipmr_net_exit_batch+0x2d/0x60 [ 117.825985][ T7854] FAULT_INJECTION: forcing a failure. [ 117.825985][ T7854] name failslab, interval 1, probability 0, space 0, times 0 [ 117.830222][ T7817] ? __pfx_ipmr_net_exit_batch+0x10/0x10 [ 117.830265][ T7817] setup_net+0x474/0x600 [ 117.842881][ T7854] CPU: 0 UID: 0 PID: 7854 Comm: syz.5.1408 Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 117.848479][ T7817] copy_net_ns+0x290/0x430 [ 117.852703][ T7854] Tainted: [W]=WARN [ 117.852712][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 117.852735][ T7854] Call Trace: [ 117.852743][ T7854] [ 117.852751][ T7854] dump_stack_lvl+0xf2/0x150 [ 117.864685][ T7817] create_new_namespaces+0x228/0x430 [ 117.868914][ T7854] dump_stack+0x15/0x1a [ 117.868956][ T7854] should_fail_ex+0x223/0x230 [ 117.868989][ T7854] should_failslab+0x8f/0xb0 [ 117.869061][ T7854] __kmalloc_node_noprof+0xad/0x410 [ 117.872914][ T7817] unshare_nsproxy_namespaces+0xe6/0x120 [ 117.882917][ T7854] ? __kvmalloc_node_noprof+0x72/0x170 [ 117.886202][ T7817] ksys_unshare+0x3c9/0x6e0 [ 117.889111][ T7854] __kvmalloc_node_noprof+0x72/0x170 [ 117.893715][ T7817] __x64_sys_unshare+0x1f/0x30 [ 117.898974][ T7854] rhashtable_init_noprof+0x312/0x450 [ 117.903130][ T7817] x64_sys_call+0x1a3e/0x2dc0 [ 117.907847][ T7854] rhltable_init_noprof+0x1e/0x40 [ 117.912446][ T7817] do_syscall_64+0xc9/0x1c0 [ 117.917629][ T7854] nf_tables_newtable+0x556/0xf20 [ 117.923359][ T7817] ? clear_bhb_loop+0x55/0xb0 [ 117.928895][ T7854] nfnetlink_rcv+0xb3e/0x15d0 [ 117.933473][ T7817] ? clear_bhb_loop+0x55/0xb0 [ 117.938741][ T7854] ? kmem_cache_free+0xdc/0x2d0 [ 117.943501][ T7817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.948882][ T7854] netlink_unicast+0x599/0x670 [ 117.953531][ T7817] RIP: 0033:0x7f363f230849 [ 117.958536][ T7854] netlink_sendmsg+0x5cc/0x6e0 [ 117.958565][ T7854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.958588][ T7854] __sock_sendmsg+0x140/0x180 [ 117.963165][ T7817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.968179][ T7854] ____sys_sendmsg+0x312/0x410 [ 117.972865][ T7817] RSP: 002b:00007f363d8a7058 EFLAGS: 00000246 [ 117.977517][ T7854] __sys_sendmsg+0x19d/0x230 [ 117.982193][ T7817] ORIG_RAX: 0000000000000110 [ 117.987029][ T7854] __x64_sys_sendmsg+0x46/0x50 [ 117.992896][ T7817] RAX: ffffffffffffffda RBX: 00007f363f3f5fa0 RCX: 00007f363f230849 [ 117.997630][ T7854] x64_sys_call+0x2734/0x2dc0 [ 118.002040][ T7817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 118.006777][ T7854] do_syscall_64+0xc9/0x1c0 [ 118.006807][ T7854] ? clear_bhb_loop+0x55/0xb0 [ 118.012792][ T7817] RBP: 00007f363f2a3986 R08: 0000000000000000 R09: 0000000000000000 [ 118.016803][ T7854] ? clear_bhb_loop+0x55/0xb0 [ 118.036646][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.041182][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.047244][ T7817] R13: 0000000000000000 R14: 00007f363f3f5fa0 R15: 00007ffe442bf728 [ 118.051799][ T7854] RIP: 0033:0x7ff526100849 [ 118.051818][ T7854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.056554][ T7817] [ 118.061277][ T7854] RSP: 002b:00007ff524777058 EFLAGS: 00000246 [ 118.069244][ T7817] ---[ end trace 0000000000000000 ]--- [ 118.073890][ T7854] ORIG_RAX: 000000000000002e [ 118.169427][ T7854] RAX: ffffffffffffffda RBX: 00007ff5262c5fa0 RCX: 00007ff526100849 [ 118.177510][ T7854] RDX: 000000002400c044 RSI: 0000000020000200 RDI: 0000000000000003 [ 118.185489][ T7854] RBP: 00007ff5247770a0 R08: 0000000000000000 R09: 0000000000000000 [ 118.193479][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.201457][ T7854] R13: 0000000000000000 R14: 00007ff5262c5fa0 R15: 00007ffd814dae38 [ 118.209478][ T7854] [ 118.223601][ T7850] loop3: detected capacity change from 0 to 2048 [ 118.259363][ T7850] Alternate GPT is invalid, using primary GPT. [ 118.265675][ T7850] loop3: p1 p2 p3 [ 118.321961][ T7858] SELinux: syz.5.1409 (7858) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 118.355491][ T7858] rdma_rxe: rxe_newlink: failed to add lo [ 118.989154][ T7877] __nla_validate_parse: 2 callbacks suppressed [ 118.989255][ T7877] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1416'. [ 119.028869][ T7877] loop5: detected capacity change from 0 to 512 [ 119.072981][ T7877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.096429][ T7877] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.121141][ T7877] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1416: corrupted xattr block 32: e_value out of bounds [ 119.190951][ T7877] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 119.230646][ T7877] EXT4-fs error (device loop5): ext4_xattr_block_get:596: inode #15: comm syz.5.1416: corrupted xattr block 32: e_value out of bounds [ 119.292132][ T7877] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 119.363445][ T6971] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.535733][ T7905] capability: warning: `syz.2.1427' uses 32-bit capabilities (legacy support in use) [ 120.504952][ T7925] nft_compat: unsupported protocol 5 [ 120.819035][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 120.819053][ T29] audit: type=1400 audit(1733132319.720:10025): avc: denied { unmount } for pid=6971 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 120.892067][ T29] audit: type=1400 audit(1733132319.720:10026): avc: denied { getattr } for pid=6971 comm="syz-executor" path="/55/file0/target/dbroot" dev="configfs" ino=50487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 121.673054][ T24] hid-generic 0000:3000000:0000.0030: unknown main item tag 0x4 [ 121.680914][ T24] hid-generic 0000:3000000:0000.0030: unknown main item tag 0x2 [ 121.688665][ T29] audit: type=1400 audit(1733132320.525:10027): avc: denied { read write } for pid=7947 comm="syz.0.1442" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.712293][ T29] audit: type=1400 audit(1733132320.525:10028): avc: denied { open } for pid=7947 comm="syz.0.1442" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 121.738290][ T24] hid-generic 0000:3000000:0000.0030: unknown main item tag 0x3 [ 121.753790][ T24] hid-generic 0000:3000000:0000.0030: hidraw0: HID v0.00 Device [sy] on syz0 [ 122.058832][ T29] audit: type=1326 audit(1733132320.871:10029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1877e00849 code=0x7ffc0000 [ 122.082482][ T29] audit: type=1326 audit(1733132320.871:10030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1877e00849 code=0x7ffc0000 [ 122.106005][ T29] audit: type=1326 audit(1733132320.871:10031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1877e00849 code=0x7ffc0000 [ 122.129567][ T29] audit: type=1326 audit(1733132320.871:10032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1877e00849 code=0x7ffc0000 [ 122.153103][ T29] audit: type=1326 audit(1733132320.871:10033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1877e00849 code=0x7ffc0000 [ 122.176676][ T29] audit: type=1326 audit(1733132320.871:10034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7951 comm="syz.2.1446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1877e00849 code=0x7ffc0000 [ 122.440021][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x1 [ 122.447522][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.455002][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.462431][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.469866][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.477270][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.484687][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.492118][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.499538][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.507008][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.515168][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.522596][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.530232][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.537814][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.545307][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.552715][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.560256][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.567822][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.575277][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.582760][ T3372] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 122.590698][ T7962] netlink: 'syz.0.1448': attribute type 39 has an invalid length. [ 122.600800][ T3372] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz0 [ 122.704571][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1448'. [ 122.713739][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1448'. [ 122.758245][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1448'. [ 122.767240][ T7963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1448'. [ 122.952646][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1450'. [ 123.117980][ T7974] syzkaller0: entered promiscuous mode [ 123.123582][ T7974] syzkaller0: entered allmulticast mode [ 124.547989][ T7999] serio: Serial port ptm0 [ 125.567194][ T8016] tipc: Failed to remove unknown binding: 66,1,1/0:2107265753/2107265755 [ 125.575756][ T8016] tipc: Failed to remove unknown binding: 66,1,1/0:2107265753/2107265755 [ 125.699225][ T8014] netlink: 'syz.2.1469': attribute type 21 has an invalid length. [ 125.719976][ T8014] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 125.727776][ T8014] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1469'. [ 125.984842][ T8022] xt_socket: unknown flags 0x2 [ 126.156702][ T8026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1474'. [ 126.168765][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 126.168780][ T29] audit: type=1400 audit(1733132324.725:10262): avc: denied { module_request } for pid=8024 comm="syz.2.1474" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 126.231878][ T29] audit: type=1400 audit(1733132324.772:10263): avc: denied { sys_module } for pid=8024 comm="syz.2.1474" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 126.347355][ T29] audit: type=1400 audit(1733132324.875:10264): avc: denied { create } for pid=8024 comm="syz.2.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.367222][ T29] audit: type=1400 audit(1733132324.875:10265): avc: denied { bind } for pid=8024 comm="syz.2.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.612166][ T29] audit: type=1400 audit(1733132324.968:10266): avc: denied { listen } for pid=8024 comm="syz.2.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.632025][ T29] audit: type=1400 audit(1733132325.015:10267): avc: denied { read } for pid=8024 comm="syz.2.1474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 127.001108][ T29] audit: type=1400 audit(1733132325.501:10268): avc: denied { create } for pid=8035 comm="syz.2.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 127.063399][ T29] audit: type=1400 audit(1733132325.567:10269): avc: denied { create } for pid=8043 comm="syz.0.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.125633][ T29] audit: type=1400 audit(1733132325.595:10270): avc: denied { write } for pid=8043 comm="syz.0.1477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.370056][ T29] audit: type=1326 audit(1733132325.847:10271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8046 comm="syz.2.1478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1877e00849 code=0x7ffc0000 [ 128.476314][ T8062] netlink: 'syz.2.1485': attribute type 10 has an invalid length. [ 128.629240][ T8069] netlink: 'syz.2.1486': attribute type 10 has an invalid length. [ 129.055333][ T8078] lo speed is unknown, defaulting to 1000 [ 129.115994][ T8078] lo speed is unknown, defaulting to 1000 [ 129.230645][ T4318] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.307693][ T4318] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.353911][ T8107] netlink: 'syz.2.1496': attribute type 10 has an invalid length. [ 129.372558][ T4318] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.410692][ T8078] chnl_net:caif_netlink_parms(): no params data found [ 129.470272][ T4318] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.525538][ T8078] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.532619][ T8078] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.540951][ T8078] bridge_slave_0: entered allmulticast mode [ 129.547474][ T8078] bridge_slave_0: entered promiscuous mode [ 129.579423][ T8078] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.586528][ T8078] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.594003][ T8078] bridge_slave_1: entered allmulticast mode [ 129.609609][ T8078] bridge_slave_1: entered promiscuous mode [ 129.696924][ T4318] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 129.706942][ T4318] bridge0 (unregistering): left allmulticast mode [ 129.762521][ T4318] bond0 (unregistering): Released all slaves [ 129.796748][ T8078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.830391][ T8078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.858039][ T8078] team0: Port device team_slave_0 added [ 129.864806][ T8078] team0: Port device team_slave_1 added [ 129.920703][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.927790][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.953857][ T8078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.018136][ T8078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.025192][ T8078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.051189][ T8078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.157873][ T4318] hsr_slave_0: left promiscuous mode [ 130.167327][ T4318] hsr_slave_1: left promiscuous mode [ 130.196029][ T4318] veth1_macvtap: left promiscuous mode [ 130.201660][ T4318] veth0_macvtap: left promiscuous mode [ 130.207292][ T4318] veth1_vlan: left promiscuous mode [ 130.212553][ T4318] veth0_vlan: left promiscuous mode [ 130.274104][ T4318] pim6reg (unregistering): left allmulticast mode [ 130.279671][ T8142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1505'. [ 130.426033][ T8078] hsr_slave_0: entered promiscuous mode [ 130.444791][ T8078] hsr_slave_1: entered promiscuous mode [ 130.453114][ T8078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.460827][ T8078] Cannot create hsr debugfs directory [ 130.562053][ T8078] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 130.571488][ T8078] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 130.608063][ T8078] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 130.724890][ T8078] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 130.765260][ T4318] IPVS: stop unused estimator thread 0... [ 130.793456][ T8078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.950476][ T8078] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.011445][ T4237] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.018551][ T4237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.157161][ T8078] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.167700][ T8078] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.211154][ T4237] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.218300][ T4237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.276851][ T8078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.426553][ T8078] veth0_vlan: entered promiscuous mode [ 131.437852][ T8078] veth1_vlan: entered promiscuous mode [ 131.456816][ T8078] veth0_macvtap: entered promiscuous mode [ 131.475219][ T8078] veth1_macvtap: entered promiscuous mode [ 131.488702][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.499372][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.509333][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.519859][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.529739][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.540193][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.612880][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.622410][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.633034][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.642923][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.653467][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.663510][ T8078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.674065][ T8078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.686161][ T8078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.699119][ T8078] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.707928][ T8078] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.716676][ T8078] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.725598][ T8078] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.763065][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 131.763083][ T29] audit: type=1400 audit(1733132329.963:10329): avc: denied { mounton } for pid=8078 comm="syz-executor" path="/root/syzkaller.cp2Mlb/syz-tmp" dev="sda1" ino=1953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 131.818655][ T29] audit: type=1400 audit(1733132329.991:10330): avc: denied { mount } for pid=8078 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 131.841077][ T29] audit: type=1400 audit(1733132329.991:10331): avc: denied { mount } for pid=8078 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 131.863160][ T29] audit: type=1400 audit(1733132329.991:10332): avc: denied { mounton } for pid=8078 comm="syz-executor" path="/root/syzkaller.cp2Mlb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 131.889985][ T29] audit: type=1400 audit(1733132329.991:10333): avc: denied { mounton } for pid=8078 comm="syz-executor" path="/root/syzkaller.cp2Mlb/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=88722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 131.917814][ T29] audit: type=1400 audit(1733132329.991:10334): avc: denied { unmount } for pid=8078 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 131.937645][ T29] audit: type=1400 audit(1733132330.000:10335): avc: denied { mounton } for pid=8078 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 131.975584][ T8167] netlink: 'syz.2.1507': attribute type 10 has an invalid length. [ 132.018690][ T8175] loop6: detected capacity change from 0 to 1024 [ 132.030735][ T8175] EXT4-fs (loop6): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 132.061119][ T8175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.082915][ T29] audit: type=1400 audit(1733132330.262:10336): avc: denied { mount } for pid=8174 comm="syz.6.1487" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 132.123415][ T29] audit: type=1400 audit(1733132330.290:10337): avc: denied { write } for pid=8174 comm="syz.6.1487" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.145816][ T29] audit: type=1400 audit(1733132330.290:10338): avc: denied { open } for pid=8174 comm="syz.6.1487" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.168917][ T8078] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.389226][ T8198] loop6: detected capacity change from 0 to 8192 [ 132.470002][ T8202] netlink: 'syz.2.1518': attribute type 10 has an invalid length. [ 132.725438][ T6971] ================================================================== [ 132.733572][ T6971] BUG: KCSAN: data-race in __dentry_kill / step_into [ 132.740274][ T6971] [ 132.742614][ T6971] read-write to 0xffff88812d45b900 of 4 bytes by task 3297 on cpu 0: [ 132.750701][ T6971] __dentry_kill+0x22e/0x4c0 [ 132.755407][ T6971] dput+0x5c/0xd0 [ 132.759057][ T6971] do_unlinkat+0x258/0x4d0 [ 132.763512][ T6971] __x64_sys_unlink+0x2e/0x40 [ 132.768219][ T6971] x64_sys_call+0x2329/0x2dc0 [ 132.772921][ T6971] do_syscall_64+0xc9/0x1c0 [ 132.777455][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.783383][ T6971] [ 132.785721][ T6971] read to 0xffff88812d45b900 of 4 bytes by task 6971 on cpu 1: [ 132.793273][ T6971] step_into+0x12f/0x840 [ 132.797544][ T6971] path_openat+0x1234/0x1fa0 [ 132.802162][ T6971] do_filp_open+0x107/0x230 [ 132.806691][ T6971] do_sys_openat2+0xab/0x120 [ 132.811309][ T6971] __x64_sys_openat+0xf3/0x120 [ 132.816092][ T6971] x64_sys_call+0x2b30/0x2dc0 [ 132.820783][ T6971] do_syscall_64+0xc9/0x1c0 [ 132.825312][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.831234][ T6971] [ 132.833573][ T6971] value changed: 0x00400008 -> 0x00008008 [ 132.839307][ T6971] [ 132.841640][ T6971] Reported by Kernel Concurrency Sanitizer on: [ 132.847809][ T6971] CPU: 1 UID: 0 PID: 6971 Comm: syz-executor Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 132.859808][ T6971] Tainted: [W]=WARN [ 132.863617][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.873702][ T6971] ================================================================== [ 133.127255][ T3303] ================================================================== [ 133.135371][ T3303] BUG: KCSAN: data-race in __dentry_kill / step_into [ 133.142059][ T3303] [ 133.144384][ T3303] read-write to 0xffff88810692bcc0 of 4 bytes by task 3297 on cpu 1: [ 133.152452][ T3303] __dentry_kill+0x22e/0x4c0 [ 133.157048][ T3303] dput+0x5c/0xd0 [ 133.160685][ T3303] do_unlinkat+0x258/0x4d0 [ 133.165113][ T3303] __x64_sys_unlink+0x2e/0x40 [ 133.169807][ T3303] x64_sys_call+0x2329/0x2dc0 [ 133.174488][ T3303] do_syscall_64+0xc9/0x1c0 [ 133.179000][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.184904][ T3303] [ 133.187233][ T3303] read to 0xffff88810692bcc0 of 4 bytes by task 3303 on cpu 0: [ 133.194775][ T3303] step_into+0xe7/0x840 [ 133.198936][ T3303] path_openat+0x1234/0x1fa0 [ 133.203540][ T3303] do_filp_open+0x107/0x230 [ 133.208052][ T3303] do_sys_openat2+0xab/0x120 [ 133.212648][ T3303] __x64_sys_openat+0xf3/0x120 [ 133.217453][ T3303] x64_sys_call+0x2b30/0x2dc0 [ 133.222136][ T3303] do_syscall_64+0xc9/0x1c0 [ 133.226655][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.232561][ T3303] [ 133.234882][ T3303] value changed: 0x00400008 -> 0x00008008 [ 133.240596][ T3303] [ 133.242917][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 133.249067][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 133.261055][ T3303] Tainted: [W]=WARN [ 133.264854][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.274911][ T3303] ================================================================== [ 135.021476][ T6971] ================================================================== [ 135.029588][ T6971] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 135.036285][ T6971] [ 135.038623][ T6971] write to 0xffff88810696bd90 of 8 bytes by task 3297 on cpu 1: [ 135.046260][ T6971] __dentry_kill+0x13e/0x4c0 [ 135.050859][ T6971] dput+0x5c/0xd0 [ 135.054504][ T6971] __fput+0x3fb/0x6d0 [ 135.058946][ T6971] __fput_sync+0x96/0xc0 [ 135.063213][ T6971] __se_sys_close+0x109/0x1b0 [ 135.067912][ T6971] __x64_sys_close+0x1f/0x30 [ 135.072528][ T6971] x64_sys_call+0x266c/0x2dc0 [ 135.077232][ T6971] do_syscall_64+0xc9/0x1c0 [ 135.081788][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.087716][ T6971] [ 135.090065][ T6971] read to 0xffff88810696bd90 of 8 bytes by task 6971 on cpu 0: [ 135.097629][ T6971] fast_dput+0x65/0x2c0 [ 135.101808][ T6971] dput+0x24/0xd0 [ 135.105455][ T6971] __fput+0x3fb/0x6d0 [ 135.109459][ T6971] __fput_sync+0x96/0xc0 [ 135.113722][ T6971] __se_sys_close+0x109/0x1b0 [ 135.118419][ T6971] __x64_sys_close+0x1f/0x30 [ 135.123034][ T6971] x64_sys_call+0x266c/0x2dc0 [ 135.127756][ T6971] do_syscall_64+0xc9/0x1c0 [ 135.132389][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.138316][ T6971] [ 135.140644][ T6971] value changed: 0xffff8882376a9a80 -> 0x0000000000000000 [ 135.147765][ T6971] [ 135.150107][ T6971] Reported by Kernel Concurrency Sanitizer on: [ 135.156273][ T6971] CPU: 0 UID: 0 PID: 6971 Comm: syz-executor Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 135.168279][ T6971] Tainted: [W]=WARN [ 135.172091][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 135.182164][ T6971] ================================================================== [ 136.241438][ T6971] ================================================================== [ 136.249563][ T6971] BUG: KCSAN: data-race in __dentry_kill / step_into [ 136.256262][ T6971] [ 136.258598][ T6971] read-write to 0xffff88812d45bb40 of 4 bytes by task 3297 on cpu 0: [ 136.266682][ T6971] __dentry_kill+0x22e/0x4c0 [ 136.271378][ T6971] dput+0x5c/0xd0 [ 136.275035][ T6971] __fput+0x3fb/0x6d0 [ 136.279043][ T6971] __fput_sync+0x96/0xc0 [ 136.283304][ T6971] __se_sys_close+0x109/0x1b0 [ 136.288007][ T6971] __x64_sys_close+0x1f/0x30 [ 136.292629][ T6971] x64_sys_call+0x266c/0x2dc0 [ 136.297339][ T6971] do_syscall_64+0xc9/0x1c0 [ 136.301877][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.308353][ T6971] [ 136.310707][ T6971] read to 0xffff88812d45bb40 of 4 bytes by task 6971 on cpu 1: [ 136.318269][ T6971] step_into+0x12f/0x840 [ 136.322560][ T6971] path_openat+0x1234/0x1fa0 [ 136.327190][ T6971] do_filp_open+0x107/0x230 [ 136.331721][ T6971] do_sys_openat2+0xab/0x120 [ 136.336322][ T6971] __x64_sys_openat+0xf3/0x120 [ 136.341112][ T6971] x64_sys_call+0x2b30/0x2dc0 [ 136.345815][ T6971] do_syscall_64+0xc9/0x1c0 [ 136.350356][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.356291][ T6971] [ 136.358631][ T6971] value changed: 0x00400008 -> 0x00008008 [ 136.364369][ T6971] [ 136.366708][ T6971] Reported by Kernel Concurrency Sanitizer on: [ 136.372876][ T6971] CPU: 1 UID: 0 PID: 6971 Comm: syz-executor Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 136.385015][ T6971] Tainted: [W]=WARN [ 136.388833][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.398909][ T6971] ================================================================== [ 137.293248][ T3303] ================================================================== [ 137.301369][ T3303] BUG: KCSAN: data-race in __dentry_kill / step_into [ 137.308072][ T3303] [ 137.310408][ T3303] read-write to 0xffff888106bca240 of 4 bytes by task 6971 on cpu 0: [ 137.318500][ T3303] __dentry_kill+0x22e/0x4c0 [ 137.323113][ T3303] dput+0x5c/0xd0 [ 137.326773][ T3303] __fput+0x3fb/0x6d0 [ 137.330865][ T3303] __fput_sync+0x96/0xc0 [ 137.335149][ T3303] __se_sys_close+0x109/0x1b0 [ 137.339951][ T3303] __x64_sys_close+0x1f/0x30 [ 137.344590][ T3303] x64_sys_call+0x266c/0x2dc0 [ 137.349316][ T3303] do_syscall_64+0xc9/0x1c0 [ 137.353845][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.359760][ T3303] [ 137.362097][ T3303] read to 0xffff888106bca240 of 4 bytes by task 3303 on cpu 1: [ 137.369657][ T3303] step_into+0xe7/0x840 [ 137.373837][ T3303] path_openat+0x1234/0x1fa0 [ 137.378458][ T3303] do_filp_open+0x107/0x230 [ 137.383072][ T3303] do_sys_openat2+0xab/0x120 [ 137.387687][ T3303] __x64_sys_openat+0xf3/0x120 [ 137.392473][ T3303] x64_sys_call+0x2b30/0x2dc0 [ 137.397167][ T3303] do_syscall_64+0xc9/0x1c0 [ 137.401701][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.407640][ T3303] [ 137.409972][ T3303] value changed: 0x00400008 -> 0x00008008 [ 137.415695][ T3303] [ 137.418036][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 137.424212][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 137.436221][ T3303] Tainted: [W]=WARN [ 137.440041][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 137.450121][ T3303] ================================================================== [ 139.768699][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 139.768718][ T29] audit: type=1400 audit(1733132337.456:10347): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 139.796888][ T29] audit: type=1400 audit(1733132337.456:10348): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 139.818574][ T29] audit: type=1400 audit(1733132337.456:10349): avc: denied { append } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.840998][ T29] audit: type=1400 audit(1733132337.456:10350): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 139.863700][ T29] audit: type=1400 audit(1733132337.456:10351): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 140.260218][ T3303] ================================================================== [ 140.268428][ T3303] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 140.275130][ T3303] [ 140.277460][ T3303] write to 0xffff88813231e190 of 8 bytes by task 3297 on cpu 0: [ 140.285110][ T3303] __dentry_kill+0x13e/0x4c0 [ 140.289761][ T3303] dput+0x5c/0xd0 [ 140.293432][ T3303] __fput+0x3fb/0x6d0 [ 140.297445][ T3303] __fput_sync+0x96/0xc0 [ 140.301710][ T3303] __se_sys_close+0x109/0x1b0 [ 140.306407][ T3303] __x64_sys_close+0x1f/0x30 [ 140.311019][ T3303] x64_sys_call+0x266c/0x2dc0 [ 140.315720][ T3303] do_syscall_64+0xc9/0x1c0 [ 140.320265][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.326195][ T3303] [ 140.328529][ T3303] read to 0xffff88813231e190 of 8 bytes by task 3303 on cpu 1: [ 140.336169][ T3303] fast_dput+0x65/0x2c0 [ 140.340345][ T3303] dput+0x24/0xd0 [ 140.344017][ T3303] __fput+0x3fb/0x6d0 [ 140.348021][ T3303] __fput_sync+0x96/0xc0 [ 140.352389][ T3303] __se_sys_close+0x109/0x1b0 [ 140.357090][ T3303] __x64_sys_close+0x1f/0x30 [ 140.361718][ T3303] x64_sys_call+0x266c/0x2dc0 [ 140.366418][ T3303] do_syscall_64+0xc9/0x1c0 [ 140.370951][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.377045][ T3303] [ 140.379382][ T3303] value changed: 0xffff8882376a9a80 -> 0x0000000000000000 [ 140.386515][ T3303] [ 140.388847][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 140.395096][ T3303] CPU: 1 UID: 0 PID: 3303 Comm: syz-executor Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 140.407100][ T3303] Tainted: [W]=WARN [ 140.410919][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 140.420998][ T3303] ================================================================== [ 141.137317][ T3297] ================================================================== [ 141.145436][ T3297] BUG: KCSAN: data-race in __dentry_kill / step_into [ 141.152137][ T3297] [ 141.154464][ T3297] read-write to 0xffff88810696bcc0 of 4 bytes by task 3303 on cpu 0: [ 141.162533][ T3297] __dentry_kill+0x22e/0x4c0 [ 141.167139][ T3297] dput+0x5c/0xd0 [ 141.170792][ T3297] do_unlinkat+0x258/0x4d0 [ 141.175241][ T3297] __x64_sys_unlink+0x2e/0x40 [ 141.179954][ T3297] x64_sys_call+0x2329/0x2dc0 [ 141.184654][ T3297] do_syscall_64+0xc9/0x1c0 [ 141.189184][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.195105][ T3297] [ 141.197435][ T3297] read to 0xffff88810696bcc0 of 4 bytes by task 3297 on cpu 1: [ 141.204983][ T3297] step_into+0x12f/0x840 [ 141.209255][ T3297] path_openat+0x1234/0x1fa0 [ 141.213869][ T3297] do_filp_open+0x107/0x230 [ 141.218401][ T3297] do_sys_openat2+0xab/0x120 [ 141.223010][ T3297] __x64_sys_openat+0xf3/0x120 [ 141.227793][ T3297] x64_sys_call+0x2b30/0x2dc0 [ 141.232503][ T3297] do_syscall_64+0xc9/0x1c0 [ 141.237471][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.243399][ T3297] [ 141.245732][ T3297] value changed: 0x00400008 -> 0x00008008 [ 141.251476][ T3297] [ 141.253807][ T3297] Reported by Kernel Concurrency Sanitizer on: [ 141.259969][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: syz-executor Tainted: G W 6.12.0-syzkaller-12128-gf788b5ef1ca9 #0 [ 141.271979][ T3297] Tainted: [W]=WARN [ 141.275799][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 141.285879][ T3297] ==================================================================