last executing test programs:

10.830612526s ago: executing program 0 (id=257):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x6048004)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004", 0x56}], 0x1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/13], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000403400000000000008000000bc980a6a99c2e11100005669dadb4c92b2f489e4da0e45a6177256f2cea0cc121f2455821f8aeeab8b9fd7bc14e3a54bee3780622519f1ddd23448857d1c304973d0a1e2330f61d1f133d1b47117abf5c172d21c8579bcc3cf0904f464f9b0df06b10653ad3351", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="d40104f71c1a3a58c23dd5000000000000000000d31a4f42daafcc25d0d7fa5d47f65a68a2f7dd4ae474c0ed0718c83d8690a484ebeea115e988cde21145c52e83747010332b95b9741b0e5b05b35729699ed53d1c536cc8bc8597303281fde751518a5c6a1802955d48ad0b159d87b8b896324f49f9a015d3525ef916367fd7913fdf172daefd00"/146, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x18)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0xc279669a52cf5f67, 0x0, 0x0)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x20048051)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b72", 0xad}], 0x1}, 0x894)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003140100c68f7bec9aff06860900020073796232000000000800410073697700"], 0x38}, 0x1, 0x0, 0x0, 0x44805}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18)

10.830118076s ago: executing program 0 (id=258):
r0 = socket(0x10, 0x2, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00'}, 0x10)
get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000ffc000/0x3000)=nil, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x200000})
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7cf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r3, 0x0, 0x1034}, 0x18)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180000190000000002000000000000001840000002000000000000000000000095000000000000009500000000000200"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600), 0xfffffffffffffeb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4a7dbe97}, 0x94)
r5 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r5, 0xa97)
r6 = socket$unix(0x1, 0x5, 0x0)
connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
accept(r5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet6(r1, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38)
write$binfmt_script(r1, &(0x7f00000004c0)={'#! ', '\xe9\x1fq\x89Y\x1e\x923aK', [], 0xa, "3904fc18339a3768307b0cad00c83d8212a07736788244751fbb6a78a10b5623e8c8c8cffb4c852173dac6906e00000000000000d63d1f8ad35cc0ee2ee06e799ab6a1630f6b006b3f60242a4c3fae40f2e4cdd38f21e3c204aa078b79720b71a4db442a1675ef88fd3827094d212e9a7964c0"}, 0x81)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f000093d000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00510000000004000000000100000000000000", @ANYRES32=r0, @ANYBLOB="f18baa880000", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="040000000200"/28], 0xfffffffffffffdbb)
close_range(r0, r1, 0x0)

10.753874434s ago: executing program 0 (id=259):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000001cc0)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x29)
prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00')
socket$inet(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0)

10.752725234s ago: executing program 0 (id=261):
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f00000000c0))
r0 = syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=<r1=>0xffffffffffffffff], 0x4, 0x273, &(0x7f0000000680)="$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")
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000900)=ANY=[@ANYRES16=r1, @ANYRES8=r0, @ANYRES32=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000004000000"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0xc8, 0x0, 0xc8, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan0\x00', 'ip6gre0\x00', {}, {}, 0x73}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x8}}]}, @REJECT={0x28}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x60010000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x43, &(0x7f0000000200)={'ah\x00'}, &(0x7f0000000800)=0x1e)
setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000440)=0x1, 0x4)
r9 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203)
r10 = fcntl$dupfd(r9, 0x0, r9)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10)
ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @scatter={0x5, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)=""/77, 0x4d}, {&(0x7f0000000a40)=""/169, 0xa9}, {&(0x7f0000000b00)=""/43, 0x2b}, {&(0x7f0000000b40)=""/82, 0x52}, {&(0x7f0000000bc0)=""/55, 0x37}]}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0})
r11 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r11, &(0x7f0000000080)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r12, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendto$packet(r7, &(0x7f0000000940)="36e51a210ea1ff5c513d9900", 0xc, 0x4c090, &(0x7f0000000400)={0x11, 0x86dd, r12, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc))
mremap(&(0x7f000058f000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlockall()

10.633106476s ago: executing program 0 (id=265):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0xf}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) (fail_nth: 2)

10.454573614s ago: executing program 0 (id=271):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 32)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) (async, rerun: 32)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async, rerun: 64)
add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000800) (async)
socket$phonet(0x23, 0x2, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40)

10.435301206s ago: executing program 32 (id=271):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
r1 = socket$inet(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async, rerun: 32)
ioctl$F2FS_IOC_DECOMPRESS_FILE(r4, 0xf517, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) (async)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32)
ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) (async, rerun: 32)
r5 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async, rerun: 64)
add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) (rerun: 64)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000800) (async)
socket$phonet(0x23, 0x2, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x558}}, 0x40)

2.008919027s ago: executing program 5 (id=422):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x64}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x31}, @jumbo={0xc2, 0x4, 0x20000007}]}]}}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f00000008c0), &(0x7f0000000880)=r6}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'GPL\x00'}, {}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, '\x00'}, {0x20, 'GPL\x00'}, {0x20, 'kfree\x00'}], 0xa, "b8afa1d5399a588f4ca47fd540a69bfafd6fd6"}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8844)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x44)

1.943658294s ago: executing program 1 (id=424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@deltfilter={0x38, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x1, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfffffffffffffe27}}]}, 0x38}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x7}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c890}, 0x884)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r4, 0x0, 0x2}, 0x18)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x187543, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x3}, 0x18)
r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
close_range(r7, 0xffffffffffffffff, 0x200000000000000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100031418110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r11}, 0x10)
r12 = socket$inet(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r13=>0x0})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x9, <r14=>0x0}, 0x8)
r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x6, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1c, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="18190000", @ANYRES32=r9, @ANYBLOB="000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000086000000e915f950b7bc6577d8c65667eab5935c91a59b980692cf6fee0a3ca5874c9a1c2fe9b80acb7b8974f8b06ef2f7247b015edc7a0ff892b566e730b1e7b9caa4186ccab67a08a7900649cbff19ab1dca637510f086e5df4442547bc99e81e96a1156f21acfccb82874b647fd3e5386f120d2551c22eeea"], &(0x7f0000000080)='syzkaller\x00', 0x1c600, 0x0, 0x0, 0x0, 0x2e, '\x00', r13, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0x10, 0x3, 0x7ff}, 0x10, r14, r10, 0x0, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, r15, r11], &(0x7f0000000880), 0x10, 0xffffffff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x12, 0x2c, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x0, 0x6, 0x1, 0x0, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ldst={0x0, 0x2, 0x2, 0x4, 0x8, 0xffffffffffffffe0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0x6, 0xa, 0x2, 0xef, 0xfb17aae}, @map_fd={0x18, 0x9, 0x1, 0x0, r0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x47}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x65, &(0x7f0000000300)=""/101, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xf, r2, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x5, 0x8000, 0x8}, 0x10, r14, r8, 0x3, &(0x7f0000000580)=[r5], &(0x7f00000005c0)=[{0x0, 0x1, 0x3, 0xb}, {0x2, 0x3, 0xb, 0x9}, {0x5, 0x4, 0x10, 0x9}], 0x10, 0xfffffffa}, 0x94)

1.767544252s ago: executing program 5 (id=427):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x20, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4040045)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001280), r0)
sendmsg$NFC_CMD_VENDOR(r0, &(0x7f0000001480)={&(0x7f0000001240), 0xc, &(0x7f0000001440)={&(0x7f0000001340)={0xd0, r2, 0x41b, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xfff}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x1}, @NFC_ATTR_VENDOR_DATA={0x81, 0x1f, "d785ac4044a14b75fd2c36014375adc45d6855246031c1930fb5c411849d294d151c040bddbe8221cf6b526e18c8138ca7ba4a52d1606324402fdd093c280a3861c9643f191382cfd518726cb4ecdcf946d560918e54d3d23f06848eb182ee244c36ff182485b91406906617c0f036405bd2ee86d375f58117045ee419"}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x50}, 0x4004)

1.738135265s ago: executing program 2 (id=428):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10)
bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)

1.731057235s ago: executing program 5 (id=429):
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffff}, 0x18)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x2}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) (async)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r5, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)

1.702835948s ago: executing program 2 (id=430):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (fail_nth: 9)
munlockall()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = eventfd2(0x0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0x8)

1.373886841s ago: executing program 5 (id=431):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)={[{@noblock_validity}, {@errors_continue}, {@sysvgroups}, {@data_journal}, {}, {@noinit_itable}, {@norecovery}]}, 0x2, 0x5cc, &(0x7f0000000b80)="$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")
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8)
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000400)=ANY=[])
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1e, 0x4, 0x7, 0xc, 0x0, r0, 0x2, '\x00', r1, r3, 0x3, 0x4, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r8, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000045c0)=@newtfilter={0x74, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x1000, 0x10000}, {0x5, 0x1, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0c0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {0x3, 0x1}}}, 0x7f}}, 0x10)

1.363496003s ago: executing program 5 (id=433):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

1.333810985s ago: executing program 5 (id=435):
r0 = getpgid(0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r1], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2c)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000540)='.\x00', 0x0)
faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x5)
syz_clone3(&(0x7f0000000400)={0x102000080, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000007c0), {0x10}, &(0x7f00000006c0)=""/213, 0xd5, &(0x7f0000000800)=""/78, &(0x7f0000000380)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, r0, 0x0, 0x0, 0x0], 0x8}, 0x58)
r5 = socket$inet6(0xa, 0x80002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0xa5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
r6 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10)
syz_usb_connect(0x2, 0x24, &(0x7f0000000740)=ANY=[], 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000050000"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES64=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r11}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r12 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8)
add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7313f0bd77da6d606ee07fbcccbdca76102fde7bea655762553acf2ff10a33a66bc63f0785b074d4b435c2c25f8d9e3b386028de185600039d98158311c4a7ef", 0x1a}, 0x48, r12)

1.18503902s ago: executing program 1 (id=436):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff8d, &(0x7f0000000080)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x48040}, 0x114)
getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r1})
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a38500000070"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x1}, 0x18)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x9}}}, 0x24}}, 0x0)
recvfrom(r1, &(0x7f00000002c0)=""/193, 0xc1, 0x10000, &(0x7f0000000440)=@ethernet={0x306, @remote}, 0x80)

758.138663ms ago: executing program 2 (id=437):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x64}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x31}, @jumbo={0xc2, 0x4, 0x20000007}]}]}}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f00000008c0), &(0x7f0000000880)=r6}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'GPL\x00'}, {}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, '\x00'}, {0x20, 'GPL\x00'}, {0x20, 'kfree\x00'}], 0xa, "b8afa1d5399a588f4ca47fd540a69bfafd6fd6"}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8844)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
socket$kcm(0x10, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x44)

723.793107ms ago: executing program 2 (id=439):
inotify_init()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
statfs(&(0x7f0000000080)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000200), &(0x7f0000000340)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x26}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x2, 0x800001)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080))
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x20})

705.987069ms ago: executing program 2 (id=441):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='attr/current\x00')
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r2, 0x6, 0x2b, 0x0, &(0x7f0000000380))
fcntl$setstatus(r1, 0x4, 0x40800)
r3 = syz_io_uring_setup(0x616f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000380)=<r4=>0x0, &(0x7f0000000300)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x78e, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x4, 0x1})
io_uring_enter(r3, 0x567, 0x1000a387, 0x0, 0x0, 0x0)
socketpair(0x5, 0x801, 0x7, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080))
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
timer_create(0x4, &(0x7f00000001c0)={0x0, 0x2c, 0x0, @thr={&(0x7f0000000300)="874cd6795f2fcfb6997c5fd05b23e8d1473e977f36030019149df48acf0bb12d46959d29094573b34d7a4e6757674a44a7e78b85254547537bcf1bb14d34371ca5387d22ef594092435816aa102650f0ced5b1bb51e481babbd34324178068f6ee288a0c5176d431f9596bb5d70296a75d7f83eb0802abb9b6b87577ea117212ee3928b76b7ada2b7688c152e719901b708e745fd78de7a92b5803b9e8d906067fb4adbf11eecfe61f3a771417f06aeccc", &(0x7f0000000480)="4a7e8001e69e8b6a5f269a8d23faed0c00ccad35d5bd67ceea52e9387efa27f7af0de832cf71d0cb5b0b03ab257f5bd69fac07d72d9e3c0630ad490c44249e3126000000000000000000000000000000163c21508cdb96b772adb254887af1aab5fa5503000000000000000afb99a744e11e05e23420f7c940f8b7bf8d418cf8f4805ca27f8d834d306a1f81887fc8f48fc870038b47ec4399ec94e4aace7941fb027cf295a0d48c0a7097feb57dfaddaef5a2378f6f129b922f759a77935aab312ea4fc6711119094a9843c8f5e7dc6971330932c46cbf5eb7feae3f508a9bdfdf52922fe58fc10cda404cb85d4896c8a433681656a473c03e1f05e3cff0ee155c88bda7d887fef3cab5e2eb252fb0728c05d4d26577e8f55fa0000"}}, &(0x7f0000000200)=<r8=>0x0)
clock_gettime(0x0, &(0x7f00000003c0)={<r9=>0x0, <r10=>0x0})
r11 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r11, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5a86dd60f900f5005e0600fe8000000000000000000000000000aafc02000000000000000000000000000000004e22c6cc1bcc676d209b9d1cbc7e5fd42130d1dc8963b9402c98f848c7a8526ac6373d885f1130b5de52304d158efc29da5434a890be8289b62cbbeb7141736b65f3c72c906d98086859463ea34bb1e9c888d659702308e37f6227fd681ce913263b0703bf7b66807250c9e808a431dc67fe6e240bac742397296bb2e4514016a1e914923fe4ab1607006f8e851f5320430961a40cfc02000000000000009f6f5928773672fcd17c08b5e4583a32574b3d8a4fea61ebc80e8d862dbbb4cdc0944ff64e9c485b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70100000907800001e08717600000000"], 0x0)
timer_settime(r8, 0x1, &(0x7f0000000400)={{0x77359400}, {r9, r10+60000000}}, &(0x7f0000000440))
r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r12, 0x0, 0x6}, 0x18)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r13 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r13, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r13, &(0x7f00000003c0), 0x0, 0x60010020, 0x0)
sendto$inet(r13, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360"], 0xffdd)

702.493579ms ago: executing program 4 (id=442):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x10000, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r0, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0)

632.977256ms ago: executing program 4 (id=443):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x2, 0x3c4, [0x200000000680, 0x0, 0x0, 0x2000000006b0, 0x200000000a14], 0x1e010000, 0x0, &(0x7f0000000680)=[{0x0, '\x00', 0x0, 0x7ffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffd, 0x2, [{0x11, 0x11, 0xacb7, 'veth0_to_hsr\x00', 'gre0\x00', 'gre0\x00', 'veth0_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x4}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x156, 0x1de, 0x20e, [@rateest={{'rateest\x00', 0x0, 0x48}, {{'veth0_virt_wifi\x00', 'syzkaller0\x00', 0x1, 0x0, 0x6908, 0x7, 0x7, 0x41, {0x37604b46}, {0x457}}}}, @ip6={{'ip6\x00', 0x0, 0x50}, {{@empty, @remote, [0xff000000, 0xffffff00, 0xffffffff, 0xffffff00], [0xff, 0xff, 0xffffffff, 0xff], 0xcd, 0xc, 0x0, 0x0, 0x4e24, 0x4e22, 0x4e23, 0x4e22}}}], [@common=@log={'log\x00', 0x28, {{0x6, "0889c381cb657b414d4631b06c298af6f44ee3731f7dad8e4199d97d2c35", 0x9}}}, @snat={'snat\x00', 0x10, {{@local, 0xfffffffffffffffe}}}], @common=@STANDARD={'\x00', 0x8}}, {0x3, 0x8, 0xdada, 'veth1_to_bridge\x00', 'syzkaller0\x00', 'team0\x00', 'batadv_slave_1\x00', @multicast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local, [0x0, 0xff, 0xff, 0xff], 0xb6, 0xee, 0x126, [@limit={{'limit\x00', 0x0, 0x20}, {{0x8, 0x4, 0x8, 0x1000, 0x1, 0x4e3d}}}], [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@random="4562cb7ae816", 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x43c)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18)
socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYBLOB='\t'], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @initdev}, &(0x7f00000000c0)=0x10)

632.782716ms ago: executing program 4 (id=444):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000080)={0x32, 0x5, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x7, 0x9, [0xe4d, 0xf, 0x8, 0x8002]}}]}, 0x38)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8)

618.638658ms ago: executing program 4 (id=445):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

593.22121ms ago: executing program 4 (id=446):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
timer_getoverrun(0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010)

561.149973ms ago: executing program 2 (id=447):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xf, 0xc3072, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffde)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x20}, 0x18)
pipe(0x0)
io_setup(0x2, &(0x7f0000002400)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000640))
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa041, 0xd)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)
prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000)
write$cgroup_int(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000)
r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x42040, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000340), 0x2, {0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x90}}}, 0x38)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})

559.483594ms ago: executing program 4 (id=448):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x115}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r5])
splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0)
write$P9_RLERRORu(r3, &(0x7f0000000100)=ANY=[], 0xe)

368.877113ms ago: executing program 1 (id=450):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18)
r3 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8})
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={0x0, 0x64}}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x10, 0x0, 0x0, @local, @local, {[@dstopts={0x89, 0x1, '\x00', [@generic={0x31}, @jumbo={0xc2, 0x4, 0x20000007}]}]}}}}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f00000008c0), &(0x7f0000000880)=r6}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000300)={'#! ', './file0', [{0x20, 'GPL\x00'}, {}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, '\x00'}, {0x20, 'GPL\x00'}, {0x20, 'kfree\x00'}], 0xa, "b8afa1d5399a588f4ca47fd540a69bfafd6fd6"}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48)
r7 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8844)
socket$key(0xf, 0x3, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x44)

266.169443ms ago: executing program 1 (id=452):
inotify_init()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
statfs(&(0x7f0000000080)='./file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000200), &(0x7f0000000340)=r0}, 0x20)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x26}, 0x28)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x2, 0x800001)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x3c}}, 0x0)
ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x20})

248.671215ms ago: executing program 1 (id=454):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000080000000000000000400000095"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r6, 0xffffffffffffffff, 0xd, 0x0, @void}, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x50, r7, 0x8, 0x70bd2a, 0x4, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x50}}, 0x93)
r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18)
r9 = syz_io_uring_setup(0x22f, &(0x7f0000019140)={0x0, 0x8ffd, 0x10000, 0x0, 0x100002cf}, &(0x7f0000000000)=<r10=>0x0, &(0x7f0000000040)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d020000000000000600"/94], 0xffffffffffffffff, 0x3e, 0xb1, 0xa}, 0x1b)
io_uring_enter(r9, 0x7a98, 0x0, 0x0, 0x0, 0x0)

106.966699ms ago: executing program 3 (id=456):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r1 = socket$inet6(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0)

106.559109ms ago: executing program 3 (id=457):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4}, 0x18)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
write$sndseq(r2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x0, 0x0, 0x0, 0xd0070000})

72.686603ms ago: executing program 1 (id=458):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='environ\x00')
r3 = socket(0x2, 0x80805, 0x0)
bind$x25(r3, &(0x7f0000000000), 0x12)
socket$inet6_sctp(0xa, 0x5, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffe}, 0x18)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r5, &(0x7f00000070c0)=[{{&(0x7f00000009c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000d40)=[{&(0x7f0000000a00)="59aa6fb8ec7b2ea9c0b38df30155cd1a272db2a2b728d636ad0865dce77a4bf99ea402eda935ab2b0d1e281917fe526ee933318cd3236bc64645fef40530371afe8e05601912921392884fdc67352d1a390794f31d03bf3bfe0eff7c8c11a54ae32bb762d7c66bc0d506959f", 0x6c}, {&(0x7f0000000ac0)="9423f4d0fc3a88c115785d78ff57d839e325379851e978", 0x17}, {&(0x7f0000002380)="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", 0x536}], 0x3, &(0x7f0000007240)=[@ip_retopts={{0x18, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}]}}}], 0x18}}], 0x1, 0x0)
close(0x3)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000800250000000005000000", 0x29}], 0x1)
readv(r2, &(0x7f0000001440)=[{&(0x7f0000000040)=""/20, 0x5}, {0x0, 0x2}], 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
wait4(r0, 0x0, 0x40000000, 0x0)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000)

72.439163ms ago: executing program 3 (id=459):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff})
getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4008888}, 0x24008000)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80805, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x44, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}]}]}, 0x44}}, 0x0)

72.036713ms ago: executing program 3 (id=460):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000003c0)={<r1=>r0, 0x4, 0x6, 0xc})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x13, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff8000}, 0xfffffdc8)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0)
ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000040))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r5 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_buf(r5, 0x107, 0x6, 0x0, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x811}, 0x40000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sysinfo(&(0x7f0000000400)=""/22)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x10000, 0x0)
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000380)={'vlan0\x00', 0x600})
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r10)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r11)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380102000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)

1.1361ms ago: executing program 3 (id=461):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000000000001000000000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414"], 0x44}, 0x1, 0x2}, 0x40000)

0s ago: executing program 3 (id=462):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r1 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x8, 0x4)
io_cancel(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffff, 0xffffffffffffffff, &(0x7f0000000080)="ad37f2f8", 0x4, 0x8, 0x0, 0x1}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) (async)
setsockopt$inet6_tcp_buf(r0, 0x29, 0x1f, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) (async)
r4 = socket$kcm(0xa, 0x1, 0x106) (async)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000180)=0x1, 0x4) (async)
connect$can_bcm(r5, &(0x7f00000005c0), 0x10) (async)
recvmmsg(r5, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x10002, 0x0) (async)
sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x19, 0x0, 0x0)
write$binfmt_aout(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="c35b809d5800fbc31541aa035e45b1fcd354f1da200869f0570fe87f81ceed3168643c00fcb7bf81619eaeb1d63d042888975ead84da68bcc3aeb17b370a678813d809fea21cad88dd27f37da01c5c3fd3965349c76443652d1bb5b7f37d18c1e7d17a48e184597ce6ccd69826a2c7cb367a17c4b88590e7bb736d8fffae6a47bab0a093e6840ef66ee976e7dc3237d925290d6d5447f612c94d221194650adb3239ba2900fc654f4c1291cbaf3209ea733fef64fa46eb4f6b74fdd2f513"], 0x318c) (async)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xf, "0040001e1d113c812e5d6000"})
r6 = syz_open_pts(r3, 0x0)
r7 = dup3(r6, r3, 0x0) (async)
ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x6, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="f8f18826d6cb6a7ea76c0dfab9ff731b000000000775d62dedd496704e851f774d16cb89ecc52ad3a5cbda9656f58c2f5ca0227d624b8fa375f625a1a0c108970142e22c949eb42d5c7813edf5755863f934f610f80fc4905ab5859544a265756585ca9c992c8ef3899c2c745e9777ffae72ded932f482d7c05044771b674115e282", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000086000000950000e6ff0000000193d83bf407b3be4c32ba7ec205d341ced20865a7f4699067a7b28e4bb7efbcdeea9a95a556a25aa032e28c040407b45fdfa7ce9a611f26dae5a6f943aa7316062e8b31b25540f25e47916dee041878576a12ead64d20b8eae6a160d4e73b203eec81f6d63663f883b1587f334076c018da99e6c437ac660142e64f26cea458cf3de4ad11b646a779278faeda8dc9a058bd7a7290f683"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r9}, 0x10) (async)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000000), 0x4)
acct(&(0x7f00000121c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
write$sndseq(r10, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r10, 0x4058534c, &(0x7f0000001140)={0x80, 0x1, 0x7d0})

kernel console output (not intermixed with test programs):

19 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   31.819262][ T3518] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   31.848170][   T29] audit: type=1400 audit(1768124224.929:131): avc:  denied  { mount } for  pid=3496 comm="syz.1.8" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   31.880931][   T29] audit: type=1400 audit(1768124224.959:132): avc:  denied  { mount } for  pid=3519 comm="syz.4.5" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   31.966909][   T29] audit: type=1400 audit(1768124225.049:133): avc:  denied  { unmount } for  pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[   32.015053][ T3524] program syz.3.12 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   32.034351][ T3524] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   32.037946][ T3526] program syz.4.13 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   32.064341][ T3526] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   32.086624][ T3526] lo speed is unknown, defaulting to 1000
[   32.092923][ T3526] lo speed is unknown, defaulting to 1000
[   32.103089][ T3526] lo speed is unknown, defaulting to 1000
[   32.111483][ T3526] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   32.120758][ T3526] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   32.245448][ T3526] lo speed is unknown, defaulting to 1000
[   32.245851][    C0] hrtimer: interrupt took 45941 ns
[   32.267570][ T3526] lo speed is unknown, defaulting to 1000
[   32.283846][ T3526] lo speed is unknown, defaulting to 1000
[   32.301668][ T3533] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.15'.
[   32.311240][ T3533] netlink: zone id is out of range
[   32.316374][ T3533] netlink: zone id is out of range
[   32.326786][ T3526] lo speed is unknown, defaulting to 1000
[   32.337300][ T3533] netlink: zone id is out of range
[   32.342618][ T3533] netlink: zone id is out of range
[   32.357934][ T3526] lo speed is unknown, defaulting to 1000
[   32.377607][ T3533] netlink: zone id is out of range
[   32.411446][ T3533] netlink: zone id is out of range
[   32.429418][ T3533] netlink: zone id is out of range
[   32.461216][ T3533] netlink: zone id is out of range
[   32.466369][ T3533] netlink: zone id is out of range
[   32.493024][ T3539] FAULT_INJECTION: forcing a failure.
[   32.493024][ T3539] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   32.506160][ T3539] CPU: 0 UID: 0 PID: 3539 Comm: syz.4.18 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   32.506185][ T3539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   32.506198][ T3539] Call Trace:
[   32.506244][ T3539]  <TASK>
[   32.506251][ T3539]  __dump_stack+0x1d/0x30
[   32.506276][ T3539]  dump_stack_lvl+0x95/0xd0
[   32.506299][ T3539]  dump_stack+0x15/0x1b
[   32.506370][ T3539]  should_fail_ex+0x265/0x280
[   32.506412][ T3539]  should_fail+0xb/0x20
[   32.506477][ T3539]  should_fail_usercopy+0x1a/0x20
[   32.506498][ T3539]  _copy_from_user+0x1c/0xb0
[   32.506522][ T3539]  ___sys_sendmsg+0xc1/0x1d0
[   32.506565][ T3539]  __x64_sys_sendmsg+0xd4/0x160
[   32.506642][ T3539]  x64_sys_call+0x17ba/0x3000
[   32.506741][ T3539]  do_syscall_64+0xca/0x2b0
[   32.506780][ T3539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   32.506804][ T3539] RIP: 0033:0x7f9835ddf749
[   32.506821][ T3539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   32.506840][ T3539] RSP: 002b:00007f983483f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   32.506883][ T3539] RAX: ffffffffffffffda RBX: 00007f9836035fa0 RCX: 00007f9835ddf749
[   32.506897][ T3539] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003
[   32.506962][ T3539] RBP: 00007f983483f090 R08: 0000000000000000 R09: 0000000000000000
[   32.506975][ T3539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   32.506989][ T3539] R13: 00007f9836036038 R14: 00007f9836035fa0 R15: 00007ffcbb817748
[   32.507009][ T3539]  </TASK>
[   32.536966][ T3533] netlink: zone id is out of range
[   32.747349][ T3529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'.
[   32.763146][ T3544] SELinux:  policydb version 1043 does not match my version range 15-35
[   32.765730][ T3529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14'.
[   32.771700][ T3544] SELinux: failed to load policy
[   32.830075][ T3529] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   32.857828][ T3529] netlink: 'syz.3.14': attribute type 4 has an invalid length.
[   32.946794][ T3555] tmpfs: Bad value for 'mpol'
[   32.983245][ T3555] loop2: detected capacity change from 0 to 128
[   32.992905][ T3555] Zero length message leads to an empty skb
[   33.024842][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'.
[   33.040282][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'.
[   33.076830][ T3543] netlink: 'syz.4.20': attribute type 4 has an invalid length.
[   33.079216][ T3562] program syz.3.25 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   33.127254][ T3562] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   33.133811][ T3401] lo speed is unknown, defaulting to 1000
[   33.141632][ T3401] syz0: Port: 1 Link DOWN
[   33.167457][ T3563] loop2: detected capacity change from 0 to 512
[   33.178300][ T3563] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   33.191424][ T3563] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   33.208451][ T3566] FAULT_INJECTION: forcing a failure.
[   33.208451][ T3566] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   33.221680][ T3566] CPU: 1 UID: 0 PID: 3566 Comm: syz.3.27 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   33.221705][ T3566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   33.221717][ T3566] Call Trace:
[   33.221722][ T3566]  <TASK>
[   33.221730][ T3566]  __dump_stack+0x1d/0x30
[   33.221844][ T3566]  dump_stack_lvl+0x95/0xd0
[   33.221864][ T3566]  dump_stack+0x15/0x1b
[   33.221882][ T3566]  should_fail_ex+0x265/0x280
[   33.221908][ T3566]  should_fail+0xb/0x20
[   33.221974][ T3566]  should_fail_usercopy+0x1a/0x20
[   33.222001][ T3566]  _copy_from_user+0x1c/0xb0
[   33.222032][ T3566]  get_timespec64+0x4c/0x100
[   33.222057][ T3566]  __se_sys_clock_nanosleep+0x10b/0x250
[   33.222084][ T3566]  __x64_sys_clock_nanosleep+0x55/0x70
[   33.222105][ T3566]  x64_sys_call+0x2734/0x3000
[   33.222133][ T3566]  do_syscall_64+0xca/0x2b0
[   33.222234][ T3566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   33.222323][ T3566] RIP: 0033:0x7f871cb4f749
[   33.222341][ T3566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   33.222362][ T3566] RSP: 002b:00007f871b5b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[   33.222465][ T3566] RAX: ffffffffffffffda RBX: 00007f871cda5fa0 RCX: 00007f871cb4f749
[   33.222481][ T3566] RDX: 00002000000004c0 RSI: 0000000000000000 RDI: 0000000000000008
[   33.222495][ T3566] RBP: 00007f871b5b7090 R08: 0000000000000000 R09: 0000000000000000
[   33.222510][ T3566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   33.222522][ T3566] R13: 00007f871cda6038 R14: 00007f871cda5fa0 R15: 00007fff802b53c8
[   33.222541][ T3566]  </TASK>
[   33.397314][ T3566] loop3: detected capacity change from 0 to 512
[   33.415383][ T3563] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   33.438021][ T3566] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   33.448253][ T3563] EXT4-fs (loop2): 1 truncate cleaned up
[   33.454527][ T3563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.506333][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.560197][ T3577] lo speed is unknown, defaulting to 1000
[   33.566237][ T3566] EXT4-fs (loop3): 1 truncate cleaned up
[   33.590417][ T3566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   33.667712][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   33.721059][ T3586] netlink: 40 bytes leftover after parsing attributes in process `syz.3.32'.
[   33.795332][ T3590] program syz.3.34 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   33.805034][ T3590] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   33.815207][ T3590] siw: device registration error -23
[   33.886182][ T3597] netlink: 96 bytes leftover after parsing attributes in process `syz.0.37'.
[   33.982622][ T3601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.39'.
[   34.007574][ T3601] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3601 comm=syz.0.39
[   34.040861][ T3605] netlink: 'syz.0.40': attribute type 39 has an invalid length.
[   34.666442][ T3613] loop2: detected capacity change from 0 to 1024
[   34.705659][ T3613] =======================================================
[   34.705659][ T3613] WARNING: The mand mount option has been deprecated and
[   34.705659][ T3613]          and is ignored by this kernel. Remove the mand
[   34.705659][ T3613]          option from the mount to silence this warning.
[   34.705659][ T3613] =======================================================
[   34.824200][ T3613] EXT4-fs: Ignoring removed oldalloc option
[   34.830378][ T3613] EXT4-fs: Ignoring removed bh option
[   34.938049][ T3613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   34.954389][ T3633] program syz.0.46 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   34.964106][ T3633] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   35.000486][ T3637] program syz.4.48 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   35.010001][ T3637] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   35.031858][ T3633] siw: device registration error -23
[   35.078015][ T3641] program syz.4.49 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   35.099194][ T3641] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   35.162452][ T3647] FAULT_INJECTION: forcing a failure.
[   35.162452][ T3647] name failslab, interval 1, probability 0, space 0, times 0
[   35.175321][ T3647] CPU: 1 UID: 0 PID: 3647 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   35.175348][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   35.175435][ T3647] Call Trace:
[   35.175441][ T3647]  <TASK>
[   35.175514][ T3647]  __dump_stack+0x1d/0x30
[   35.175538][ T3647]  dump_stack_lvl+0x95/0xd0
[   35.175562][ T3647]  dump_stack+0x15/0x1b
[   35.175582][ T3647]  should_fail_ex+0x265/0x280
[   35.175610][ T3647]  should_failslab+0x8c/0xb0
[   35.175630][ T3647]  __kvmalloc_node_noprof+0x149/0x6b0
[   35.175654][ T3647]  ? file_tty_write+0x1a3/0x690
[   35.175751][ T3647]  ? mutex_trylock+0x82/0xc0
[   35.175779][ T3647]  file_tty_write+0x1a3/0x690
[   35.175859][ T3647]  ? __pfx_tty_write+0x10/0x10
[   35.175877][ T3647]  tty_write+0x25/0x30
[   35.175918][ T3647]  vfs_write+0x52a/0x960
[   35.175956][ T3647]  ksys_write+0xda/0x1a0
[   35.175976][ T3647]  __x64_sys_write+0x40/0x50
[   35.175994][ T3647]  x64_sys_call+0x2847/0x3000
[   35.176098][ T3647]  do_syscall_64+0xca/0x2b0
[   35.176129][ T3647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.176155][ T3647] RIP: 0033:0x7fb64b72f749
[   35.176177][ T3647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.176197][ T3647] RSP: 002b:00007fb64a18f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   35.176220][ T3647] RAX: ffffffffffffffda RBX: 00007fb64b985fa0 RCX: 00007fb64b72f749
[   35.176232][ T3647] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004
[   35.176244][ T3647] RBP: 00007fb64a18f090 R08: 0000000000000000 R09: 0000000000000000
[   35.176255][ T3647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.176294][ T3647] R13: 00007fb64b986038 R14: 00007fb64b985fa0 R15: 00007fffb6657ca8
[   35.176359][ T3647]  </TASK>
[   35.360960][ T3650] team0 (unregistering): Port device team_slave_0 removed
[   35.362574][ T3650] team0 (unregistering): Port device team_slave_1 removed
[   35.487193][ T3649] Process accounting resumed
[   35.502451][ T3657] FAULT_INJECTION: forcing a failure.
[   35.502451][ T3657] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   35.515635][ T3657] CPU: 0 UID: 0 PID: 3657 Comm: syz.4.56 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   35.515664][ T3657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   35.515755][ T3657] Call Trace:
[   35.515762][ T3657]  <TASK>
[   35.515770][ T3657]  __dump_stack+0x1d/0x30
[   35.515870][ T3657]  dump_stack_lvl+0x95/0xd0
[   35.515896][ T3657]  dump_stack+0x15/0x1b
[   35.515919][ T3657]  should_fail_ex+0x265/0x280
[   35.515943][ T3657]  should_fail+0xb/0x20
[   35.515964][ T3657]  should_fail_usercopy+0x1a/0x20
[   35.516067][ T3657]  strncpy_from_user+0x27/0x260
[   35.516104][ T3657]  getname_flags+0xae/0x3b0
[   35.516131][ T3657]  __se_sys_acct+0x6a/0x520
[   35.516220][ T3657]  __x64_sys_acct+0x1f/0x30
[   35.516249][ T3657]  x64_sys_call+0x2923/0x3000
[   35.516276][ T3657]  do_syscall_64+0xca/0x2b0
[   35.516336][ T3657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   35.516359][ T3657] RIP: 0033:0x7f9835ddf749
[   35.516377][ T3657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   35.516412][ T3657] RSP: 002b:00007f983483f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3
[   35.516435][ T3657] RAX: ffffffffffffffda RBX: 00007f9836035fa0 RCX: 00007f9835ddf749
[   35.516449][ T3657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000480
[   35.516463][ T3657] RBP: 00007f983483f090 R08: 0000000000000000 R09: 0000000000000000
[   35.516477][ T3657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   35.516529][ T3657] R13: 00007f9836036038 R14: 00007f9836035fa0 R15: 00007ffcbb817748
[   35.516548][ T3657]  </TASK>
[   35.518151][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   35.805135][ T3669] veth2: entered promiscuous mode
[   35.853832][ T3316] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[   35.867391][ T3671] program syz.3.61 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   35.891281][ T3671] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   35.918602][ T3668] netlink: 'syz.2.60': attribute type 4 has an invalid length.
[   36.050163][ T3692] lo speed is unknown, defaulting to 1000
[   36.077046][ T3695] netlink: 'syz.3.67': attribute type 29 has an invalid length.
[   36.106815][ T3696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3616 sclass=netlink_route_socket pid=3696 comm=syz.1.66
[   36.122235][ T3695] netlink: 'syz.3.67': attribute type 29 has an invalid length.
[   36.154042][ T3695] __nla_validate_parse: 8 callbacks suppressed
[   36.154056][ T3695] netlink: 500 bytes leftover after parsing attributes in process `syz.3.67'.
[   36.249768][ T3704] x_tables: duplicate underflow at hook 1
[   36.257483][ T3704] sch_tbf: peakrate 7 is lower than or equals to rate 19 !
[   36.285408][ T3704] syz.3.67 uses obsolete (PF_INET,SOCK_PACKET)
[   36.308330][ T3673] lo speed is unknown, defaulting to 1000
[   36.314340][ T3689] loop0: detected capacity change from 0 to 512
[   36.346402][ T3689] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   36.402895][ T3689] EXT4-fs (loop0): 1 truncate cleaned up
[   36.431422][ T3715] syzkaller0: entered promiscuous mode
[   36.432091][ T3689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   36.436940][ T3715] syzkaller0: entered allmulticast mode
[   36.648669][ T3739] loop4: detected capacity change from 0 to 512
[   36.662744][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.671346][ T3739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   36.708273][   T29] kauditd_printk_skb: 312 callbacks suppressed
[   36.708290][   T29] audit: type=1400 audit(1768124229.799:446): avc:  denied  { watch watch_reads } for  pid=3738 comm="syz.4.73" path="/19/file0" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   36.826215][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.841689][ T3752] program syz.0.74 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   36.871687][   T29] audit: type=1400 audit(1768124229.959:447): avc:  denied  { write } for  pid=3730 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1
[   36.878241][ T3753] netlink: 'syz.1.71': attribute type 12 has an invalid length.
[   36.898587][ T3753] netlink: 132 bytes leftover after parsing attributes in process `syz.1.71'.
[   36.917490][ T3752] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   37.030643][   T29] audit: type=1326 audit(1768124229.959:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dcd0f749 code=0x7ffc0000
[   37.054103][   T29] audit: type=1326 audit(1768124229.959:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dcd0f749 code=0x7ffc0000
[   37.077628][   T29] audit: type=1326 audit(1768124229.959:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff7dcd0f749 code=0x7ffc0000
[   37.101187][   T29] audit: type=1326 audit(1768124229.959:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dcd0f749 code=0x7ffc0000
[   37.124491][   T29] audit: type=1326 audit(1768124229.959:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dcd0f749 code=0x7ffc0000
[   37.147957][   T29] audit: type=1326 audit(1768124229.959:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff7dcd0f749 code=0x7ffc0000
[   37.171143][   T29] audit: type=1400 audit(1768124229.959:454): avc:  denied  { create } for  pid=3730 comm="syz.1.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   37.190407][   T29] audit: type=1326 audit(1768124229.969:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3730 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7dcd0f749 code=0x7ffc0000
[   37.228839][ T3800] netlink: 96 bytes leftover after parsing attributes in process `syz.3.76'.
[   37.247531][ T3731] netlink: 'syz.1.71': attribute type 12 has an invalid length.
[   37.255276][ T3731] netlink: 132 bytes leftover after parsing attributes in process `syz.1.71'.
[   37.297074][ T3805] loop0: detected capacity change from 0 to 512
[   37.310329][ T3805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   37.338405][ T3810] loop4: detected capacity change from 0 to 512
[   37.354828][ T3810] ext4: Bad value for 'journal_ioprio'
[   37.374041][ T3811] lo speed is unknown, defaulting to 1000
[   37.403217][ T3811] capability: warning: `syz.3.79' uses deprecated v2 capabilities in a way that may be insecure
[   37.441865][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.80'.
[   37.453487][ T3814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.80'.
[   37.473390][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   37.604338][ T3824] loop4: detected capacity change from 0 to 128
[   37.620949][ T3827] FAULT_INJECTION: forcing a failure.
[   37.620949][ T3827] name failslab, interval 1, probability 0, space 0, times 0
[   37.633752][ T3827] CPU: 0 UID: 0 PID: 3827 Comm: syz.1.84 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   37.633820][ T3827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   37.633830][ T3827] Call Trace:
[   37.633836][ T3827]  <TASK>
[   37.633843][ T3827]  __dump_stack+0x1d/0x30
[   37.633871][ T3827]  dump_stack_lvl+0x95/0xd0
[   37.633912][ T3827]  dump_stack+0x15/0x1b
[   37.634010][ T3827]  should_fail_ex+0x265/0x280
[   37.634033][ T3827]  should_failslab+0x8c/0xb0
[   37.634053][ T3827]  __kmalloc_cache_noprof+0x65/0x4c0
[   37.634115][ T3827]  ? nf_ct_tmpl_alloc+0x63/0x130
[   37.634139][ T3827]  nf_ct_tmpl_alloc+0x63/0x130
[   37.634171][ T3827]  xt_ct_tg_check+0x173/0x660
[   37.634201][ T3827]  xt_ct_tg_check_v0+0xb7/0x120
[   37.634247][ T3827]  xt_check_target+0x28d/0x4c0
[   37.634275][ T3827]  ? mutex_unlock+0x4f/0x90
[   37.634360][ T3827]  ? xt_find_target+0x1cd/0x200
[   37.634409][ T3827]  translate_table+0xcf5/0x1070
[   37.634438][ T3827]  do_ip6t_set_ctl+0x678/0x840
[   37.634457][ T3827]  ? kstrtoull+0x111/0x140
[   37.634496][ T3827]  ? __rcu_read_unlock+0x4f/0x70
[   37.634523][ T3827]  nf_setsockopt+0x199/0x1b0
[   37.634544][ T3827]  ipv6_setsockopt+0x11a/0x130
[   37.634565][ T3827]  tcp_setsockopt+0x98/0xb0
[   37.634629][ T3827]  sock_common_setsockopt+0x69/0x80
[   37.634653][ T3827]  ? __pfx_sock_common_setsockopt+0x10/0x10
[   37.634673][ T3827]  __sys_setsockopt+0x184/0x200
[   37.634700][ T3827]  __x64_sys_setsockopt+0x64/0x80
[   37.634741][ T3827]  x64_sys_call+0x21d5/0x3000
[   37.634767][ T3827]  do_syscall_64+0xca/0x2b0
[   37.634805][ T3827]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   37.634899][ T3827] RIP: 0033:0x7ff7dcd0f749
[   37.634913][ T3827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   37.634940][ T3827] RSP: 002b:00007ff7db777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[   37.634962][ T3827] RAX: ffffffffffffffda RBX: 00007ff7dcf65fa0 RCX: 00007ff7dcd0f749
[   37.634977][ T3827] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006
[   37.635067][ T3827] RBP: 00007ff7db777090 R08: 00000000000003a0 R09: 0000000000000000
[   37.635082][ T3827] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000002
[   37.635096][ T3827] R13: 00007ff7dcf66038 R14: 00007ff7dcf65fa0 R15: 00007ffcb787af58
[   37.635116][ T3827]  </TASK>
[   37.934659][ T3832] program syz.4.88 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   37.945537][ T3833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'.
[   37.954543][ T3833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.86'.
[   37.965331][ T3832] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   37.979080][ T3833] loop0: detected capacity change from 0 to 512
[   37.985977][ T3836] netlink: 96 bytes leftover after parsing attributes in process `syz.1.89'.
[   38.006141][ T3833] EXT4-fs: Ignoring removed oldalloc option
[   38.033627][ T3838] loop4: detected capacity change from 0 to 1024
[   38.051079][ T3833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.071877][ T3833] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   38.083673][ T3838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.126644][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.162634][ T3849] program syz.3.94 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   38.173831][ T3849] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   38.208516][ T3849] siw: device registration error -23
[   38.224236][ T3853] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   38.234897][ T3854] netlink: 472 bytes leftover after parsing attributes in process `syz.1.93'.
[   38.257030][ T3853] capability: warning: `syz.4.92' uses 32-bit capabilities (legacy support in use)
[   38.282705][ T3857] loop3: detected capacity change from 0 to 1024
[   38.293544][ T3857] EXT4-fs: Ignoring removed orlov option
[   38.306857][ T3857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.348170][ T3857] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   38.364774][ T3857] xt_CT: You must specify a L4 protocol and not use inversions on it
[   38.465203][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.474685][ T3857] syz.3.95 (3857) used greatest stack depth: 10032 bytes left
[   38.483304][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.509755][ T3866] FAULT_INJECTION: forcing a failure.
[   38.509755][ T3866] name failslab, interval 1, probability 0, space 0, times 0
[   38.522724][ T3866] CPU: 1 UID: 0 PID: 3866 Comm: syz.0.97 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   38.522758][ T3866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   38.522814][ T3866] Call Trace:
[   38.522821][ T3866]  <TASK>
[   38.522828][ T3866]  __dump_stack+0x1d/0x30
[   38.522855][ T3866]  dump_stack_lvl+0x95/0xd0
[   38.522875][ T3866]  dump_stack+0x15/0x1b
[   38.522892][ T3866]  should_fail_ex+0x265/0x280
[   38.522934][ T3866]  should_failslab+0x8c/0xb0
[   38.522957][ T3866]  kmem_cache_alloc_noprof+0x69/0x4b0
[   38.523083][ T3866]  ? __break_lease+0xf2/0xe40
[   38.523165][ T3866]  ? selinux_inode_setxattr+0x32d/0x6d0
[   38.523191][ T3866]  __break_lease+0xf2/0xe40
[   38.523214][ T3866]  __vfs_setxattr_locked+0x123/0x1c0
[   38.523282][ T3866]  vfs_setxattr+0x132/0x270
[   38.523305][ T3866]  filename_setxattr+0x1ad/0x400
[   38.523331][ T3866]  path_setxattrat+0x2c9/0x310
[   38.523372][ T3866]  __x64_sys_setxattr+0x6e/0x90
[   38.523415][ T3866]  x64_sys_call+0xf1e/0x3000
[   38.523438][ T3866]  do_syscall_64+0xca/0x2b0
[   38.523473][ T3866]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.523499][ T3866] RIP: 0033:0x7fb64b72f749
[   38.523517][ T3866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.523545][ T3866] RSP: 002b:00007fb64a18f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[   38.523567][ T3866] RAX: ffffffffffffffda RBX: 00007fb64b985fa0 RCX: 00007fb64b72f749
[   38.523583][ T3866] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000300
[   38.523596][ T3866] RBP: 00007fb64a18f090 R08: 0000000000000000 R09: 0000000000000000
[   38.523610][ T3866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   38.523623][ T3866] R13: 00007fb64b986038 R14: 00007fb64b985fa0 R15: 00007fffb6657ca8
[   38.523642][ T3866]  </TASK>
[   38.729424][ T3869] FAULT_INJECTION: forcing a failure.
[   38.729424][ T3869] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   38.742534][ T3869] CPU: 1 UID: 0 PID: 3869 Comm: syz.3.98 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   38.742628][ T3869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   38.742712][ T3869] Call Trace:
[   38.742720][ T3869]  <TASK>
[   38.742727][ T3869]  __dump_stack+0x1d/0x30
[   38.742799][ T3869]  dump_stack_lvl+0x95/0xd0
[   38.742843][ T3869]  dump_stack+0x15/0x1b
[   38.742864][ T3869]  should_fail_ex+0x265/0x280
[   38.742890][ T3869]  should_fail+0xb/0x20
[   38.742937][ T3869]  should_fail_usercopy+0x1a/0x20
[   38.743042][ T3869]  _copy_from_user+0x1c/0xb0
[   38.743087][ T3869]  __sys_connect+0xd0/0x2b0
[   38.743118][ T3869]  __x64_sys_connect+0x3f/0x50
[   38.743145][ T3869]  x64_sys_call+0x2e09/0x3000
[   38.743166][ T3869]  do_syscall_64+0xca/0x2b0
[   38.743280][ T3869]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   38.743304][ T3869] RIP: 0033:0x7f871cb4f749
[   38.743372][ T3869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   38.743392][ T3869] RSP: 002b:00007f871b5b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[   38.743416][ T3869] RAX: ffffffffffffffda RBX: 00007f871cda5fa0 RCX: 00007f871cb4f749
[   38.743428][ T3869] RDX: 000000000000001e RSI: 0000200000000040 RDI: 0000000000000003
[   38.743440][ T3869] RBP: 00007f871b5b7090 R08: 0000000000000000 R09: 0000000000000000
[   38.743451][ T3869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   38.743463][ T3869] R13: 00007f871cda6038 R14: 00007f871cda5fa0 R15: 00007fff802b53c8
[   38.743504][ T3869]  </TASK>
[   38.982600][ T3874] random: crng reseeded on system resumption
[   38.990625][ T3872] net_ratelimit: 1 callbacks suppressed
[   38.990637][ T3872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   39.085124][ T3879] loop1: detected capacity change from 0 to 256
[   39.222880][ T3885] program syz.3.105 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   39.247259][ T3885] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   39.255826][ T3887] loop1: detected capacity change from 0 to 512
[   39.262842][ T3887] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.273377][ T3885] siw: device registration error -23
[   39.274254][ T3887] mmap: syz.1.106 (3887) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   39.301724][ T3890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=3890 comm=syz.4.107
[   39.402653][ T3883] netlink: 'syz.0.102': attribute type 4 has an invalid length.
[   39.416924][ T3901] netlink: 'syz.3.111': attribute type 13 has an invalid length.
[   39.476726][ T3903] loop4: detected capacity change from 0 to 512
[   39.484519][ T3903] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   39.667262][ T3932] lo speed is unknown, defaulting to 1000
[   39.674118][ T3932] lo speed is unknown, defaulting to 1000
[   39.680667][ T3932] lo speed is unknown, defaulting to 1000
[   39.688946][ T3932] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   39.699494][ T3932] lo speed is unknown, defaulting to 1000
[   39.705607][ T3932] lo speed is unknown, defaulting to 1000
[   39.713394][ T3932] lo speed is unknown, defaulting to 1000
[   39.719595][ T3932] lo speed is unknown, defaulting to 1000
[   39.726085][ T3932] lo speed is unknown, defaulting to 1000
[   39.744045][ T3940] loop1: detected capacity change from 0 to 512
[   39.763534][ T3940] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   39.772318][ T3940] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   39.892020][ T3943] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   39.927640][ T3940] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.118: Allocating blocks 41-42 which overlap fs metadata
[   40.006747][ T3940] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.118: Allocating blocks 41-42 which overlap fs metadata
[   40.073536][ T3940] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.118: Failed to acquire dquot type 1
[   40.115856][ T3940] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[   40.165591][ T3940] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.118: corrupted inode contents
[   40.225759][ T3940] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.118: mark_inode_dirty error
[   40.248520][ T3940] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.118: corrupted inode contents
[   40.270621][ T3940] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.118: mark_inode_dirty error
[   40.285816][ T3940] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.118: corrupted inode contents
[   40.299598][ T3940] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[   40.308539][ T3940] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.118: corrupted inode contents
[   40.321676][ T3940] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.118: mark_inode_dirty error
[   40.361024][ T3940] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[   40.378938][ T3940] EXT4-fs (loop1): 1 truncate cleaned up
[   40.390989][ T3940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.419558][ T3940] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.538810][ T3940] syz.1.118 (3940) used greatest stack depth: 9952 bytes left
[   40.681699][ T3969] FAULT_INJECTION: forcing a failure.
[   40.681699][ T3969] name failslab, interval 1, probability 0, space 0, times 0
[   40.694463][ T3969] CPU: 0 UID: 0 PID: 3969 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) 
[   40.694492][ T3969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   40.694505][ T3969] Call Trace:
[   40.694512][ T3969]  <TASK>
[   40.694520][ T3969]  __dump_stack+0x1d/0x30
[   40.694626][ T3969]  dump_stack_lvl+0x95/0xd0
[   40.694671][ T3969]  dump_stack+0x15/0x1b
[   40.694693][ T3969]  should_fail_ex+0x265/0x280
[   40.694719][ T3969]  should_failslab+0x8c/0xb0
[   40.694742][ T3969]  kmem_cache_alloc_noprof+0x69/0x4b0
[   40.694839][ T3969]  ? skb_clone+0x151/0x1f0
[   40.694873][ T3969]  skb_clone+0x151/0x1f0
[   40.694944][ T3969]  __netlink_deliver_tap+0x2c9/0x500
[   40.695011][ T3969]  netlink_unicast+0x66b/0x690
[   40.695111][ T3969]  netlink_sendmsg+0x58b/0x6b0
[   40.695139][ T3969]  ? __pfx_netlink_sendmsg+0x10/0x10
[   40.695199][ T3969]  __sock_sendmsg+0x145/0x180
[   40.695216][ T3969]  ____sys_sendmsg+0x345/0x4a0
[   40.695265][ T3969]  ___sys_sendmsg+0x17b/0x1d0
[   40.695298][ T3969]  __sys_sendmmsg+0x178/0x300
[   40.695391][ T3969]  __x64_sys_sendmmsg+0x57/0x70
[   40.695415][ T3969]  x64_sys_call+0x1e28/0x3000
[   40.695436][ T3969]  do_syscall_64+0xca/0x2b0
[   40.695516][ T3969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   40.695535][ T3969] RIP: 0033:0x7ff7dcd0f749
[   40.695559][ T3969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   40.695574][ T3969] RSP: 002b:00007ff7db777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   40.695608][ T3969] RAX: ffffffffffffffda RBX: 00007ff7dcf65fa0 RCX: 00007ff7dcd0f749
[   40.695619][ T3969] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005
[   40.695631][ T3969] RBP: 00007ff7db777090 R08: 0000000000000000 R09: 0000000000000000
[   40.695642][ T3969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   40.695652][ T3969] R13: 00007ff7dcf66038 R14: 00007ff7dcf65fa0 R15: 00007ffcb787af58
[   40.695668][ T3969]  </TASK>
[   40.910906][ T3972] netlink: 'syz.1.131': attribute type 1 has an invalid length.
[   41.080033][ T3979] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.118586][ T3979] ext4 filesystem being mounted at /34/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[   41.191429][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   41.222347][ T3990] sch_fq: defrate 0 ignored.
[   41.238593][ T3994] FAULT_INJECTION: forcing a failure.
[   41.238593][ T3994] name failslab, interval 1, probability 0, space 0, times 0
[   41.239310][ T3993] EXT4-fs: inline encryption not supported
[   41.251299][ T3994] CPU: 1 UID: 0 PID: 3994 Comm: syz.0.140 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   41.251329][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   41.251340][ T3994] Call Trace:
[   41.251347][ T3994]  <TASK>
[   41.251356][ T3994]  __dump_stack+0x1d/0x30
[   41.251381][ T3994]  dump_stack_lvl+0x95/0xd0
[   41.251479][ T3994]  dump_stack+0x15/0x1b
[   41.251499][ T3994]  should_fail_ex+0x265/0x280
[   41.251521][ T3994]  should_failslab+0x8c/0xb0
[   41.251544][ T3994]  kmem_cache_alloc_noprof+0x69/0x4b0
[   41.251608][ T3994]  ? dst_alloc+0xbd/0x100
[   41.251691][ T3994]  dst_alloc+0xbd/0x100
[   41.251786][ T3994]  ip_route_input_rcu+0x15a6/0x1b10
[   41.251821][ T3994]  ip_route_input_noref+0x5f/0x90
[   41.251885][ T3994]  ip_rcv_finish_core+0x315/0xb60
[   41.251904][ T3994]  ? iptable_mangle_hook+0x119/0x260
[   41.251932][ T3994]  ip_rcv_finish+0x100/0x1c0
[   41.251952][ T3994]  ip_rcv+0x62/0x140
[   41.252050][ T3994]  ? __pfx_ip_rcv_finish+0x10/0x10
[   41.252070][ T3994]  ? __pfx_ip_rcv+0x10/0x10
[   41.252087][ T3994]  __netif_receive_skb+0xff/0x270
[   41.252210][ T3994]  ? tun_rx_batched+0xc7/0x430
[   41.252275][ T3994]  netif_receive_skb+0x4b/0x2e0
[   41.252327][ T3994]  ? should_failslab+0x8c/0xb0
[   41.252348][ T3994]  ? tun_rx_batched+0xc7/0x430
[   41.252407][ T3994]  tun_rx_batched+0xfc/0x430
[   41.252428][ T3994]  ? eth_type_trans+0x215/0x3d0
[   41.252497][ T3994]  tun_get_user+0x1ed0/0x2670
[   41.252525][ T3994]  ? ref_tracker_alloc+0x1f2/0x2f0
[   41.252551][ T3994]  tun_chr_write_iter+0x15e/0x210
[   41.252574][ T3994]  ? __pfx_tun_chr_write_iter+0x10/0x10
[   41.252660][ T3994]  vfs_write+0x52a/0x960
[   41.252697][ T3994]  ksys_write+0xda/0x1a0
[   41.252716][ T3994]  __x64_sys_write+0x40/0x50
[   41.252846][ T3994]  x64_sys_call+0x2847/0x3000
[   41.252870][ T3994]  do_syscall_64+0xca/0x2b0
[   41.252901][ T3994]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   41.252923][ T3994] RIP: 0033:0x7fb64b72e1ff
[   41.252979][ T3994] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[   41.252997][ T3994] RSP: 002b:00007fb64a18f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[   41.253018][ T3994] RAX: ffffffffffffffda RBX: 00007fb64b985fa0 RCX: 00007fb64b72e1ff
[   41.253085][ T3994] RDX: 000000000000003a RSI: 0000200000000200 RDI: 00000000000000c8
[   41.253098][ T3994] RBP: 00007fb64a18f090 R08: 0000000000000000 R09: 0000000000000000
[   41.253111][ T3994] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001
[   41.253123][ T3994] R13: 00007fb64b986038 R14: 00007fb64b985fa0 R15: 00007fffb6657ca8
[   41.253146][ T3994]  </TASK>
[   41.328862][ T3995] lo speed is unknown, defaulting to 1000
[   41.348051][ T3990] __nla_validate_parse: 8 callbacks suppressed
[   41.348066][ T3990] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.138'.
[   41.349707][ T3995] lo speed is unknown, defaulting to 1000
[   41.359427][ T3990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'.
[   41.377896][ T3975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'.
[   41.378154][ T3975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.132'.
[   41.382716][ T3990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.138'.
[   41.414479][ T3993] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   41.529150][ T3975] netlink: 'syz.2.132': attribute type 4 has an invalid length.
[   41.539773][ T3993] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.139: lblock 2 mapped to illegal pblock 2 (length 1)
[   41.611569][ T3993] EXT4-fs (loop4): Remounting filesystem read-only
[   41.618171][ T3993] EXT4-fs (loop4): 1 orphan inode deleted
[   41.624307][ T3993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   41.690636][ T4007] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[   41.717730][   T29] kauditd_printk_skb: 398 callbacks suppressed
[   41.717748][   T29] audit: type=1326 audit(1768124234.809:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff7dcd0f749 code=0x7ffc0000
[   41.747303][   T29] audit: type=1326 audit(1768124234.839:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7dcd065e7 code=0x7ffc0000
[   41.747532][ T4007] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #13: comm syz.0.143: iget: bad i_size value: 12154757448730
[   41.770916][   T29] audit: type=1326 audit(1768124234.839:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7dccab829 code=0x7ffc0000
[   41.806355][   T29] audit: type=1326 audit(1768124234.839:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff7dcd0f749 code=0x7ffc0000
[   41.833762][   T29] audit: type=1326 audit(1768124234.879:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7dcd065e7 code=0x7ffc0000
[   41.856947][   T29] audit: type=1326 audit(1768124234.879:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7dccab829 code=0x7ffc0000
[   41.880279][   T29] audit: type=1326 audit(1768124234.879:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7dcd065e7 code=0x7ffc0000
[   41.903582][   T29] audit: type=1326 audit(1768124234.879:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff7dccab829 code=0x7ffc0000
[   41.926740][   T29] audit: type=1326 audit(1768124234.879:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff7dcd0f749 code=0x7ffc0000
[   41.950151][   T29] audit: type=1326 audit(1768124234.899:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3987 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff7dcd065e7 code=0x7ffc0000
[   41.974410][ T4007] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.143: couldn't read orphan inode 13 (err -117)
[   41.997486][ T4007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   42.016768][ T3993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3993 comm=syz.4.139
[   42.034333][ T4018] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   42.079648][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   42.080393][ T4021] SELinux:  policydb table sizes (4376,-1) do not match mine (8,7)
[   42.104268][ T4021] SELinux: failed to load policy
[   42.353960][ T4042] program syz.2.155 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   42.382032][ T4042] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   42.471497][ T4045] netlink: 96 bytes leftover after parsing attributes in process `syz.1.154'.
[   42.521586][ T4048] netlink: 'syz.1.157': attribute type 29 has an invalid length.
[   42.542503][ T4048] netlink: 'syz.1.157': attribute type 29 has an invalid length.
[   42.563313][ T4048] netlink: 564 bytes leftover after parsing attributes in process `syz.1.157'.
[   42.852363][ T4052] lo speed is unknown, defaulting to 1000
[   42.888259][ T4052] lo speed is unknown, defaulting to 1000
[   43.320004][ T4094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.164'.
[   43.391104][ T4097] bridge0: entered promiscuous mode
[   43.424252][ T4097] bridge0: port 3(macsec1) entered blocking state
[   43.430779][ T4097] bridge0: port 3(macsec1) entered disabled state
[   43.448642][ T4097] macsec1: entered allmulticast mode
[   43.453978][ T4097] bridge0: entered allmulticast mode
[   43.469781][ T4097] macsec1: left allmulticast mode
[   43.474940][ T4097] bridge0: left allmulticast mode
[   43.480634][ T4097] bridge0: left promiscuous mode
[   43.488729][ T4100] netlink: 96 bytes leftover after parsing attributes in process `syz.0.167'.
[   43.551692][ T4085] set_capacity_and_notify: 5 callbacks suppressed
[   43.551711][ T4085] loop3: detected capacity change from 0 to 1024
[   43.586543][ T4107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'.
[   43.607492][ T4085] EXT4-fs: Mount option(s) incompatible with ext3
[   43.629708][ T4106] loop1: detected capacity change from 0 to 2048
[   43.636393][ T4106] EXT4-fs: Ignoring removed bh option
[   43.717700][ T4106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   43.723721][ T4117] loop3: detected capacity change from 0 to 1024
[   43.749039][ T4117] EXT4-fs: inline encryption not supported
[   43.760156][ T4117] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   43.804583][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   43.814580][ T4117] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[   43.829872][ T4117] EXT4-fs (loop3): Remounting filesystem read-only
[   43.872137][ T4106] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   43.897390][ T4106] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[   43.909729][ T4106] EXT4-fs (loop1): This should not happen!! Data will be lost
[   43.909729][ T4106] 
[   43.919462][ T4106] EXT4-fs (loop1): Total free blocks count 0
[   43.925465][ T4106] EXT4-fs (loop1): Free/Dirty block details
[   43.929168][ T4124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4124 comm=syz.4.174
[   43.931603][ T4106] EXT4-fs (loop1): free_blocks=2415919104
[   43.948665][ T4124] loop4: detected capacity change from 0 to 764
[   43.949680][ T4106] EXT4-fs (loop1): dirty_blocks=16
[   43.962722][ T4106] EXT4-fs (loop1): Block reservation details
[   43.968747][ T4106] EXT4-fs (loop1): i_reserved_data_blocks=1
[   43.974708][ T4124] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   43.986360][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.078035][ T4106] syz.1.168 (4106) used greatest stack depth: 9496 bytes left
[   44.088184][ T4136] FAULT_INJECTION: forcing a failure.
[   44.088184][ T4136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   44.101306][ T4136] CPU: 0 UID: 0 PID: 4136 Comm: syz.3.180 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   44.101391][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   44.101403][ T4136] Call Trace:
[   44.101410][ T4136]  <TASK>
[   44.101417][ T4136]  __dump_stack+0x1d/0x30
[   44.101442][ T4136]  dump_stack_lvl+0x95/0xd0
[   44.101463][ T4136]  dump_stack+0x15/0x1b
[   44.101527][ T4136]  should_fail_ex+0x265/0x280
[   44.101551][ T4136]  should_fail+0xb/0x20
[   44.101571][ T4136]  should_fail_usercopy+0x1a/0x20
[   44.101595][ T4136]  _copy_from_user+0x1c/0xb0
[   44.101696][ T4136]  ___sys_sendmsg+0xc1/0x1d0
[   44.101737][ T4136]  __sys_sendmmsg+0x178/0x300
[   44.101841][ T4136]  __x64_sys_sendmmsg+0x57/0x70
[   44.101871][ T4136]  x64_sys_call+0x1e28/0x3000
[   44.101895][ T4136]  do_syscall_64+0xca/0x2b0
[   44.101981][ T4136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   44.102000][ T4136] RIP: 0033:0x7f871cb4f749
[   44.102017][ T4136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   44.102035][ T4136] RSP: 002b:00007f871b5b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   44.102069][ T4136] RAX: ffffffffffffffda RBX: 00007f871cda5fa0 RCX: 00007f871cb4f749
[   44.102083][ T4136] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007
[   44.102096][ T4136] RBP: 00007f871b5b7090 R08: 0000000000000000 R09: 0000000000000000
[   44.102110][ T4136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   44.102172][ T4136] R13: 00007f871cda6038 R14: 00007f871cda5fa0 R15: 00007fff802b53c8
[   44.102191][ T4136]  </TASK>
[   44.266857][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.284587][ T4138] lo speed is unknown, defaulting to 1000
[   44.304073][ T4145] pim6reg: entered allmulticast mode
[   44.310201][ T4144] pim6reg: left allmulticast mode
[   44.354672][ T4138] lo speed is unknown, defaulting to 1000
[   44.459917][ T4154] program syz.0.184 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   44.469600][ T4154] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   44.668082][ T4158] veth0_to_team: entered promiscuous mode
[   44.795542][ T4165] loop3: detected capacity change from 0 to 1024
[   44.835445][ T4165] EXT4-fs: Ignoring removed nobh option
[   44.841145][ T4165] EXT4-fs: inline encryption not supported
[   44.976511][ T4165] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.112441][ T4165] netlink: 'syz.3.187': attribute type 4 has an invalid length.
[   45.222758][ T4165] .`: renamed from bond0 (while UP)
[   45.318993][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.358560][ T4175] hsr_slave_1 (unregistering): left promiscuous mode
[   45.410908][ T4177] FAULT_INJECTION: forcing a failure.
[   45.410908][ T4177] name failslab, interval 1, probability 0, space 0, times 0
[   45.423699][ T4177] CPU: 1 UID: 0 PID: 4177 Comm: syz.3.190 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.423727][ T4177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   45.423742][ T4177] Call Trace:
[   45.423749][ T4177]  <TASK>
[   45.423758][ T4177]  __dump_stack+0x1d/0x30
[   45.423788][ T4177]  dump_stack_lvl+0x95/0xd0
[   45.423873][ T4177]  dump_stack+0x15/0x1b
[   45.423938][ T4177]  should_fail_ex+0x265/0x280
[   45.423958][ T4177]  should_failslab+0x8c/0xb0
[   45.423990][ T4177]  __kmalloc_noprof+0xb9/0x5a0
[   45.424016][ T4177]  ? apply_wqattrs_prepare+0x6e/0x670
[   45.424101][ T4177]  ? pcpu_memcg_post_alloc_hook+0xf3/0x170
[   45.424201][ T4177]  apply_wqattrs_prepare+0x6e/0x670
[   45.424285][ T4177]  alloc_workqueue_noprof+0xd63/0x1320
[   45.424311][ T4177]  ? dev_set_name+0x83/0xb0
[   45.424331][ T4177]  hci_register_dev+0x167/0x570
[   45.424353][ T4177]  hci_uart_tty_ioctl+0x520/0x5c0
[   45.424384][ T4177]  ? __pfx_hci_uart_tty_ioctl+0x10/0x10
[   45.424430][ T4177]  tty_ioctl+0x83f/0xb80
[   45.424448][ T4177]  ? __pfx_tty_ioctl+0x10/0x10
[   45.424466][ T4177]  __se_sys_ioctl+0xce/0x140
[   45.424495][ T4177]  __x64_sys_ioctl+0x43/0x50
[   45.424589][ T4177]  x64_sys_call+0x14b0/0x3000
[   45.424613][ T4177]  do_syscall_64+0xca/0x2b0
[   45.424649][ T4177]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.424730][ T4177] RIP: 0033:0x7f871cb4f749
[   45.424749][ T4177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.424770][ T4177] RSP: 002b:00007f871b5b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   45.424813][ T4177] RAX: ffffffffffffffda RBX: 00007f871cda5fa0 RCX: 00007f871cb4f749
[   45.424828][ T4177] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000003
[   45.424884][ T4177] RBP: 00007f871b5b7090 R08: 0000000000000000 R09: 0000000000000000
[   45.424899][ T4177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.424913][ T4177] R13: 00007f871cda6038 R14: 00007f871cda5fa0 R15: 00007fff802b53c8
[   45.424930][ T4177]  </TASK>
[   45.637338][ T4177] Bluetooth: Can't register HCI device
[   45.727682][ T4184] loop3: detected capacity change from 0 to 164
[   45.735586][ T4187] FAULT_INJECTION: forcing a failure.
[   45.735586][ T4187] name failslab, interval 1, probability 0, space 0, times 0
[   45.748335][ T4187] CPU: 0 UID: 0 PID: 4187 Comm: syz.1.195 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   45.748439][ T4187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   45.748452][ T4187] Call Trace:
[   45.748459][ T4187]  <TASK>
[   45.748467][ T4187]  __dump_stack+0x1d/0x30
[   45.748521][ T4187]  dump_stack_lvl+0x95/0xd0
[   45.748546][ T4187]  dump_stack+0x15/0x1b
[   45.748608][ T4187]  should_fail_ex+0x265/0x280
[   45.748629][ T4187]  should_failslab+0x8c/0xb0
[   45.748649][ T4187]  __kmalloc_node_track_caller_noprof+0xb9/0x5b0
[   45.748768][ T4187]  ? kstrdup_const+0x3e/0x50
[   45.748798][ T4187]  ? __xa_alloc+0x291/0x300
[   45.748820][ T4187]  kstrdup+0x3e/0xd0
[   45.748852][ T4187]  kstrdup_const+0x3e/0x50
[   45.748882][ T4187]  alloc_vfsmnt+0xe7/0x300
[   45.748976][ T4187]  clone_mnt+0x30/0x5d0
[   45.749000][ T4187]  ? copy_tree+0xa3/0x8c0
[   45.749038][ T4187]  copy_tree+0xb9/0x8c0
[   45.749222][ T4187]  ? proc_alloc_inum+0x4f/0x70
[   45.749249][ T4187]  ? __ns_common_init+0xd4/0x120
[   45.749359][ T4187]  ? __ns_tree_gen_id+0x48/0x60
[   45.749389][ T4187]  copy_mnt_ns+0x136/0x6a0
[   45.749410][ T4187]  ? kmem_cache_alloc_noprof+0x2c5/0x4b0
[   45.749434][ T4187]  ? create_new_namespaces+0x3c/0x400
[   45.749537][ T4187]  create_new_namespaces+0x83/0x400
[   45.749624][ T4187]  unshare_nsproxy_namespaces+0xe8/0x120
[   45.749734][ T4187]  ksys_unshare+0x3d0/0x6d0
[   45.749772][ T4187]  ? ksys_write+0x192/0x1a0
[   45.749793][ T4187]  __x64_sys_unshare+0x1f/0x30
[   45.749817][ T4187]  x64_sys_call+0x2ae6/0x3000
[   45.749844][ T4187]  do_syscall_64+0xca/0x2b0
[   45.749904][ T4187]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   45.749925][ T4187] RIP: 0033:0x7ff7dcd0f749
[   45.749943][ T4187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   45.749962][ T4187] RSP: 002b:00007ff7db777038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[   45.750051][ T4187] RAX: ffffffffffffffda RBX: 00007ff7dcf65fa0 RCX: 00007ff7dcd0f749
[   45.750066][ T4187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000
[   45.750081][ T4187] RBP: 00007ff7db777090 R08: 0000000000000000 R09: 0000000000000000
[   45.750095][ T4187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   45.750109][ T4187] R13: 00007ff7dcf66038 R14: 00007ff7dcf65fa0 R15: 00007ffcb787af58
[   45.750129][ T4187]  </TASK>
[   45.753902][ T4188] loop0: detected capacity change from 0 to 512
[   45.839274][ T4184] process 'syz.3.194' launched '/dev/fd/3' with NULL argv: empty string added
[   45.845201][ T4188] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   45.871955][ T4184] syz.3.194: attempt to access beyond end of device
[   45.871955][ T4184] loop3: rw=8912896, sector=263328, nr_sectors = 4 limit=164
[   45.960538][ T4188] EXT4-fs (loop0): failed to initialize system zone (-117)
[   45.966244][ T4184] syz.3.194: attempt to access beyond end of device
[   45.966244][ T4184] loop3: rw=8388608, sector=263328, nr_sectors = 4 limit=164
[   46.011285][ T4188] EXT4-fs (loop0): mount failed
[   46.092792][ T4181] netlink: 'syz.4.193': attribute type 4 has an invalid length.
[   46.166649][ T4198] loop3: detected capacity change from 0 to 1024
[   46.174048][ T4198] EXT4-fs: inline encryption not supported
[   46.200318][ T4198] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   46.242007][ T4198] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt.
[   46.281698][ T4198] EXT4-fs (loop3): Remounting filesystem read-only
[   46.290280][ T4206] syzkaller0: entered promiscuous mode
[   46.295826][ T4206] syzkaller0: entered allmulticast mode
[   46.309054][ T4200] netlink: 'syz.2.200': attribute type 4 has an invalid length.
[   46.370301][ T4214] syz_tun: entered allmulticast mode
[   46.370757][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.425436][ T4217] loop0: detected capacity change from 0 to 256
[   46.432258][ T4217] msdos: Unknown parameter 'sys_immutable;ôË2œ'
[   46.496720][   T10] hid-generic 0002:0004:1000000.0001: unknown main item tag 0x0
[   46.504505][   T10] hid-generic 0002:0004:1000000.0001: unknown main item tag 0x0
[   46.512215][   T10] hid-generic 0002:0004:1000000.0001: unknown main item tag 0x0
[   46.524960][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   46.541469][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   46.579900][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   46.598698][   T10] hid-generic 0002:0004:1000000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   46.606443][ T4218] lo speed is unknown, defaulting to 1000
[   46.615576][ T4218] lo speed is unknown, defaulting to 1000
[   46.617921][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   46.630687][ T4227] Cannot find add_set index 0 as target
[   46.656256][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   46.684137][ T4240] lo speed is unknown, defaulting to 1000
[   46.691444][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   46.699148][ T4240] lo speed is unknown, defaulting to 1000
[   46.707841][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   46.722658][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   46.730329][   T29] kauditd_printk_skb: 418 callbacks suppressed
[   46.730345][   T29] audit: type=1326 audit(1768124239.829:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f871cb465e7 code=0x7ffc0000
[   46.759810][   T29] audit: type=1326 audit(1768124239.829:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f871caeb829 code=0x7ffc0000
[   46.783127][   T29] audit: type=1326 audit(1768124239.829:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f871cb4f749 code=0x7ffc0000
[   46.816287][   T29] audit: type=1326 audit(1768124239.899:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f871cb465e7 code=0x7ffc0000
[   46.834126][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   46.839635][   T29] audit: type=1326 audit(1768124239.899:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f871caeb829 code=0x7ffc0000
[   46.869516][   T29] audit: type=1326 audit(1768124239.899:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f871cb4f749 code=0x7ffc0000
[   46.892823][   T29] audit: type=1326 audit(1768124239.899:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f871cb465e7 code=0x7ffc0000
[   46.916058][   T29] audit: type=1326 audit(1768124239.899:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f871caeb829 code=0x7ffc0000
[   46.939353][   T29] audit: type=1326 audit(1768124239.899:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f871cb4f749 code=0x7ffc0000
[   46.963675][   T29] audit: type=1326 audit(1768124240.039:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.3.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f871cb465e7 code=0x7ffc0000
[   46.974055][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   47.009284][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   47.024346][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   47.039634][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   47.064570][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   47.121883][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   47.151728][ T4259] program syz.2.213 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   47.161575][ T4259] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   47.185729][ T4260] lo speed is unknown, defaulting to 1000
[   47.195406][ T4260] lo speed is unknown, defaulting to 1000
[   47.309667][ T4225] ALSA: seq fatal error: cannot create timer (-19)
[   47.405634][ T4270] syz.4.217 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   47.526199][ T4278] netlink: 'syz.3.223': attribute type 39 has an invalid length.
[   47.564154][ T4282] loop0: detected capacity change from 0 to 2048
[   47.608914][ T4282] Alternate GPT is invalid, using primary GPT.
[   47.615389][ T4282]  loop0: p1 p2 p3
[   47.619191][ T4282] loop0: partition table partially beyond EOD, truncated
[   47.657705][ T4289] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   47.681681][ T4289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   47.690170][   T36] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   47.698695][ T4289] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   47.701941][   T36] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   47.720216][   T36] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   47.720284][   T36] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   47.720299][   T36] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x1
[   47.720313][   T36] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   47.720328][   T36] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0
[   47.741253][ T4289] netlink: 'syz.2.225': attribute type 6 has an invalid length.
[   47.773555][   T36] hid-generic 0000:0000:FFFFFFFC.0002: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[   47.851572][ T4297] fido_id[4297]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   47.899117][ T4301] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   47.912784][ T4302] ------------[ cut here ]------------
[   47.918333][ T4302] EA inode 11 i_nlink=2
[   47.918349][ T4302] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.0.228/4302
[   47.933547][ T4302] Modules linked in:
[   47.937550][ T4302] CPU: 0 UID: 0 PID: 4302 Comm: syz.0.228 Not tainted syzkaller #0 PREEMPT(voluntary) 
[   47.947254][ T4302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   47.957564][ T4302] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320
[   47.964309][ T4302] Code: 11 e3 9c ff 4c 8d 2d 5a ee 20 05 49 8d 7e 40 e8 81 6d b8 ff 49 8b 6e 40 4c 89 e7 e8 95 68 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 9c 9c ba 03 66 66 66 2e 0f 1f 84
[   47.983949][ T4302] RSP: 0018:ffffc900101e75a0 EFLAGS: 00010246
[   47.990056][ T4302] RAX: ffff88811c03ed90 RBX: ffff888107e2e950 RCX: ffffffff81bb1d6b
[   47.998039][ T4302] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bb0
[   48.006019][ T4302] RBP: 000000000000000b R08: 0001888107e2e903 R09: 0000000000000000
[   48.014076][ T4302] R10: 000188811bee705f R11: 0000000000000008 R12: ffff888107e2e900
[   48.022101][ T4302] R13: ffffffff86dc0bb0 R14: ffff888107e2e8b8 R15: 0000000000000001
[   48.030096][ T4302] FS:  00007fb64a16e6c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000
[   48.039041][ T4302] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   48.045639][ T4302] CR2: 00007fb64a16ed58 CR3: 0000000105888000 CR4: 00000000003506f0
[   48.053698][ T4302] Call Trace:
[   48.057062][ T4302]  <TASK>
[   48.060031][ T4302]  ext4_xattr_set_entry+0x77f/0x1020
[   48.065324][ T4302]  ext4_xattr_ibody_set+0x184/0x3c0
[   48.070571][ T4302]  ext4_expand_extra_isize_ea+0xcbb/0x11f0
[   48.076427][ T4302]  __ext4_expand_extra_isize+0x246/0x280
[   48.082096][ T4302]  __ext4_mark_inode_dirty+0x29d/0x3f0
[   48.087571][ T4302]  ext4_evict_inode+0x7c4/0xd40
[   48.092562][ T4302]  ? __pfx_ext4_evict_inode+0x10/0x10
[   48.098029][ T4302]  evict+0x2af/0x510
[   48.101958][ T4302]  ? __dquot_initialize+0x146/0x7c0
[   48.107198][ T4302]  iput+0x4bd/0x650
[   48.111071][ T4302]  ext4_process_orphan+0x1a9/0x1c0
[   48.116276][ T4302]  ext4_orphan_cleanup+0x6a8/0xa00
[   48.121403][ T4302]  ext4_fill_super+0x3411/0x37a0
[   48.126439][ T4302]  ? set_blocksize+0x1a8/0x310
[   48.131316][ T4302]  ? sb_set_blocksize+0xfc/0x170
[   48.136342][ T4302]  ? setup_bdev_super+0x30e/0x370
[   48.141409][ T4302]  ? __pfx_ext4_fill_super+0x10/0x10
[   48.146747][ T4302]  get_tree_bdev_flags+0x291/0x300
[   48.151968][ T4302]  ? __pfx_ext4_fill_super+0x10/0x10
[   48.157330][ T4302]  get_tree_bdev+0x1f/0x30
[   48.161760][ T4302]  ext4_get_tree+0x1c/0x30
[   48.166251][ T4302]  vfs_get_tree+0x57/0x1d0
[   48.170679][ T4302]  do_new_mount+0x24d/0x6a0
[   48.175221][ T4302]  path_mount+0x4ab/0xb80
[   48.179613][ T4302]  ? user_path_at+0xbf/0x130
[   48.184209][ T4302]  __se_sys_mount+0x28c/0x2e0
[   48.188997][ T4302]  __x64_sys_mount+0x67/0x80
[   48.193589][ T4302]  x64_sys_call+0x2cca/0x3000
[   48.198285][ T4302]  do_syscall_64+0xca/0x2b0
[   48.202824][ T4302]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.208768][ T4302] RIP: 0033:0x7fb64b730eea
[   48.213181][ T4302] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.232831][ T4302] RSP: 002b:00007fb64a16de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   48.241297][ T4302] RAX: ffffffffffffffda RBX: 00007fb64a16def0 RCX: 00007fb64b730eea
[   48.249307][ T4302] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fb64a16deb0
[   48.257288][ T4302] RBP: 0000200000000180 R08: 00007fb64a16def0 R09: 0000000000800700
[   48.265360][ T4302] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0
[   48.273378][ T4302] R13: 00007fb64a16deb0 R14: 000000000000046f R15: 000000000000002c
[   48.281375][ T4302]  </TASK>
[   48.284389][ T4302] ---[ end trace 0000000000000000 ]---
[   48.290096][ T4302] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.228: iget: bad extra_isize 90 (inode size 256)
[   48.303758][ T4302] EXT4-fs (loop0): Remounting filesystem read-only
[   48.311704][ T4302] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30)
[   48.323229][ T4302] EXT4-fs (loop0): 1 orphan inode deleted
[   48.333566][ T4301] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.337865][ T4302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   48.387858][ T4301] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.399469][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.429276][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   48.463236][ T4301] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.519051][ T4311] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.576726][ T2474] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.591107][ T4311] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.612083][ T2474] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.636082][ T2474] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.645937][ T2474] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.655499][ T4320] __nla_validate_parse: 7 callbacks suppressed
[   48.655514][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.235'.
[   48.685276][ T4311] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.707109][ T4319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'.
[   48.740538][ T4311] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   48.760580][ T4328] netlink: 'syz.3.239': attribute type 1 has an invalid length.
[   48.781744][ T4331] FAULT_INJECTION: forcing a failure.
[   48.781744][ T4331] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   48.794884][ T4331] CPU: 0 UID: 0 PID: 4331 Comm: syz.0.240 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   48.795001][ T4331] Tainted: [W]=WARN
[   48.795009][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   48.795021][ T4331] Call Trace:
[   48.795027][ T4331]  <TASK>
[   48.795035][ T4331]  __dump_stack+0x1d/0x30
[   48.795111][ T4331]  dump_stack_lvl+0x95/0xd0
[   48.795133][ T4331]  dump_stack+0x15/0x1b
[   48.795154][ T4331]  should_fail_ex+0x265/0x280
[   48.795208][ T4331]  should_fail+0xb/0x20
[   48.795236][ T4331]  should_fail_usercopy+0x1a/0x20
[   48.795265][ T4331]  _copy_from_iter+0xcf/0xe70
[   48.795293][ T4331]  ? __alloc_skb+0x396/0x4b0
[   48.795319][ T4331]  ? __alloc_skb+0x228/0x4b0
[   48.795355][ T4331]  netlink_sendmsg+0x471/0x6b0
[   48.795416][ T4331]  ? __pfx_netlink_sendmsg+0x10/0x10
[   48.795452][ T4331]  __sock_sendmsg+0x145/0x180
[   48.795476][ T4331]  ____sys_sendmsg+0x31e/0x4a0
[   48.795580][ T4331]  ___sys_sendmsg+0x17b/0x1d0
[   48.795616][ T4331]  __x64_sys_sendmsg+0xd4/0x160
[   48.795651][ T4331]  x64_sys_call+0x17ba/0x3000
[   48.795709][ T4331]  do_syscall_64+0xca/0x2b0
[   48.795792][ T4331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   48.795858][ T4331] RIP: 0033:0x7fb64b72f749
[   48.795873][ T4331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   48.795894][ T4331] RSP: 002b:00007fb64a18f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   48.795917][ T4331] RAX: ffffffffffffffda RBX: 00007fb64b985fa0 RCX: 00007fb64b72f749
[   48.795960][ T4331] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000005
[   48.795975][ T4331] RBP: 00007fb64a18f090 R08: 0000000000000000 R09: 0000000000000000
[   48.795994][ T4331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   48.796065][ T4331] R13: 00007fb64b986038 R14: 00007fb64b985fa0 R15: 00007fffb6657ca8
[   48.796086][ T4331]  </TASK>
[   49.007314][ T3766] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.041343][ T4334] set_capacity_and_notify: 2 callbacks suppressed
[   49.041375][ T4334] loop0: detected capacity change from 0 to 128
[   49.043504][ T3766] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.074049][ T3766] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.087392][ T3766] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.097679][ T4334] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   49.123638][ T4340] tipc: Started in network mode
[   49.128620][ T4340] tipc: Node identity ac14140f, cluster identity 4711
[   49.136076][ T4340] tipc: New replicast peer: 255.255.255.255
[   49.142239][ T4340] tipc: Enabled bearer <udp:syz2>, priority 10
[   49.148827][ T4334] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   49.168733][ T4334] netlink: 96 bytes leftover after parsing attributes in process `syz.0.241'.
[   49.226308][ T4346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.246'.
[   49.249552][ T4342] loop4: detected capacity change from 0 to 1024
[   49.266342][ T4352] FAULT_INJECTION: forcing a failure.
[   49.266342][ T4352] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   49.279558][ T4352] CPU: 1 UID: 0 PID: 4352 Comm: syz.3.249 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   49.279677][ T4352] Tainted: [W]=WARN
[   49.279684][ T4352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   49.279695][ T4352] Call Trace:
[   49.279701][ T4352]  <TASK>
[   49.279730][ T4352]  __dump_stack+0x1d/0x30
[   49.279836][ T4352]  dump_stack_lvl+0x95/0xd0
[   49.279858][ T4352]  dump_stack+0x15/0x1b
[   49.279925][ T4352]  should_fail_ex+0x265/0x280
[   49.279953][ T4352]  should_fail+0xb/0x20
[   49.279976][ T4352]  should_fail_usercopy+0x1a/0x20
[   49.280070][ T4352]  _copy_to_user+0x20/0xa0
[   49.280103][ T4352]  simple_read_from_buffer+0xb5/0x130
[   49.280129][ T4352]  proc_fail_nth_read+0x10e/0x150
[   49.280156][ T4352]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   49.280208][ T4352]  vfs_read+0x1a8/0x770
[   49.280229][ T4352]  ? __rcu_read_unlock+0x4f/0x70
[   49.280254][ T4352]  ? __fget_files+0x184/0x1c0
[   49.280275][ T4352]  ? mutex_lock+0x58/0x90
[   49.280377][ T4352]  ksys_read+0xda/0x1a0
[   49.280396][ T4352]  __x64_sys_read+0x40/0x50
[   49.280452][ T4352]  x64_sys_call+0x2889/0x3000
[   49.280474][ T4352]  do_syscall_64+0xca/0x2b0
[   49.280506][ T4352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   49.280600][ T4352] RIP: 0033:0x7f871cb4e15c
[   49.280617][ T4352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   49.280633][ T4352] RSP: 002b:00007f871b5b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   49.280659][ T4352] RAX: ffffffffffffffda RBX: 00007f871cda5fa0 RCX: 00007f871cb4e15c
[   49.280675][ T4352] RDX: 000000000000000f RSI: 00007f871b5b70a0 RDI: 0000000000000003
[   49.280691][ T4352] RBP: 00007f871b5b7090 R08: 0000000000000000 R09: 0000000000000000
[   49.280706][ T4352] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001
[   49.280768][ T4352] R13: 00007f871cda6038 R14: 00007f871cda5fa0 R15: 00007fff802b53c8
[   49.280791][ T4352]  </TASK>
[   49.282083][ T4342] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[   49.490270][ T4342] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869)
[   49.490869][ T4342] EXT4-fs (loop4): invalid journal inode
[   49.490892][ T4342] EXT4-fs (loop4): can't get journal size
[   49.492402][ T4342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   49.519841][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   49.542090][ T4360] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.566845][ T4362] netlink: 64 bytes leftover after parsing attributes in process `syz.2.252'.
[   49.567554][ T4362] syzkaller0: entered promiscuous mode
[   49.567571][ T4362] syzkaller0: entered allmulticast mode
[   49.591117][ T4338] netlink: 'syz.1.237': attribute type 1 has an invalid length.
[   49.608510][ T4360] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.622344][ T4349] netlink: 'syz.0.247': attribute type 4 has an invalid length.
[   49.688574][ T4373] program syz.1.254 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   49.697990][ T4373] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   49.738749][ T4360] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.778593][ T4382] netlink: 20 bytes leftover after parsing attributes in process `syz.0.257'.
[   49.808843][ T4360] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   49.886161][ T4400] loop0: detected capacity change from 0 to 128
[   49.909917][ T4400] xt_l2tp: v2 doesn't support IP mode
[   49.945344][ T4406] netlink: 'syz.1.264': attribute type 16 has an invalid length.
[   49.953262][ T4406] netlink: 'syz.1.264': attribute type 17 has an invalid length.
[   49.987844][ T4406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   50.016571][ T4406] loop1: detected capacity change from 0 to 128
[   50.171917][  T863] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.220569][  T863] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.267180][   T10] tipc: Node number set to 2886997007
[   50.288574][ T4421] lo speed is unknown, defaulting to 1000
[   50.294555][ T4421] lo speed is unknown, defaulting to 1000
[   50.302835][ T4432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.270'.
[   50.303179][  T863] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.370761][  T863] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   50.382193][ T4421] chnl_net:caif_netlink_parms(): no params data found
[   50.418175][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state
[   50.425297][ T4421] bridge0: port 1(bridge_slave_0) entered disabled state
[   50.432739][ T4421] bridge_slave_0: entered allmulticast mode
[   50.439317][ T4421] bridge_slave_0: entered promiscuous mode
[   50.446098][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state
[   50.453215][ T4421] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.461057][ T4421] bridge_slave_1: entered allmulticast mode
[   50.468041][ T4421] bridge_slave_1: entered promiscuous mode
[   50.473949][ T4439] program syz.4.273 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   50.483253][ T4439] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   50.512278][ T4441] FAULT_INJECTION: forcing a failure.
[   50.512278][ T4441] name failslab, interval 1, probability 0, space 0, times 0
[   50.525098][ T4441] CPU: 1 UID: 0 PID: 4441 Comm: syz.4.274 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   50.525129][ T4441] Tainted: [W]=WARN
[   50.525136][ T4441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   50.525146][ T4441] Call Trace:
[   50.525152][ T4441]  <TASK>
[   50.525160][ T4441]  __dump_stack+0x1d/0x30
[   50.525261][ T4441]  dump_stack_lvl+0x95/0xd0
[   50.525364][ T4441]  dump_stack+0x15/0x1b
[   50.525382][ T4441]  should_fail_ex+0x265/0x280
[   50.525406][ T4441]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[   50.525483][ T4441]  should_failslab+0x8c/0xb0
[   50.525503][ T4441]  kmem_cache_alloc_lru_noprof+0x6d/0x4c0
[   50.525524][ T4441]  ? debugfs_alloc_inode+0x34/0x40
[   50.525543][ T4441]  ? __pfx_debugfs_alloc_inode+0x10/0x10
[   50.525564][ T4441]  debugfs_alloc_inode+0x34/0x40
[   50.525597][ T4441]  alloc_inode+0x40/0x170
[   50.525619][ T4441]  new_inode+0x1d/0xe0
[   50.525644][ T4441]  __debugfs_create_file+0x97/0x2b0
[   50.525667][ T4441]  debugfs_create_file_full+0x3f/0x60
[   50.525793][ T4441]  ? __pfx_macsec_setup+0x10/0x10
[   50.525813][ T4441]  ref_tracker_dir_debugfs+0x100/0x210
[   50.525895][ T4441]  alloc_netdev_mqs+0x1a7/0xa40
[   50.525924][ T4441]  rtnl_create_link+0x239/0x6e0
[   50.525950][ T4441]  rtnl_newlink_create+0x14c/0x620
[   50.525973][ T4441]  ? security_capable+0x83/0x90
[   50.526077][ T4441]  rtnl_newlink+0xf5b/0x1360
[   50.526104][ T4441]  ? xas_load+0x413/0x430
[   50.526217][ T4441]  ? xas_load+0x413/0x430
[   50.526245][ T4441]  ? skb_network_protocol+0x329/0x420
[   50.526274][ T4441]  ? __rcu_read_unlock+0x4f/0x70
[   50.526302][ T4441]  ? __rcu_read_unlock+0x4f/0x70
[   50.526321][ T4441]  ? avc_has_perm_noaudit+0xab/0x130
[   50.526352][ T4441]  ? cred_has_capability+0x210/0x280
[   50.526443][ T4441]  ? selinux_capable+0x31/0x40
[   50.526464][ T4441]  ? security_capable+0x83/0x90
[   50.526492][ T4441]  ? ns_capable+0x7d/0xb0
[   50.526589][ T4441]  ? __pfx_rtnl_newlink+0x10/0x10
[   50.526606][ T4441]  rtnetlink_rcv_msg+0x5fe/0x6d0
[   50.526626][ T4441]  netlink_rcv_skb+0x123/0x220
[   50.526654][ T4441]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[   50.526704][ T4441]  rtnetlink_rcv+0x1c/0x30
[   50.526743][ T4441]  netlink_unicast+0x5c0/0x690
[   50.526770][ T4441]  netlink_sendmsg+0x58b/0x6b0
[   50.526804][ T4441]  ? __pfx_netlink_sendmsg+0x10/0x10
[   50.526969][ T4441]  __sock_sendmsg+0x145/0x180
[   50.526988][ T4441]  ____sys_sendmsg+0x31e/0x4a0
[   50.527070][ T4441]  ___sys_sendmsg+0x17b/0x1d0
[   50.527168][ T4441]  __x64_sys_sendmsg+0xd4/0x160
[   50.527202][ T4441]  x64_sys_call+0x17ba/0x3000
[   50.527228][ T4441]  do_syscall_64+0xca/0x2b0
[   50.527325][ T4441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   50.527347][ T4441] RIP: 0033:0x7f9835ddf749
[   50.527365][ T4441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   50.527414][ T4441] RSP: 002b:00007f983483f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   50.527436][ T4441] RAX: ffffffffffffffda RBX: 00007f9836035fa0 RCX: 00007f9835ddf749
[   50.527513][ T4441] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[   50.527527][ T4441] RBP: 00007f983483f090 R08: 0000000000000000 R09: 0000000000000000
[   50.527541][ T4441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   50.527554][ T4441] R13: 00007f9836036038 R14: 00007f9836035fa0 R15: 00007ffcbb817748
[   50.527574][ T4441]  </TASK>
[   50.859307][ T4441] debugfs: out of free dentries, can not create file 'netdev@ffff88811bf92558'
[   50.872881][ T4441] dummy0: entered promiscuous mode
[   50.878100][ T4441] macsec1: entered promiscuous mode
[   50.883413][ T4441] macsec1: entered allmulticast mode
[   50.888808][ T4441] dummy0: entered allmulticast mode
[   50.895041][ T4441] dummy0: left allmulticast mode
[   50.900274][ T4441] dummy0: left promiscuous mode
[   50.911546][ T4421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   50.922785][ T4421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   50.941464][  T863] bridge_slave_1: left allmulticast mode
[   50.947168][  T863] bridge_slave_1: left promiscuous mode
[   50.952795][  T863] bridge0: port 2(bridge_slave_1) entered disabled state
[   50.961770][  T863] bridge_slave_0: left allmulticast mode
[   50.967463][  T863] bridge_slave_0: left promiscuous mode
[   50.973217][  T863] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.003651][ T4447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'.
[   51.128998][  T863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   51.138809][  T863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   51.148312][  T863] bond0 (unregistering): Released all slaves
[   51.162701][ T4421] team0: Port device team_slave_0 added
[   51.171415][ T4450] syzkaller0: entered promiscuous mode
[   51.176884][ T4450] syzkaller0: entered allmulticast mode
[   51.186555][ T4421] team0: Port device team_slave_1 added
[   51.202880][  T863] hsr_slave_0: left promiscuous mode
[   51.208687][  T863] hsr_slave_1: left promiscuous mode
[   51.214420][  T863] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.221969][  T863] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.230062][  T863] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.237552][  T863] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.247705][  T863] veth1_macvtap: left promiscuous mode
[   51.253201][  T863] veth0_macvtap: left promiscuous mode
[   51.258832][  T863] veth1_vlan: left promiscuous mode
[   51.264060][  T863] veth0_vlan: left promiscuous mode
[   51.319862][  T863] team0 (unregistering): Port device team_slave_1 removed
[   51.329673][  T863] team0 (unregistering): Port device team_slave_0 removed
[   51.366580][ T3007] udevd[3007]: worker [4110] terminated by signal 33 (Unknown signal 33)
[   51.408772][ T4421] batman_adv: batadv0: Adding interface: batadv_slave_0
[   51.415794][ T4421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   51.442027][ T4421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   51.500635][ T4421] batman_adv: batadv0: Adding interface: batadv_slave_1
[   51.507691][ T4421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   51.533751][ T4421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   51.547753][ T4461] IPVS: length: 4096 != 8
[   51.562823][ T4421] hsr_slave_0: entered promiscuous mode
[   51.568920][ T4421] hsr_slave_1: entered promiscuous mode
[   51.630748][ T4421] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   51.640846][ T4421] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   51.649910][ T4421] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   51.659681][ T4421] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   51.712172][ T4421] 8021q: adding VLAN 0 to HW filter on device bond0
[   51.725751][ T4421] 8021q: adding VLAN 0 to HW filter on device team0
[   51.735358][  T863] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.742508][  T863] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.753312][ T3779] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.760412][ T3779] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.799622][ T4472] netlink: 'syz.4.283': attribute type 4 has an invalid length.
[   51.800639][ T4421] 8021q: adding VLAN 0 to HW filter on device batadv0
[   51.844778][ T4421] veth0_vlan: entered promiscuous mode
[   51.853115][ T4421] veth1_vlan: entered promiscuous mode
[   51.869017][ T4421] veth0_macvtap: entered promiscuous mode
[   51.876127][ T4497] program syz.4.284 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   51.876430][ T4421] veth1_macvtap: entered promiscuous mode
[   51.886239][ T4497] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   51.902048][ T4421] batman_adv: batadv0: Interface activated: batadv_slave_0
[   51.914094][ T4421] batman_adv: batadv0: Interface activated: batadv_slave_1
[   51.924940][  T863] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   51.934055][  T863] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   51.943278][  T863] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   51.952571][  T863] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   51.974913][   T29] kauditd_printk_skb: 1637 callbacks suppressed
[   51.974929][   T29] audit: type=1400 audit(1768124245.059:2923): avc:  denied  { mounton } for  pid=4421 comm="syz-executor" path="/root/syzkaller.dKzDr9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   52.064904][ T4509] program syz.4.287 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   52.074580][ T4509] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   52.089297][   T29] audit: type=1400 audit(1768124245.179:2924): avc:  denied  { connect } for  pid=4511 comm="syz.5.289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1
[   52.130343][ T4517] tipc: Started in network mode
[   52.135313][ T4517] tipc: Node identity ac14140f, cluster identity 4711
[   52.142596][ T4517] tipc: New replicast peer: 255.255.255.255
[   52.144764][   T29] audit: type=1400 audit(1768124245.229:2925): avc:  denied  { create } for  pid=4519 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   52.149017][ T4517] tipc: Enabled bearer <udp:syz2>, priority 10
[   52.172515][ T4520] FAULT_INJECTION: forcing a failure.
[   52.172515][ T4520] name failslab, interval 1, probability 0, space 0, times 0
[   52.188354][ T4520] CPU: 0 UID: 0 PID: 4520 Comm: syz.4.293 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   52.188432][ T4520] Tainted: [W]=WARN
[   52.188438][ T4520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   52.188449][ T4520] Call Trace:
[   52.188454][ T4520]  <TASK>
[   52.188461][ T4520]  __dump_stack+0x1d/0x30
[   52.188527][ T4520]  dump_stack_lvl+0x95/0xd0
[   52.188592][ T4520]  dump_stack+0x15/0x1b
[   52.188611][ T4520]  should_fail_ex+0x265/0x280
[   52.188635][ T4520]  should_failslab+0x8c/0xb0
[   52.188659][ T4520]  __kmalloc_noprof+0xb9/0x5a0
[   52.188682][ T4520]  ? alloc_workqueue_noprof+0x168/0x1320
[   52.188764][ T4520]  alloc_workqueue_noprof+0x168/0x1320
[   52.188785][ T4520]  ? kfree_const+0x3e/0x50
[   52.188859][ T4520]  ? kobject_set_name_vargs+0xc0/0xe0
[   52.188930][ T4520]  ? dev_set_name+0x83/0xb0
[   52.188952][ T4520]  hci_register_dev+0x167/0x570
[   52.188979][ T4520]  hci_uart_tty_ioctl+0x520/0x5c0
[   52.189010][ T4520]  ? __pfx_hci_uart_tty_ioctl+0x10/0x10
[   52.189042][ T4520]  tty_ioctl+0x83f/0xb80
[   52.189065][ T4520]  ? __pfx_tty_ioctl+0x10/0x10
[   52.189083][ T4520]  __se_sys_ioctl+0xce/0x140
[   52.189187][ T4520]  __x64_sys_ioctl+0x43/0x50
[   52.189258][ T4520]  x64_sys_call+0x14b0/0x3000
[   52.189285][ T4520]  do_syscall_64+0xca/0x2b0
[   52.189323][ T4520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   52.189348][ T4520] RIP: 0033:0x7f9835ddf749
[   52.189364][ T4520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   52.189394][ T4520] RSP: 002b:00007f983483f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   52.189413][ T4520] RAX: ffffffffffffffda RBX: 00007f9836035fa0 RCX: 00007f9835ddf749
[   52.189424][ T4520] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000005
[   52.189437][ T4520] RBP: 00007f983483f090 R08: 0000000000000000 R09: 0000000000000000
[   52.189452][ T4520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   52.189464][ T4520] R13: 00007f9836036038 R14: 00007f9836035fa0 R15: 00007ffcbb817748
[   52.189482][ T4520]  </TASK>
[   52.189495][ T4520] Bluetooth: Can't register HCI device
[   52.230944][   T29] audit: type=1400 audit(1768124245.269:2926): avc:  denied  { bind } for  pid=4519 comm="syz.4.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[   52.505066][   T29] audit: type=1400 audit(1768124245.589:2927): avc:  denied  { read } for  pid=4542 comm="syz.5.301" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   52.560909][ T4544] sch_tbf: peakrate 7 is lower than or equals to rate 7 !
[   52.594864][   T29] audit: type=1326 audit(1768124245.679:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f48f749 code=0x7ffc0000
[   52.627807][   T29] audit: type=1326 audit(1768124245.709:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f48f749 code=0x7ffc0000
[   52.627855][   T29] audit: type=1326 audit(1768124245.709:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f48f749 code=0x7ffc0000
[   52.627882][   T29] audit: type=1326 audit(1768124245.709:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f519f48f749 code=0x7ffc0000
[   52.627975][   T29] audit: type=1326 audit(1768124245.709:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4545 comm="syz.5.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f48f749 code=0x7ffc0000
[   52.645118][ T4548] tipc: Started in network mode
[   52.726253][ T4548] tipc: Node identity ac14140f, cluster identity 4711
[   52.743108][ T4548] tipc: New replicast peer: 255.255.255.255
[   52.743394][ T4548] tipc: Enabled bearer <udp:syz2>, priority 10
[   52.779274][ T4554] loop4: detected capacity change from 0 to 1024
[   52.903625][ T2517] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   52.906857][ T2517] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   52.909872][ T2517] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   52.913141][ T2517] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   53.026786][ T4564] loop3: detected capacity change from 0 to 2048
[   53.027060][ T4564] EXT4-fs: Ignoring removed bh option
[   53.078685][ T4564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.104218][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.146152][ T4558] netlink: 60 bytes leftover after parsing attributes in process `gtp'.
[   53.146218][ T4558] IPVS: Unknown mcast interface: 
[   53.157219][ T3663] tipc: Node number set to 2886997007
[   53.270367][ T4576] program syz.1.315 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   53.286513][ T4576] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   53.401496][ T4594] loop3: detected capacity change from 0 to 128
[   53.428237][ T4594] loop3: detected capacity change from 0 to 512
[   53.444590][ T4594] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   53.455655][ T4594] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.323: inode has both inline data and extents flags
[   53.472807][ T4594] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.323: couldn't read orphan inode 15 (err -117)
[   53.486053][ T4594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   53.516101][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.533637][ T4601] SELinux:  Context system_u:object_r:lvm_control_t:s0 is not valid (left unmapped).
[   53.580688][ T4607] netlink: 'syz.3.325': attribute type 1 has an invalid length.
[   53.583917][ T4609] program syz.1.329 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   53.588400][ T4607] netlink: 244 bytes leftover after parsing attributes in process `syz.3.325'.
[   53.614471][ T4607] SELinux:  policydb version 65813 does not match my version range 15-35
[   53.624344][ T4607] SELinux: failed to load policy
[   53.629601][ T4609] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   53.672213][ T4612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'.
[   53.678467][ T4616] netlink: 96 bytes leftover after parsing attributes in process `syz.1.332'.
[   53.698137][ T4612] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[   53.709200][ T4612] bond0 (unregistering): Released all slaves
[   53.749515][ T4626] loop5: detected capacity change from 0 to 1764
[   53.756421][ T4626] grow_buffers: requested out-of-range block 18446744071681881834 for device loop5
[   53.765873][ T4626] isofs_fill_super: bread failed, dev=loop5, iso_blknum=1133648757, block=-2027669782
[   53.857189][ T4072] tipc: Node number set to 2886997007
[   53.914989][ T4637] program syz.5.341 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   53.924430][ T4637] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   53.976546][ T4628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.977336][ T4643] netlink: 28 bytes leftover after parsing attributes in process `syz.5.344'.
[   53.985715][ T4628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.993852][ T4643] netlink: 32 bytes leftover after parsing attributes in process `syz.5.344'.
[   54.010538][ T4643] netlink: 28 bytes leftover after parsing attributes in process `syz.5.344'.
[   54.010906][ T4643] netlink: 32 bytes leftover after parsing attributes in process `syz.5.344'.
[   54.048070][ T4647] netlink: 96 bytes leftover after parsing attributes in process `syz.2.346'.
[   54.072118][ T4651] netlink: 'syz.2.348': attribute type 4 has an invalid length.
[   54.081700][ T4651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.348'.
[   54.129231][ T4654] lo speed is unknown, defaulting to 1000
[   54.135889][ T4654] lo speed is unknown, defaulting to 1000
[   54.308041][ T4663] program syz.4.352 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   54.322267][ T4663] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   54.477853][ T4669] FAULT_INJECTION: forcing a failure.
[   54.477853][ T4669] name failslab, interval 1, probability 0, space 0, times 0
[   54.490593][ T4669] CPU: 1 UID: 0 PID: 4669 Comm: syz.4.354 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   54.490669][ T4669] Tainted: [W]=WARN
[   54.490678][ T4669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   54.490691][ T4669] Call Trace:
[   54.490697][ T4669]  <TASK>
[   54.490704][ T4669]  __dump_stack+0x1d/0x30
[   54.490731][ T4669]  dump_stack_lvl+0x95/0xd0
[   54.490818][ T4669]  dump_stack+0x15/0x1b
[   54.490839][ T4669]  should_fail_ex+0x265/0x280
[   54.490900][ T4669]  should_failslab+0x8c/0xb0
[   54.491008][ T4669]  kmem_cache_alloc_node_noprof+0x6b/0x4c0
[   54.491035][ T4669]  ? __alloc_skb+0x2ff/0x4b0
[   54.491061][ T4669]  __alloc_skb+0x2ff/0x4b0
[   54.491081][ T4669]  ? __alloc_skb+0x228/0x4b0
[   54.491129][ T4669]  netlink_alloc_large_skb+0xbf/0xf0
[   54.491162][ T4669]  netlink_sendmsg+0x3cf/0x6b0
[   54.491197][ T4669]  ? __pfx_netlink_sendmsg+0x10/0x10
[   54.491230][ T4669]  __sock_sendmsg+0x145/0x180
[   54.491289][ T4669]  ____sys_sendmsg+0x31e/0x4a0
[   54.491355][ T4669]  ___sys_sendmsg+0x17b/0x1d0
[   54.491399][ T4669]  __x64_sys_sendmsg+0xd4/0x160
[   54.491499][ T4669]  x64_sys_call+0x17ba/0x3000
[   54.491520][ T4669]  do_syscall_64+0xca/0x2b0
[   54.491601][ T4669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   54.491627][ T4669] RIP: 0033:0x7f9835ddf749
[   54.491645][ T4669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   54.491666][ T4669] RSP: 002b:00007f983483f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   54.491689][ T4669] RAX: ffffffffffffffda RBX: 00007f9836035fa0 RCX: 00007f9835ddf749
[   54.491704][ T4669] RDX: 0000000000000000 RSI: 0000200000006280 RDI: 0000000000000006
[   54.491717][ T4669] RBP: 00007f983483f090 R08: 0000000000000000 R09: 0000000000000000
[   54.491769][ T4669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   54.491782][ T4669] R13: 00007f9836036038 R14: 00007f9836035fa0 R15: 00007ffcbb817748
[   54.491803][ T4669]  </TASK>
[   54.814609][ T4676] netlink: 96 bytes leftover after parsing attributes in process `syz.3.358'.
[   54.857831][ T4680] netlink: 'syz.4.359': attribute type 39 has an invalid length.
[   54.991474][ T4691] program syz.3.363 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   55.017437][ T4691] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   55.050445][ T4693] loop2: detected capacity change from 0 to 1024
[   55.064107][ T4696] loop5: detected capacity change from 0 to 512
[   55.096871][ T4696] EXT4-fs (loop5): orphan cleanup on readonly fs
[   55.097262][ T4696] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.365: bad orphan inode 13
[   55.098909][ T4696] ext4_test_bit(bit=12, block=18) = 1
[   55.119258][ T4696] is_bad_inode(inode)=0
[   55.119272][ T4696] NEXT_ORPHAN(inode)=2130706432
[   55.119282][ T4696] max_ino=32
[   55.119290][ T4696] i_nlink=1
[   55.120723][ T4693] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none.
[   55.123382][ T4693] EXT4-fs error (device loop2): ext4_find_dest_de:2050: inode #2: block 16: comm syz.2.364: bad entry in directory: directory entry overrun - offset=12, inode=0, rec_len=1024, size=1024 fake=1
[   55.126548][ T4693] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in;
[   55.126548][ T4693]    program syz.2.364 not setting count and/or reply_len properly
[   55.136735][ T4696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   55.263735][ T4708] 9p: Bad value for 'source'
[   55.269732][ T4708] loop4: detected capacity change from 0 to 1024
[   55.270118][ T4708] EXT4-fs: inline encryption not supported
[   55.294101][ T4708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.298330][ T4708] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[   55.308270][ T4708] EXT4-fs (loop4): Remounting filesystem read-only
[   55.342413][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.354740][ T4421] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.362357][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   55.383805][ T4717] netlink: 96 bytes leftover after parsing attributes in process `syz.4.371'.
[   55.454837][ T4724] program syz.4.377 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   55.464199][ T4724] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   55.499236][ T4727] netlink: 'syz.4.378': attribute type 39 has an invalid length.
[   55.578133][ T4736] FAULT_INJECTION: forcing a failure.
[   55.578133][ T4736] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[   55.578169][ T4736] CPU: 1 UID: 0 PID: 4736 Comm: syz.4.381 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   55.578201][ T4736] Tainted: [W]=WARN
[   55.578207][ T4736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   55.578218][ T4736] Call Trace:
[   55.578224][ T4736]  <TASK>
[   55.578233][ T4736]  __dump_stack+0x1d/0x30
[   55.578333][ T4736]  dump_stack_lvl+0x95/0xd0
[   55.578352][ T4736]  dump_stack+0x15/0x1b
[   55.578370][ T4736]  should_fail_ex+0x265/0x280
[   55.578417][ T4736]  should_fail_alloc_page+0xf2/0x100
[   55.578441][ T4736]  __alloc_frozen_pages_noprof+0x109/0x360
[   55.578471][ T4736]  alloc_pages_mpol+0xb3/0x260
[   55.578500][ T4736]  alloc_pages_noprof+0x90/0x130
[   55.578532][ T4736]  pgd_alloc+0x40/0x2b0
[   55.578562][ T4736]  mm_init+0x382/0x650
[   55.578592][ T4736]  mm_alloc+0x81/0xa0
[   55.578638][ T4736]  alloc_bprm+0x20e/0x350
[   55.578668][ T4736]  do_execveat_common+0x12e/0x750
[   55.578764][ T4736]  __x64_sys_execve+0x5c/0x70
[   55.578795][ T4736]  x64_sys_call+0x271d/0x3000
[   55.578831][ T4736]  do_syscall_64+0xca/0x2b0
[   55.578905][ T4736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.578935][ T4736] RIP: 0033:0x7f9835ddf749
[   55.578957][ T4736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.578974][ T4736] RSP: 002b:00007f983483f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[   55.578995][ T4736] RAX: ffffffffffffffda RBX: 00007f9836035fa0 RCX: 00007f9835ddf749
[   55.579008][ T4736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000
[   55.579093][ T4736] RBP: 00007f983483f090 R08: 0000000000000000 R09: 0000000000000000
[   55.579106][ T4736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.579119][ T4736] R13: 00007f9836036038 R14: 00007f9836035fa0 R15: 00007ffcbb817748
[   55.579138][ T4736]  </TASK>
[   55.596531][ T4733] 9p: Could not find request transport: fd0x0000000000000006
[   55.613949][ T4738] loop2: detected capacity change from 0 to 128
[   55.693041][ T4745] loop4: detected capacity change from 0 to 512
[   55.819264][ T4745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   55.819374][ T4745] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   55.848308][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   55.864539][ T4749] FAULT_INJECTION: forcing a failure.
[   55.864539][ T4749] name failslab, interval 1, probability 0, space 0, times 0
[   55.864648][ T4749] CPU: 0 UID: 0 PID: 4749 Comm: syz.4.385 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   55.864686][ T4749] Tainted: [W]=WARN
[   55.864693][ T4749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   55.864704][ T4749] Call Trace:
[   55.864711][ T4749]  <TASK>
[   55.864718][ T4749]  __dump_stack+0x1d/0x30
[   55.864743][ T4749]  dump_stack_lvl+0x95/0xd0
[   55.864816][ T4749]  dump_stack+0x15/0x1b
[   55.864836][ T4749]  should_fail_ex+0x265/0x280
[   55.864859][ T4749]  should_failslab+0x8c/0xb0
[   55.864890][ T4749]  __kmalloc_noprof+0xb9/0x5a0
[   55.864960][ T4749]  ? security_bpf_prog_load+0x60/0x140
[   55.864987][ T4749]  ? should_fail_usercopy+0x1a/0x20
[   55.865009][ T4749]  ? strncpy_from_user+0x13a/0x260
[   55.865039][ T4749]  security_bpf_prog_load+0x60/0x140
[   55.865119][ T4749]  bpf_prog_load+0xef8/0x1140
[   55.865147][ T4749]  ? security_bpf+0x2b/0x90
[   55.865171][ T4749]  __sys_bpf+0x469/0x7c0
[   55.865196][ T4749]  __x64_sys_bpf+0x41/0x50
[   55.865236][ T4749]  x64_sys_call+0x28e1/0x3000
[   55.865260][ T4749]  do_syscall_64+0xca/0x2b0
[   55.865325][ T4749]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   55.865347][ T4749] RIP: 0033:0x7f9835ddf749
[   55.865368][ T4749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   55.865385][ T4749] RSP: 002b:00007f983483f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[   55.865405][ T4749] RAX: ffffffffffffffda RBX: 00007f9836035fa0 RCX: 00007f9835ddf749
[   55.865418][ T4749] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005
[   55.865471][ T4749] RBP: 00007f983483f090 R08: 0000000000000000 R09: 0000000000000000
[   55.865513][ T4749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   55.865525][ T4749] R13: 00007f9836036038 R14: 00007f9836035fa0 R15: 00007ffcbb817748
[   55.865543][ T4749]  </TASK>
[   55.939528][ T4760] program syz.4.389 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   55.986376][ T4762] netlink: 'syz.2.390': attribute type 39 has an invalid length.
[   55.996339][ T4760] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   56.118714][ T4762] syz_tun (unregistering): left allmulticast mode
[   56.178329][ T4767] loop4: detected capacity change from 0 to 512
[   56.178807][ T4767] EXT4-fs: Ignoring removed i_version option
[   56.178918][ T4767] EXT4-fs: Ignoring removed bh option
[   56.197866][ T4767] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   56.212977][ T4767] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   56.226579][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.303775][ T4773] SELinux: failed to load policy
[   56.381244][ T4778] lo speed is unknown, defaulting to 1000
[   56.388547][ T4778] lo speed is unknown, defaulting to 1000
[   56.434401][ T4780] loop3: detected capacity change from 0 to 512
[   56.527576][ T4780] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   56.547576][ T4780] EXT4-fs (loop3): 1 truncate cleaned up
[   56.554221][ T4780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   56.563512][ T4793] FAULT_INJECTION: forcing a failure.
[   56.563512][ T4793] name failslab, interval 1, probability 0, space 0, times 0
[   56.578949][ T4793] CPU: 0 UID: 0 PID: 4793 Comm: syz.2.401 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   56.579044][ T4793] Tainted: [W]=WARN
[   56.579050][ T4793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   56.579062][ T4793] Call Trace:
[   56.579069][ T4793]  <TASK>
[   56.579077][ T4793]  __dump_stack+0x1d/0x30
[   56.579104][ T4793]  dump_stack_lvl+0x95/0xd0
[   56.579129][ T4793]  dump_stack+0x15/0x1b
[   56.579179][ T4793]  should_fail_ex+0x265/0x280
[   56.579200][ T4793]  should_failslab+0x8c/0xb0
[   56.579221][ T4793]  __kmalloc_cache_noprof+0x65/0x4c0
[   56.579244][ T4793]  ? ftrace_profile_set_filter+0xc2/0x1b0
[   56.579304][ T4793]  ftrace_profile_set_filter+0xc2/0x1b0
[   56.579334][ T4793]  perf_ioctl+0x7b3/0x12e0
[   56.579365][ T4793]  ? ioctl_has_perm+0x287/0x2a0
[   56.579440][ T4793]  ? do_vfs_ioctl+0x866/0xe10
[   56.579473][ T4793]  ? selinux_file_ioctl+0x308/0x3a0
[   56.579539][ T4793]  ? __fget_files+0x184/0x1c0
[   56.579566][ T4793]  ? __pfx_perf_ioctl+0x10/0x10
[   56.579599][ T4793]  __se_sys_ioctl+0xce/0x140
[   56.579682][ T4793]  __x64_sys_ioctl+0x43/0x50
[   56.579726][ T4793]  x64_sys_call+0x14b0/0x3000
[   56.579762][ T4793]  do_syscall_64+0xca/0x2b0
[   56.579849][ T4793]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.579918][ T4793] RIP: 0033:0x7f4ac403f749
[   56.579936][ T4793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   56.579958][ T4793] RSP: 002b:00007f4ac2a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   56.579981][ T4793] RAX: ffffffffffffffda RBX: 00007f4ac4295fa0 RCX: 00007f4ac403f749
[   56.580038][ T4793] RDX: 00002000000001c0 RSI: 0000000040082406 RDI: 0000000000000006
[   56.580050][ T4793] RBP: 00007f4ac2a9f090 R08: 0000000000000000 R09: 0000000000000000
[   56.580063][ T4793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   56.580076][ T4793] R13: 00007f4ac4296038 R14: 00007f4ac4295fa0 R15: 00007ffcf9c85948
[   56.580123][ T4793]  </TASK>
[   56.793309][ T4796] program syz.5.402 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   56.802839][ T4796] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[   56.844393][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   56.893236][ T4806] loop1: detected capacity change from 0 to 128
[   56.901593][ T4804] netlink: 'syz.5.406': attribute type 39 has an invalid length.
[   56.943543][ T4814] 9pnet_fd: Insufficient options for proto=fd
[   57.134317][   T29] kauditd_printk_skb: 627 callbacks suppressed
[   57.134335][   T29] audit: type=1400 audit(1768124250.219:3560): avc:  denied  { read } for  pid=4822 comm="syz.4.411" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   57.306452][ T4829] lo speed is unknown, defaulting to 1000
[   57.313442][ T4829] lo speed is unknown, defaulting to 1000
[   57.489120][ T4829] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.530515][ T4827] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.568310][ T4832] loop5: detected capacity change from 0 to 512
[   57.592013][ T4832] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   57.621116][ T4829] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.662728][ T4832] EXT4-fs (loop5): 1 truncate cleaned up
[   57.693161][ T4827] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.724495][ T4832] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   57.758772][ T4829] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.793074][   T29] audit: type=1400 audit(1768124250.879:3561): avc:  denied  { setopt } for  pid=4826 comm="syz.5.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   57.813424][   T29] audit: type=1400 audit(1768124250.879:3562): avc:  denied  { connect } for  pid=4834 comm="syz.2.413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   57.851899][ T4829] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.865104][ T4421] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.878506][ T4827] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.895217][ T4836] openvswitch: netlink: Missing key (keys=40, expected=200000)
[   57.919837][ T2517] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.933050][ T2517] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.944934][ T2517] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.961861][ T2517] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.024066][ T4838] loop5: detected capacity change from 0 to 512
[   58.038641][ T4838] EXT4-fs (loop5): orphan cleanup on readonly fs
[   58.055396][ T4827] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   58.079988][ T4838] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.414: bad orphan inode 13
[   58.101075][ T4838] ext4_test_bit(bit=12, block=18) = 1
[   58.106684][ T4838] is_bad_inode(inode)=0
[   58.111026][ T4838] NEXT_ORPHAN(inode)=2130706432
[   58.116169][ T4838] max_ino=32
[   58.119534][ T4838] i_nlink=1
[   58.132815][ T4838] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   58.168467][   T29] audit: type=1400 audit(1768124251.259:3563): avc:  denied  { create } for  pid=4848 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   58.216352][ T4847] syz.1.417: attempt to access beyond end of device
[   58.216352][ T4847] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[   58.230290][   T52] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.238407][   T29] audit: type=1400 audit(1768124251.279:3564): avc:  denied  { bind } for  pid=4848 comm="syz.3.418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   58.257811][   T29] audit: type=1400 audit(1768124251.329:3565): avc:  denied  { listen } for  pid=4850 comm="syz.3.419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[   58.279111][ T4847] syz.1.417: attempt to access beyond end of device
[   58.279111][ T4847] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[   58.312909][ T4847] syz.1.417: attempt to access beyond end of device
[   58.312909][ T4847] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[   58.336554][   T29] audit: type=1326 audit(1768124251.399:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f48f749 code=0x7ffc0000
[   58.360329][   T29] audit: type=1326 audit(1768124251.399:3567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f48f749 code=0x7ffc0000
[   58.367388][ T4847] syz.1.417: attempt to access beyond end of device
[   58.367388][ T4847] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[   58.383912][   T29] audit: type=1326 audit(1768124251.399:3568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519f48f749 code=0x7ffc0000
[   58.384020][   T29] audit: type=1326 audit(1768124251.399:3569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4837 comm="syz.5.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f519f48f749 code=0x7ffc0000
[   58.447351][ T4421] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.477329][ T4847] syz.1.417: attempt to access beyond end of device
[   58.477329][ T4847] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[   58.501024][ T4847] syz.1.417: attempt to access beyond end of device
[   58.501024][ T4847] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[   58.528011][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state
[   58.535489][ T4852] bridge0: port 1(bridge_slave_0) entered disabled state
[   58.556546][ T4847] syz.1.417: attempt to access beyond end of device
[   58.556546][ T4847] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[   58.574865][ T4847] syz.1.417: attempt to access beyond end of device
[   58.574865][ T4847] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[   58.590192][ T4847] syz.1.417: attempt to access beyond end of device
[   58.590192][ T4847] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[   58.605863][ T4847] syz.1.417: attempt to access beyond end of device
[   58.605863][ T4847] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[   58.624770][ T4860] netlink: 'syz.5.422': attribute type 39 has an invalid length.
[   58.665885][ T4852] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.685356][ T4852] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.695688][ T4865] __nla_validate_parse: 6 callbacks suppressed
[   58.695706][ T4865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'.
[   58.721384][ T4865] random: crng reseeded on system resumption
[   58.740939][ T4865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   58.750005][ T4865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   58.771153][   T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.789568][   T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.805324][   T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.815979][   T52] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.824517][   T52] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.866877][ T4870] 9pnet_fd: Insufficient options for proto=fd
[   58.877368][   T52] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.897159][   T52] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   58.913218][ T4877] netlink: 76 bytes leftover after parsing attributes in process `syz.3.426'.
[   58.935526][ T4879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.429'.
[   58.968861][ T4883] FAULT_INJECTION: forcing a failure.
[   58.968861][ T4883] name failslab, interval 1, probability 0, space 0, times 0
[   58.981686][ T4883] CPU: 1 UID: 0 PID: 4883 Comm: syz.2.430 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   58.981721][ T4883] Tainted: [W]=WARN
[   58.981729][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   58.981740][ T4883] Call Trace:
[   58.981749][ T4883]  <TASK>
[   58.981757][ T4883]  __dump_stack+0x1d/0x30
[   58.981779][ T4883]  dump_stack_lvl+0x95/0xd0
[   58.981800][ T4883]  dump_stack+0x15/0x1b
[   58.981817][ T4883]  should_fail_ex+0x265/0x280
[   58.981837][ T4883]  should_failslab+0x8c/0xb0
[   58.981864][ T4883]  kmem_cache_alloc_noprof+0x69/0x4b0
[   58.981883][ T4883]  ? vm_area_dup+0x33/0x2c0
[   58.981904][ T4883]  vm_area_dup+0x33/0x2c0
[   58.981923][ T4883]  __split_vma+0xe9/0x660
[   58.981942][ T4883]  ? mas_find+0x5d5/0x700
[   58.981972][ T4883]  vms_gather_munmap_vmas+0x2b2/0x7b0
[   58.982002][ T4883]  do_vmi_align_munmap+0x1ac/0x3d0
[   58.982035][ T4883]  do_vmi_munmap+0x1db/0x220
[   58.982061][ T4883]  do_munmap+0x79/0xb0
[   58.982086][ T4883]  mremap_to+0x192/0x430
[   58.982105][ T4883]  ? check_prep_vma+0x5d6/0x660
[   58.982125][ T4883]  __se_sys_mremap+0x632/0xb30
[   58.982150][ T4883]  __x64_sys_mremap+0x67/0x80
[   58.982168][ T4883]  x64_sys_call+0x2944/0x3000
[   58.982189][ T4883]  do_syscall_64+0xca/0x2b0
[   58.982218][ T4883]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   58.982237][ T4883] RIP: 0033:0x7f4ac403f749
[   58.982250][ T4883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   58.982266][ T4883] RSP: 002b:00007f4ac2a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[   58.982284][ T4883] RAX: ffffffffffffffda RBX: 00007f4ac4295fa0 RCX: 00007f4ac403f749
[   58.982295][ T4883] RDX: 0000000000800000 RSI: 0000000000002000 RDI: 0000200000ceb000
[   58.982306][ T4883] RBP: 00007f4ac2a9f090 R08: 0000200000130000 R09: 0000000000000000
[   58.982317][ T4883] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[   58.982327][ T4883] R13: 00007f4ac4296038 R14: 00007f4ac4295fa0 R15: 00007ffcf9c85948
[   58.982343][ T4883]  </TASK>
[   59.213400][ T4894] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   59.224405][ T4894] EXT4-fs warning (device loop5): read_mmp_block:111: Error -74 while reading MMP block 17
[   59.243172][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.431'.
[   59.264345][ T4895] futex_wake_op: syz.3.432 tries to shift op by -1; fix this program
[   59.270530][ T4902] netlink: 96 bytes leftover after parsing attributes in process `syz.5.433'.
[   59.367737][ T4907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.376691][ T4907] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.590639][ T4912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'.
[   59.702271][ T4910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.436'.
[   59.959693][ T4927] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[   59.968856][ T4927] netlink: 44 bytes leftover after parsing attributes in process `syz.4.443'.
[   59.978656][ T4927] ip6tnl0: Master is either lo or non-ether device
[   60.013554][ T4931] netlink: 96 bytes leftover after parsing attributes in process `syz.4.445'.
[   60.047965][ T4935] netlink: 12 bytes leftover after parsing attributes in process `syz.4.446'.
[   60.072568][ T4937] 9pnet_fd: Insufficient options for proto=fd
[   60.196472][ T4941] set_capacity_and_notify: 2 callbacks suppressed
[   60.196527][ T4941] loop3: detected capacity change from 0 to 512
[   60.213446][ T4941] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.449: inode has both inline data and extents flags
[   60.227075][ T4941] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.449: couldn't read orphan inode 15 (err -117)
[   60.240346][ T4941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   60.330774][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.386938][ T4957] syzkaller0: entered promiscuous mode
[   60.392497][ T4957] syzkaller0: entered allmulticast mode
[   60.545319][ T4966] netlink: 'syz.1.458': attribute type 8 has an invalid length.
[   60.612335][   T63] ==================================================================
[   60.620445][   T63] BUG: KCSAN: data-race in n_tty_receive_char_flow_ctrl / tty_set_termios
[   60.628959][   T63] 
[   60.631289][   T63] write to 0xffff88811ab42d08 of 44 bytes by task 4979 on cpu 1:
[   60.638998][   T63]  tty_set_termios+0xc0/0x8c0
[   60.643687][   T63]  set_termios+0x490/0x4d0
[   60.648102][   T63]  tty_mode_ioctl+0x379/0x5c0
[   60.652868][   T63]  n_tty_ioctl_helper+0x91/0x210
[   60.657812][   T63]  n_tty_ioctl+0x101/0x230
[   60.662227][   T63]  tty_ioctl+0x83f/0xb80
[   60.666487][   T63]  __se_sys_ioctl+0xce/0x140
[   60.671102][   T63]  __x64_sys_ioctl+0x43/0x50
[   60.675715][   T63]  x64_sys_call+0x14b0/0x3000
[   60.680401][   T63]  do_syscall_64+0xca/0x2b0
[   60.684933][   T63]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   60.690821][   T63] 
[   60.693162][   T63] read to 0xffff88811ab42d22 of 1 bytes by task 63 on cpu 0:
[   60.700545][   T63]  n_tty_receive_char_flow_ctrl+0x59/0x1d0
[   60.706366][   T63]  n_tty_lookahead_flow_ctrl+0xed/0x130
[   60.711953][   T63]  tty_port_default_lookahead_buf+0x91/0xc0
[   60.717866][   T63]  flush_to_ldisc+0x288/0x340
[   60.722558][   T63]  process_scheduled_works+0x4ce/0x9d0
[   60.728039][   T63]  worker_thread+0x582/0x770
[   60.732668][   T63]  kthread+0x489/0x510
[   60.736772][   T63]  ret_from_fork+0x149/0x290
[   60.741363][   T63]  ret_from_fork_asm+0x1a/0x30
[   60.746133][   T63] 
[   60.748453][   T63] value changed: 0x13 -> 0x31
[   60.753245][   T63] 
[   60.755582][   T63] Reported by Kernel Concurrency Sanitizer on:
[   60.761740][   T63] CPU: 0 UID: 0 PID: 63 Comm: kworker/u8:5 Tainted: G        W           syzkaller #0 PREEMPT(voluntary) 
[   60.773027][   T63] Tainted: [W]=WARN
[   60.776820][   T63] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   60.786896][   T63] Workqueue: events_unbound flush_to_ldisc
[   60.792725][   T63] ==================================================================