last executing test programs: 31.656310477s ago: executing program 2 (id=360): r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x7d98, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040b804020240000102030109022400010100f0fa0904000902070002"], 0x0) 27.736200973s ago: executing program 2 (id=381): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0), 0x5, 0x4fa, &(0x7f0000000ac0)="$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") fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x80340, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18, 0x1}], 0x68}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000003000/0x3000)=nil) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) utimes(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540)={{0x77359400}, {0x0, 0xea60}}) 26.883658603s ago: executing program 2 (id=385): setresgid(0x0, 0xee00, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) pipe(&(0x7f0000000380)) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) fstatfs(r1, 0x0) 26.232268767s ago: executing program 2 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14010, 0x0) syz_mount_image$fuse(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x902c, &(0x7f0000000380)=ANY=[], 0x31, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a60, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@abort}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f00000000c0)=""/220, 0x0, 0xdc}, 0x20) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x58, 0x54, 0x93d, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x2, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x58}}, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x4000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 26.005820806s ago: executing program 2 (id=393): socket$inet(0x2, 0x80c, 0x3) (async) r0 = socket$inet(0x2, 0x80c, 0x3) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x5, 0xfd, 0x10001}]}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x5, 0xfd, 0x10001}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000900)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="08001efbb07d58", 0x7}, {&(0x7f0000000940)="9b", 0x1}], 0x2, 0x0, 0x0, 0x60000000}, 0x400489c) openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x0) (async) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0}) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) (async) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r6, 0x0) socket(0x1e, 0x805, 0x0) (async) r7 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r7, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r7, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x20040001) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) 25.871641583s ago: executing program 2 (id=394): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x49c7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") 25.857718905s ago: executing program 32 (id=394): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x49c7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") 20.688625712s ago: executing program 3 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0xc, [@var={0xb, 0x0, 0x0, 0xe, 0x5}, @typedef={0x9, 0x0, 0x0, 0x8, 0x4}, @struct={0x7, 0x3, 0x0, 0x4, 0x1, 0xfffffbc4, [{0xf, 0x1, 0x101}, {0xf, 0x4, 0x9}, {0x9, 0x4, 0x9}]}, @restrict={0x5, 0x0, 0x0, 0xb, 0x4}, @struct={0x8, 0x2, 0x0, 0x4, 0x1, 0x0, [{0x5, 0x3, 0xfffffffe}, {0x5, 0x5, 0x4b9}]}]}, {0x0, [0x0, 0x2e, 0x5f, 0x61, 0x0, 0x61, 0x61, 0x30, 0x7f, 0x30]}}, &(0x7f0000000540)=""/182, 0xa0, 0xb6, 0x1, 0xf629}, 0x28) recvmmsg(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000600)=@xdp, 0x80, &(0x7f0000000300)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000280)}], 0x2}, 0x10000}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000480)=""/12, 0xc}, {&(0x7f0000000740)=""/242, 0xf2}, {&(0x7f0000000840)=""/95, 0x5f}, {&(0x7f00000008c0)=""/28, 0x1c}, {&(0x7f0000000900)=""/217, 0xd9}, {&(0x7f0000000a00)=""/48, 0x30}, {&(0x7f0000000a40)=""/48, 0x30}, {&(0x7f0000000a80)=""/56, 0x38}, {&(0x7f0000000ac0)=""/115, 0x73}], 0x9, &(0x7f0000000c00)=""/167, 0xa7}, 0x8}], 0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, 0x0, 0x143042, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000200)="c082b44eb524", 0x6}, {&(0x7f0000000380)="a43b2eaab401ab0000000043dcf46b", 0xf}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x4000000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r7) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x33814000) 20.024286098s ago: executing program 1 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008000400", @ANYRESOCT], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000290000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000290000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}) (async) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000100)={{0x0, 0x2710}, {0x77359400}}) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000380)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2}}]}, 0x1, 0x561, &(0x7f0000000f80)="$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") openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000003080), 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000003480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB='IS\x00\x00\x00\x00\x00\x00\x00\x00g'], 0x34}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8042) setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), &(0x7f00000003c0)=ANY=[], 0x361, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYBLOB="31925dedc80a397056e4863835f804"], 0xfe37, 0x0) 19.9231074s ago: executing program 1 (id=438): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x22020600) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) (async) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) lseek(r3, 0x7, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25022000cb", @ANYRES32=r4, @ANYRES8=r2], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', r4, 0x700, 0x8, 0x100, 0x6, {{0x34, 0x4, 0x0, 0x3a, 0xd0, 0x65, 0x0, 0x4, 0x2f, 0x0, @broadcast, @remote, {[@rr={0x7, 0x7, 0x7a, [@loopback]}, @timestamp_prespec={0x44, 0x24, 0x4a, 0x3, 0x7, [{@multicast2, 0x5}, {@local, 0x10000}, {@multicast2, 0x3}, {@rand_addr=0x64010100, 0xa9c}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x7f, 0x3, 0xd, [{@empty, 0x1}, {@broadcast, 0xed}, {@rand_addr=0x64010101, 0x3}, {@remote, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4}, {@loopback, 0x7}, {@rand_addr=0x64010100, 0x8}]}, @cipso={0x86, 0x17, 0xfffffffffffffffe, [{0x1, 0x11, "f13ef9928005a874f48d304907b243"}]}, @timestamp_addr={0x44, 0x14, 0x65, 0x1, 0x4, [{@multicast2, 0x9}, {@empty, 0x9d}]}, @cipso={0x86, 0x26, 0x2, [{0x0, 0xe, "84f09f6cfad440967faf59bd"}, {0x1, 0x12, "cf305b3605cd9e18f4be2ee7ac200ce9"}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000380)={'ip_vti0\x00', r4, 0x700, 0x8, 0x100, 0x6, {{0x34, 0x4, 0x0, 0x3a, 0xd0, 0x65, 0x0, 0x4, 0x2f, 0x0, @broadcast, @remote, {[@rr={0x7, 0x7, 0x7a, [@loopback]}, @timestamp_prespec={0x44, 0x24, 0x4a, 0x3, 0x7, [{@multicast2, 0x5}, {@local, 0x10000}, {@multicast2, 0x3}, {@rand_addr=0x64010100, 0xa9c}]}, @end, @timestamp_prespec={0x44, 0x3c, 0x7f, 0x3, 0xd, [{@empty, 0x1}, {@broadcast, 0xed}, {@rand_addr=0x64010101, 0x3}, {@remote, 0xfffffffc}, {@dev={0xac, 0x14, 0x14, 0x25}, 0x4}, {@loopback, 0x7}, {@rand_addr=0x64010100, 0x8}]}, @cipso={0x86, 0x17, 0xfffffffffffffffe, [{0x1, 0x11, "f13ef9928005a874f48d304907b243"}]}, @timestamp_addr={0x44, 0x14, 0x65, 0x1, 0x4, [{@multicast2, 0x9}, {@empty, 0x9d}]}, @cipso={0x86, 0x26, 0x2, [{0x0, 0xe, "84f09f6cfad440967faf59bd"}, {0x1, 0x12, "cf305b3605cd9e18f4be2ee7ac200ce9"}]}]}}}}}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r6, @ANYRES64=r5], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$key(0xf, 0x3, 0x2) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="020300090c00000000000000000000000300060000000e0002000000e0000009000000000000000002000100fffffffffffffffd00000000030005006c00000002000000e000000100000000000000000100f5ff4d200000010014"], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0xffffffffffffff06, 0x800, 0x0, 0x4b6ae4f95a5de35b) 19.889135295s ago: executing program 1 (id=439): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r0 = socket(0x10, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd2d}, 0x14}}, 0xc000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="87002dbd700000000000100000000a0004007770616e30000000080001"], 0x28}, 0x1, 0x0, 0x0, 0x4040025}, 0x4024044) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000001680)=[{0x0}, {0x0}, {&(0x7f0000000440)=""/4092, 0xffc}, {0x0}], 0x4, &(0x7f0000000080)=""/74, 0x4a}, 0x1000}], 0x3, 0x10002, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r5 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) syz_usb_control_io$uac1(r5, &(0x7f00000000c0)={0xfffffffffffffd54, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x6, @string={0x6}}}, 0x0) 19.719384217s ago: executing program 3 (id=440): r0 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x7d98, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040b804020240000102030109022400010100f0fa0904000902070002"], 0x0) 17.916844999s ago: executing program 1 (id=447): r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0x4e, 0x0) write$binfmt_script(r2, &(0x7f0000000200)={'#! ', './file1'}, 0xb) recvfrom(r0, 0x0, 0x0, 0x60000022, &(0x7f00000003c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @remote}, 0x0, 0x2, 0x1, 0x2}}, 0x80) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff089a778b5d1c00450000b00068000000889078ac1414bbac1414aafffe4e24004d907801000000040000a500497a1d08fd3d0ee007022798bb6374ed840b4f36f41fc4d035e9ebe414aa958d06000000007898221aa606d083cd59745483938f1e2de8fdadd3823fedd2c01b2aff03050a4ca5d10fd1b6b06f47ea42ef7c9d6a98e3943f6892078bb952854743fe4dd5d2e7c0ce70a4ac7da851525b16af17fe87acbae2ed0f233d01422d01cd53c3abe94331"], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x2210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@nobarrier}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r4, 0x10, 0x88b, 0x8000) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x3ef4, 0x81, r5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setresgid(0x0, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x0, 0x400, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000004100)={0x2020}, 0x2020) 17.868769995s ago: executing program 3 (id=448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x28d00, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvfrom(r3, 0x0, 0x0, 0x2106, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000003c0)) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, 0x0) syz_usb_connect$uac1(0x5, 0x10e, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/270], &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x5, 0x4, 0x8, 0x10, 0xf5}, 0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f2c00040b10010cf000f5059cff0d0a1003020400800193000b10010411000081510b7f07100200730400"], 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x81a}}, {0xde, &(0x7f0000000380)=@string={0xde, 0x3, "90506950658eaf730484bd0afb06b97a72814c792163ce64cd47cb42eaf6194419931f58bba0652815c7930bad7b1e631fdb1888d10302d4b96007ddeeaf5384ce4bd72978324773b91e36854bd6e99f4cbb677c2325f1c688e9c8dfbf470ca3a35114cf19965a5a326e0b6814bd18a456ff205dd10ede1809c063cd5ec86cb8b7afe009eae149fb318e5b9315b8c57aa144a7a353b59f7c8d7ad1c0a049f9070849ad69736459063c70af2da5e07a2c15107a60dc5731ff9b7247c963692989d44b1e795aaf11ee173d97120d59203eba0bd579b953f14456203ea8"}}]}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) 15.161267805s ago: executing program 1 (id=457): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x49c7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) write$cgroup_pid(r3, &(0x7f0000000240), 0xfdef) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0xfdef) timer_create(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigpending(0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 14.666744718s ago: executing program 3 (id=458): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0xb2c]}, 0x8) bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r0}, 0x8) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000080)={0xf9, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x108) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'veth1_macvtap\x00', 0x0}) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r6], 0x70}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x4, 0xffe0}, {0x7}, {0x3}}}, 0x24}}, 0x2000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.976719128s ago: executing program 3 (id=473): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x5, 0x1, 0x0, 0x2, 0xffffffff}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001f40)=@bloom_filter={0x1e, 0xffffffff, 0x1, 0x3, 0x404, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') close(0x3) preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x35c80000, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000001980)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@min_batch_time={'min_batch_time', 0x3d, 0xe528}}]}, 0x1, 0x532, &(0x7f0000001a00)="$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") statx(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x2000, 0x2dd8806920477201, 0x0) write$vga_arbiter(r0, &(0x7f0000000000)=@other={'lock', ' ', 'io+mem'}, 0xc) write$vga_arbiter(r0, &(0x7f00000003c0)=@other={'unlock', ' ', 'mem'}, 0xb) add_key(&(0x7f0000000080)='.dead\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001880), 0x1, 0x153b, &(0x7f0000000340)="$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") chdir(&(0x7f0000000100)='./file0\x00') r5 = socket$inet6(0xa, 0x4, 0x574) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e20, 0x1, @mcast2, 0x9}, 0x1c) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1eb) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) r8 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, &(0x7f0000000000)={0x0, 0x71}, 0x20) 13.009217362s ago: executing program 1 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x62}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2001) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0xf, 0x6, 0x3, 0x3, "058e687c58ce23a349ffffffffffffffff93182af79600"}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x318, 0x11, 0x148, 0x318, 0x0, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x318, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x9, 0x3f, 0x400000, 0x20000000, 0x3, 0x7, 0x80}}}, @common=@unspec=@bpf1={{0x230}, @pinned}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e85b7e000000130212bb00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b70400000800000085000000950000009500200000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x88c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x860, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x8000, 0x7, 0xe7ac, 0x8, 0x1, 0x7, 0x7, 0x4, 0xff, 0x8d3c, 0x8, 0x7, 0x1, 0x1, 0x4, 0x8, 0x9c, 0x6, 0x80, 0x7, 0x3, 0x44, 0x1000, 0x8, 0x80000000, 0x100, 0x8, 0x7, 0x8cc, 0xe3ad, 0x7, 0x7, 0x1b, 0x7f, 0x0, 0x2, 0x16, 0x8372, 0x4, 0x7, 0x9, 0x8, 0x7fffffff, 0x3, 0xc64, 0x4, 0x3, 0x7fff, 0x2f, 0xe, 0x7480, 0x7, 0x1, 0x2, 0x5, 0x1a700000, 0x2, 0x3ff, 0x5, 0x40, 0x401, 0x6, 0x1, 0x2, 0x0, 0xffffffff, 0x5, 0x2, 0x5, 0x5a90, 0x9, 0x400, 0x8, 0x8000, 0x3, 0x80000000, 0x8000, 0x200, 0xfffffff9, 0x7, 0x6, 0x7, 0x9, 0xb0, 0x3f1, 0x2, 0x7, 0x8, 0xfffffff3, 0x8, 0x40, 0xfffffff6, 0x4, 0xfffffffa, 0xffffff0c, 0x1000, 0xb1, 0xfff, 0xffff8001, 0xffffffc0, 0x5, 0x8001, 0x3, 0x340, 0x9, 0x6, 0x7, 0x7, 0x3ff, 0xfffffeff, 0x3, 0x4, 0x9, 0xfffffffd, 0x5, 0x0, 0x1, 0xfffffffe, 0xff, 0x200, 0x4, 0x20000000, 0x8, 0x0, 0x5, 0xffffffff, 0x8001, 0x2, 0x6, 0xc59, 0xffff, 0x8, 0x1, 0x40, 0x2, 0xffffffff, 0xffff8000, 0x1, 0x69b, 0xfffffffa, 0x2, 0x63f4, 0xb534, 0x89a, 0x9, 0x7fff, 0x400, 0x4, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x101, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0xd, 0xfffffffb, 0x40, 0x6, 0x100003ff, 0x4, 0x4c08, 0x1, 0x80, 0x1000, 0x5, 0x3, 0x6, 0x9, 0x3, 0x3, 0x10000, 0x7fff, 0x1d3c, 0x0, 0x2ee3, 0x9a, 0x8, 0x10000, 0xf3a5, 0x0, 0x2, 0x2, 0x2, 0x80000000, 0x4, 0x0, 0xffffffff, 0x100, 0x8, 0x3, 0x6, 0xfffffffd, 0x3, 0xd, 0x5, 0x6, 0x10000, 0x7, 0x1, 0x7, 0x7fff, 0x5, 0x77a6, 0x0, 0x7, 0x400, 0x10000, 0x7f, 0x0, 0x0, 0x6, 0x5, 0x4, 0x80, 0x47, 0xaa, 0xe, 0x8, 0x7ff, 0x800, 0x7, 0x1893, 0x4, 0x1, 0x1, 0x8, 0x80000001, 0x8000, 0x12, 0x80000001, 0x1, 0x8001, 0x9b6f, 0x2, 0x2f, 0x61, 0x6, 0x5, 0x8001, 0x401, 0x4, 0x31268a4e, 0x7fffffff, 0x1, 0x4, 0x2, 0x8, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x60e9, 0x8, 0xa, 0xf3a, 0x0, {0xb, 0x0, 0x1, 0x7, 0x7, 0x1}, {0x6, 0x0, 0xe, 0xfffd, 0x9}, 0x7bffffff, 0x2, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x67, 0x9, 0x8, 0x3ff, 0x10, 0x3, 0x7fff, 0x68, 0x1, 0x2, 0xdb3, 0x5, 0x40, 0x6, 0x400, 0xd, 0x2537, 0x4, 0x4, 0x8, 0x100, 0x5, 0x8, 0x0, 0xffff, 0x7, 0x9, 0x7, 0xb, 0x3, 0x0, 0x400, 0x2, 0x10001, 0x7ff, 0xfffffffe, 0xffff8930, 0x2, 0x5, 0xffffffff, 0x8, 0x7, 0xa4, 0x401, 0x2, 0x100, 0x5, 0x3, 0x10000, 0x692092a1, 0x0, 0x2, 0xa, 0x1, 0x8001, 0x4, 0x7, 0x8001, 0xc, 0x8, 0x10001, 0xa63, 0x3, 0x6, 0x4, 0x80, 0x2, 0x6, 0x7, 0x1, 0x8000, 0x7, 0x9, 0x9, 0xd7dd, 0xe2b, 0xe9ee, 0xfffffffd, 0x3, 0xffff, 0x3, 0x6, 0x3, 0x62, 0xa9, 0x20000, 0x0, 0x80, 0xd1c, 0xfffffff8, 0x10, 0x53e, 0x2b2, 0x4, 0x8e, 0xd, 0x5, 0x1, 0x101, 0x8, 0x3, 0xfffffe00, 0x3ff, 0x0, 0x8, 0x1, 0x10, 0x3, 0xfff, 0x5, 0x6, 0xfffffff7, 0xa, 0x0, 0x10001, 0x81, 0xa, 0x9f6, 0x1ff, 0x0, 0x10, 0x40, 0x8, 0x7, 0x8, 0x800, 0x8, 0x10001, 0x4, 0x7, 0x7, 0x5, 0x80, 0x2, 0x1000, 0x7, 0x800, 0x81, 0x80000000, 0xa, 0xec32, 0x1, 0x0, 0x4f, 0x2, 0x7, 0x200, 0xd4b0, 0x9, 0x0, 0x2, 0x5, 0x9, 0x6, 0x1, 0x5, 0x7ff, 0x9, 0xfffffffb, 0x8, 0x1, 0xc, 0x1, 0x2, 0x1, 0xfffffff9, 0x8, 0x3, 0x4aec5ca0, 0x0, 0x2, 0x5, 0x26e8, 0xcf5b, 0xffff, 0x3, 0x2800, 0xffffffff, 0x9, 0x1, 0xfffffffe, 0x10001, 0x4, 0x67, 0x6, 0x4e, 0x0, 0xf40, 0x3, 0x10001, 0xffffffff, 0x0, 0x2, 0xfffff504, 0x9, 0xfffffff9, 0x7ff, 0x2, 0x80, 0x80000001, 0x7, 0x200, 0x7, 0x5, 0x4, 0x10001, 0x1ff, 0x2, 0x8e9d, 0x191, 0x5, 0x80000000, 0x5, 0x7, 0x401, 0x1, 0x7, 0x8, 0x5, 0x7, 0x1008, 0x9, 0x4, 0x3, 0x5, 0x8001, 0x3, 0x9, 0x4, 0x5, 0x1, 0x2342, 0x6cf, 0x4, 0x3, 0x6, 0x8000009, 0x5, 0x9, 0x3, 0xa7, 0x0, 0x6, 0x9, 0x81, 0x1, 0xfff, 0x1, 0xb, 0x200, 0x4, 0x5, 0x759, 0xd, 0x4]}]}, @TCA_FW_INDEV={0x14, 0x3, 'vlan0\x00'}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 12.976711996s ago: executing program 33 (id=465): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x62}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2001) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0xf, 0x6, 0x3, 0x3, "058e687c58ce23a349ffffffffffffffff93182af79600"}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x318, 0x11, 0x148, 0x318, 0x0, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x318, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x9, 0x3f, 0x400000, 0x20000000, 0x3, 0x7, 0x80}}}, @common=@unspec=@bpf1={{0x230}, @pinned}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000480)='.\x00', 0x48800, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e85b7e000000130212bb00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b70400000800000085000000950000009500200000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x88c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x860, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x8000, 0x7, 0xe7ac, 0x8, 0x1, 0x7, 0x7, 0x4, 0xff, 0x8d3c, 0x8, 0x7, 0x1, 0x1, 0x4, 0x8, 0x9c, 0x6, 0x80, 0x7, 0x3, 0x44, 0x1000, 0x8, 0x80000000, 0x100, 0x8, 0x7, 0x8cc, 0xe3ad, 0x7, 0x7, 0x1b, 0x7f, 0x0, 0x2, 0x16, 0x8372, 0x4, 0x7, 0x9, 0x8, 0x7fffffff, 0x3, 0xc64, 0x4, 0x3, 0x7fff, 0x2f, 0xe, 0x7480, 0x7, 0x1, 0x2, 0x5, 0x1a700000, 0x2, 0x3ff, 0x5, 0x40, 0x401, 0x6, 0x1, 0x2, 0x0, 0xffffffff, 0x5, 0x2, 0x5, 0x5a90, 0x9, 0x400, 0x8, 0x8000, 0x3, 0x80000000, 0x8000, 0x200, 0xfffffff9, 0x7, 0x6, 0x7, 0x9, 0xb0, 0x3f1, 0x2, 0x7, 0x8, 0xfffffff3, 0x8, 0x40, 0xfffffff6, 0x4, 0xfffffffa, 0xffffff0c, 0x1000, 0xb1, 0xfff, 0xffff8001, 0xffffffc0, 0x5, 0x8001, 0x3, 0x340, 0x9, 0x6, 0x7, 0x7, 0x3ff, 0xfffffeff, 0x3, 0x4, 0x9, 0xfffffffd, 0x5, 0x0, 0x1, 0xfffffffe, 0xff, 0x200, 0x4, 0x20000000, 0x8, 0x0, 0x5, 0xffffffff, 0x8001, 0x2, 0x6, 0xc59, 0xffff, 0x8, 0x1, 0x40, 0x2, 0xffffffff, 0xffff8000, 0x1, 0x69b, 0xfffffffa, 0x2, 0x63f4, 0xb534, 0x89a, 0x9, 0x7fff, 0x400, 0x4, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x101, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0xd, 0xfffffffb, 0x40, 0x6, 0x100003ff, 0x4, 0x4c08, 0x1, 0x80, 0x1000, 0x5, 0x3, 0x6, 0x9, 0x3, 0x3, 0x10000, 0x7fff, 0x1d3c, 0x0, 0x2ee3, 0x9a, 0x8, 0x10000, 0xf3a5, 0x0, 0x2, 0x2, 0x2, 0x80000000, 0x4, 0x0, 0xffffffff, 0x100, 0x8, 0x3, 0x6, 0xfffffffd, 0x3, 0xd, 0x5, 0x6, 0x10000, 0x7, 0x1, 0x7, 0x7fff, 0x5, 0x77a6, 0x0, 0x7, 0x400, 0x10000, 0x7f, 0x0, 0x0, 0x6, 0x5, 0x4, 0x80, 0x47, 0xaa, 0xe, 0x8, 0x7ff, 0x800, 0x7, 0x1893, 0x4, 0x1, 0x1, 0x8, 0x80000001, 0x8000, 0x12, 0x80000001, 0x1, 0x8001, 0x9b6f, 0x2, 0x2f, 0x61, 0x6, 0x5, 0x8001, 0x401, 0x4, 0x31268a4e, 0x7fffffff, 0x1, 0x4, 0x2, 0x8, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x60e9, 0x8, 0xa, 0xf3a, 0x0, {0xb, 0x0, 0x1, 0x7, 0x7, 0x1}, {0x6, 0x0, 0xe, 0xfffd, 0x9}, 0x7bffffff, 0x2, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x67, 0x9, 0x8, 0x3ff, 0x10, 0x3, 0x7fff, 0x68, 0x1, 0x2, 0xdb3, 0x5, 0x40, 0x6, 0x400, 0xd, 0x2537, 0x4, 0x4, 0x8, 0x100, 0x5, 0x8, 0x0, 0xffff, 0x7, 0x9, 0x7, 0xb, 0x3, 0x0, 0x400, 0x2, 0x10001, 0x7ff, 0xfffffffe, 0xffff8930, 0x2, 0x5, 0xffffffff, 0x8, 0x7, 0xa4, 0x401, 0x2, 0x100, 0x5, 0x3, 0x10000, 0x692092a1, 0x0, 0x2, 0xa, 0x1, 0x8001, 0x4, 0x7, 0x8001, 0xc, 0x8, 0x10001, 0xa63, 0x3, 0x6, 0x4, 0x80, 0x2, 0x6, 0x7, 0x1, 0x8000, 0x7, 0x9, 0x9, 0xd7dd, 0xe2b, 0xe9ee, 0xfffffffd, 0x3, 0xffff, 0x3, 0x6, 0x3, 0x62, 0xa9, 0x20000, 0x0, 0x80, 0xd1c, 0xfffffff8, 0x10, 0x53e, 0x2b2, 0x4, 0x8e, 0xd, 0x5, 0x1, 0x101, 0x8, 0x3, 0xfffffe00, 0x3ff, 0x0, 0x8, 0x1, 0x10, 0x3, 0xfff, 0x5, 0x6, 0xfffffff7, 0xa, 0x0, 0x10001, 0x81, 0xa, 0x9f6, 0x1ff, 0x0, 0x10, 0x40, 0x8, 0x7, 0x8, 0x800, 0x8, 0x10001, 0x4, 0x7, 0x7, 0x5, 0x80, 0x2, 0x1000, 0x7, 0x800, 0x81, 0x80000000, 0xa, 0xec32, 0x1, 0x0, 0x4f, 0x2, 0x7, 0x200, 0xd4b0, 0x9, 0x0, 0x2, 0x5, 0x9, 0x6, 0x1, 0x5, 0x7ff, 0x9, 0xfffffffb, 0x8, 0x1, 0xc, 0x1, 0x2, 0x1, 0xfffffff9, 0x8, 0x3, 0x4aec5ca0, 0x0, 0x2, 0x5, 0x26e8, 0xcf5b, 0xffff, 0x3, 0x2800, 0xffffffff, 0x9, 0x1, 0xfffffffe, 0x10001, 0x4, 0x67, 0x6, 0x4e, 0x0, 0xf40, 0x3, 0x10001, 0xffffffff, 0x0, 0x2, 0xfffff504, 0x9, 0xfffffff9, 0x7ff, 0x2, 0x80, 0x80000001, 0x7, 0x200, 0x7, 0x5, 0x4, 0x10001, 0x1ff, 0x2, 0x8e9d, 0x191, 0x5, 0x80000000, 0x5, 0x7, 0x401, 0x1, 0x7, 0x8, 0x5, 0x7, 0x1008, 0x9, 0x4, 0x3, 0x5, 0x8001, 0x3, 0x9, 0x4, 0x5, 0x1, 0x2342, 0x6cf, 0x4, 0x3, 0x6, 0x8000009, 0x5, 0x9, 0x3, 0xa7, 0x0, 0x6, 0x9, 0x81, 0x1, 0xfff, 0x1, 0xb, 0x200, 0x4, 0x5, 0x759, 0xd, 0x4]}]}, @TCA_FW_INDEV={0x14, 0x3, 'vlan0\x00'}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 12.385971693s ago: executing program 3 (id=469): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x49c7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0xfdef) timer_create(0x0, 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x20000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$eJzs3M1rXFUUAPDzXj7bRicVEeumEZEWxGlaSbFFsJWKGxeCboWGdFJCph8kkZo0i4n+A6KuBTeCWpQu7LobBbdutG4tLoQisVEQ0cibjyQ2M0naTvJq8vvBzbt3zpvcc/KYeffCTALYsQayH2nEvog4nUQU6o+nEdFd7fVGVGrnLczPjvwxPzuSxOLi678mkUTE7fnZkcbvSurHPfVBb0R891ISj7y7et7J6Znx4XK5NFEfH5o6d/HQ5PTMs2Pnhs+WzpbOHz76/NCRoaODx4baVuufP5249vuTr/xc+euzv6/89sEnSZyIvnpsZR3tMhADS3+TlTojYrjdk+Wko17PyjqTznWelG5yUgAAtJSuWMM9FoXoiOXFWyG+/j7X5AAAAIC2WOyIWAQAAAC2ucT+HwAAALa5xucAbs/PjjRavp9I2Fq3TkZEf63+hXqrRTqjUj32RldE7L6dxMqvtSa1p923gYi4+eOxL7MWm/Q95LVU5iLi8WbXP6nW31/9Fvfq+tOIGGzD/AN3jP9P9Z9ow/x51w/AznT9ZO1Gtvr+ly6tf6LJ/a+zyb3rXuR9/2us/xZWrf+W6+9osf57bYNzXP70o0utYln9L1x7+YtGy+bPjvdV1F24NRfxRGez+pOl+pMW9Z/e4ByFfy6VWsXyrn/x44gD0bz+hmTt/090aHSsXBqs/Ww6x9y3Q5+3mj/v+rPrv7tF/etd/4sbnOPNU6eutoqtX3/6S3fyRrXXXX/k7eGpqYnDEd3Jq6sfP7J2Lo1zGr8jq//gU2u//pvVn70nVOp/h2wvMFc/ZuN37pjzxSuXv1qr/mzvl+f1P3OP1/+9Dc7x9DfvH2wVW7n/zVo2/82kthcGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIY0IvoiSYtL/TQtFiP2RMSjsTstX5icemb0wlvnz2SxiP7oSkfHyqXBiCjUxkk2PlztL4+P3DF+LiL2RsSHhV3VcXHkQvlM3sUDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwZE9E9EWSFiMijYiFQpoWi3lnBQAAALRdf94JAAAAAJvO/h8AAAC2P/t/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANtne/ddvJBFROb6r2jLd9VhXrpkBmy3NOwEgNx15JwDkpjPvBIDc3OUe33IBtqFknXhvy0hP23MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MF1YN/1G0lEVI7vqrZMdz3W1fQZ+7cwO2AzpXknAOSmY61g59blAWw9L3HYuZrv8YGdJFkn3rt8TuW/kZ5NywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB09ftSVpMSLSaj9Ni8WIhyKiP7qS0bFyaTAiHo6IHwpdPdm4J++kAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLvJ6Znx4XK5NKGjo5NvJ3kw0qh18n5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD5PTM+PD5XJpYjLvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC8TU7PjA+Xy6WJDXSu3s3JKzp51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DQAA//+LYA3r") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigpending(0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 12.385759583s ago: executing program 34 (id=469): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x49c7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0xfdef) timer_create(0x0, 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x20000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigpending(0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 6.021076833s ago: executing program 6 (id=500): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) write$cgroup_pid(r3, &(0x7f0000000240), 0xfdef) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0) 5.690588186s ago: executing program 0 (id=512): socket$inet6(0xa, 0x2, 0xfffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) ioperm(0x7, 0x81, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x11, r6, 0x1, 0xf}, 0x14) write(r5, &(0x7f0000000200)="cabafcb4be94341b4847674e70d6", 0xe) ftruncate(r4, 0x8800000) r7 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendfile(r8, r4, 0x0, 0x578410eb) sendfile(r8, r4, 0x0, 0x100000000) 5.155428625s ago: executing program 6 (id=503): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x26000100) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3220089, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x220000c, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, 0x0) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000740)='./bus\x00', 0x326420, &(0x7f0000000780)=ANY=[], 0x1, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) lstat(&(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000140)) 5.139975467s ago: executing program 6 (id=504): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80340, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448dd, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000280)=[@enable_nested={0x12c, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18}, @nested_vmresume={0x130, 0x18, 0x1}], 0x68}) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x3000, 0x7, &(0x7f0000003000/0x3000)=nil) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) utimes(&(0x7f0000000500)='./file1\x00', &(0x7f0000000540)={{0x77359400}, {0x0, 0xea60}}) 4.831781397s ago: executing program 0 (id=507): sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fsopen(&(0x7f0000000040)='exfat\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r4, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x9}, 0x8) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x2710, 0x1, 0x41000, 0x1000, &(0x7f0000fd7000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 4.736814369s ago: executing program 5 (id=508): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6000, 0x31cf6ff02c67efa3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) r5 = inotify_init() r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x34d}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(r5, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1407, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=user,cache=none,access=user,mask=^MAY_WRITE,audit,smackfsroot=GPL\x00,euid=', @ANYRESDEC=r2, @ANYBLOB=',context=system_u,euid<', @ANYRESDEC=r3, @ANYBLOB="40d66bcbe71681e0"]) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000500), 0xf7d, r1}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0xa}, @empty}}}], 0x30}}], 0x1, 0x0) 3.7987938s ago: executing program 4 (id=510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x62}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x2001) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0xf, 0x6, 0x3, 0x3, "058e687c58ce23a349ffffffffffffffff93182af79600"}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0x318, 0x11, 0x148, 0x318, 0x0, 0x3b8, 0x2a8, 0x2a8, 0x3b8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x318, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x9, 0x3f, 0x400000, 0x20000000, 0x3, 0x7, 0x80}}}, @common=@unspec=@bpf1={{0x230}, @pinned}]}, @unspec=@TRACE={0x20}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e85b7e000000130212bb00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000000000ffffffffb7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b70400000800000085000000950000009500200000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x88c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff3}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x860, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x9, 0x8000, 0x7, 0xe7ac, 0x8, 0x1, 0x7, 0x7, 0x4, 0xff, 0x8d3c, 0x8, 0x7, 0x1, 0x1, 0x4, 0x8, 0x9c, 0x6, 0x80, 0x7, 0x3, 0x44, 0x1000, 0x8, 0x80000000, 0x100, 0x8, 0x7, 0x8cc, 0xe3ad, 0x7, 0x7, 0x1b, 0x7f, 0x0, 0x2, 0x16, 0x8372, 0x4, 0x7, 0x9, 0x8, 0x7fffffff, 0x3, 0xc64, 0x4, 0x3, 0x7fff, 0x2f, 0xe, 0x7480, 0x7, 0x1, 0x2, 0x5, 0x1a700000, 0x2, 0x3ff, 0x5, 0x40, 0x401, 0x6, 0x1, 0x2, 0x0, 0xffffffff, 0x5, 0x2, 0x5, 0x5a90, 0x9, 0x400, 0x8, 0x8000, 0x3, 0x80000000, 0x8000, 0x200, 0xfffffff9, 0x7, 0x6, 0x7, 0x9, 0xb0, 0x3f1, 0x2, 0x7, 0x8, 0xfffffff3, 0x8, 0x40, 0xfffffff6, 0x4, 0xfffffffa, 0xffffff0c, 0x1000, 0xb1, 0xfff, 0xffff8001, 0xffffffc0, 0x5, 0x8001, 0x3, 0x340, 0x9, 0x6, 0x7, 0x7, 0x3ff, 0xfffffeff, 0x3, 0x4, 0x9, 0xfffffffd, 0x5, 0x0, 0x1, 0xfffffffe, 0xff, 0x200, 0x4, 0x20000000, 0x8, 0x0, 0x5, 0xffffffff, 0x8001, 0x2, 0x6, 0xc59, 0xffff, 0x8, 0x1, 0x40, 0x2, 0xffffffff, 0xffff8000, 0x1, 0x69b, 0xfffffffa, 0x2, 0x63f4, 0xb534, 0x89a, 0x9, 0x7fff, 0x400, 0x4, 0x9, 0x0, 0xfffffff8, 0x0, 0x0, 0x101, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0xd, 0xfffffffb, 0x40, 0x6, 0x100003ff, 0x4, 0x4c08, 0x1, 0x80, 0x1000, 0x5, 0x3, 0x6, 0x9, 0x3, 0x3, 0x10000, 0x7fff, 0x1d3c, 0x0, 0x2ee3, 0x9a, 0x8, 0x10000, 0xf3a5, 0x0, 0x2, 0x2, 0x2, 0x80000000, 0x4, 0x0, 0xffffffff, 0x100, 0x8, 0x3, 0x6, 0xfffffffd, 0x3, 0xd, 0x5, 0x6, 0x10000, 0x7, 0x1, 0x7, 0x7fff, 0x5, 0x77a6, 0x0, 0x7, 0x400, 0x10000, 0x7f, 0x0, 0x0, 0x6, 0x5, 0x4, 0x80, 0x47, 0xaa, 0xe, 0x8, 0x7ff, 0x800, 0x7, 0x1893, 0x4, 0x1, 0x1, 0x8, 0x80000001, 0x8000, 0x12, 0x80000001, 0x1, 0x8001, 0x9b6f, 0x2, 0x2f, 0x61, 0x6, 0x5, 0x8001, 0x401, 0x4, 0x31268a4e, 0x7fffffff, 0x1, 0x4, 0x2, 0x8, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x60e9, 0x8, 0xa, 0xf3a, 0x0, {0xb, 0x0, 0x1, 0x7, 0x7, 0x1}, {0x6, 0x0, 0xe, 0xfffd, 0x9}, 0x7bffffff, 0x2, 0x7}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8000, 0x67, 0x9, 0x8, 0x3ff, 0x10, 0x3, 0x7fff, 0x68, 0x1, 0x2, 0xdb3, 0x5, 0x40, 0x6, 0x400, 0xd, 0x2537, 0x4, 0x4, 0x8, 0x100, 0x5, 0x8, 0x0, 0xffff, 0x7, 0x9, 0x7, 0xb, 0x3, 0x0, 0x400, 0x2, 0x10001, 0x7ff, 0xfffffffe, 0xffff8930, 0x2, 0x5, 0xffffffff, 0x8, 0x7, 0xa4, 0x401, 0x2, 0x100, 0x5, 0x3, 0x10000, 0x692092a1, 0x0, 0x2, 0xa, 0x1, 0x8001, 0x4, 0x7, 0x8001, 0xc, 0x8, 0x10001, 0xa63, 0x3, 0x6, 0x4, 0x80, 0x2, 0x6, 0x7, 0x1, 0x8000, 0x7, 0x9, 0x9, 0xd7dd, 0xe2b, 0xe9ee, 0xfffffffd, 0x3, 0xffff, 0x3, 0x6, 0x3, 0x62, 0xa9, 0x20000, 0x0, 0x80, 0xd1c, 0xfffffff8, 0x10, 0x53e, 0x2b2, 0x4, 0x8e, 0xd, 0x5, 0x1, 0x101, 0x8, 0x3, 0xfffffe00, 0x3ff, 0x0, 0x8, 0x1, 0x10, 0x3, 0xfff, 0x5, 0x6, 0xfffffff7, 0xa, 0x0, 0x10001, 0x81, 0xa, 0x9f6, 0x1ff, 0x0, 0x10, 0x40, 0x8, 0x7, 0x8, 0x800, 0x8, 0x10001, 0x4, 0x7, 0x7, 0x5, 0x80, 0x2, 0x1000, 0x7, 0x800, 0x81, 0x80000000, 0xa, 0xec32, 0x1, 0x0, 0x4f, 0x2, 0x7, 0x200, 0xd4b0, 0x9, 0x0, 0x2, 0x5, 0x9, 0x6, 0x1, 0x5, 0x7ff, 0x9, 0xfffffffb, 0x8, 0x1, 0xc, 0x1, 0x2, 0x1, 0xfffffff9, 0x8, 0x3, 0x4aec5ca0, 0x0, 0x2, 0x5, 0x26e8, 0xcf5b, 0xffff, 0x3, 0x2800, 0xffffffff, 0x9, 0x1, 0xfffffffe, 0x10001, 0x4, 0x67, 0x6, 0x4e, 0x0, 0xf40, 0x3, 0x10001, 0xffffffff, 0x0, 0x2, 0xfffff504, 0x9, 0xfffffff9, 0x7ff, 0x2, 0x80, 0x80000001, 0x7, 0x200, 0x7, 0x5, 0x4, 0x10001, 0x1ff, 0x2, 0x8e9d, 0x191, 0x5, 0x80000000, 0x5, 0x7, 0x401, 0x1, 0x7, 0x8, 0x5, 0x7, 0x1008, 0x9, 0x4, 0x3, 0x5, 0x8001, 0x3, 0x9, 0x4, 0x5, 0x1, 0x2342, 0x6cf, 0x4, 0x3, 0x6, 0x8000009, 0x5, 0x9, 0x3, 0xa7, 0x0, 0x6, 0x9, 0x81, 0x1, 0xfff, 0x1, 0xb, 0x200, 0x4, 0x5, 0x759, 0xd, 0x4]}]}, @TCA_FW_INDEV={0x14, 0x3, 'vlan0\x00'}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 3.705108072s ago: executing program 7 (id=511): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x14002, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000a3c0)={0x2020, 0x0, 0x0}, 0x2020) socket(0x10, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) 3.303916584s ago: executing program 0 (id=513): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000280)=0xdfffffff, 0x4) r1 = mmap$KVM_VCPU(&(0x7f0000ffd000/0x3000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x3}) r3 = fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) readv(r3, &(0x7f0000000100)=[{&(0x7f0000000280)=""/144, 0x28}], 0x300) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="1c681411f7a496c0dacc6a3c24c65b016f64b4c00b5f7c691cb20400000000001a00002000000e00002015050000000000551200", 0x0, 0x48) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = syz_open_dev$loop(&(0x7f0000000440), 0x7, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1d, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x3fffffffffffff]}}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482, 0x0) open(0x0, 0x800, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = fcntl$getown(0xffffffffffffffff, 0x9) tkill(r8, 0xa) tkill(r8, 0x2f) r9 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_int(r9, 0x0, 0x16, &(0x7f0000000040)=0x6, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) sendmsg$NL80211_CMD_GET_REG(r10, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r11, 0x311, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x37}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44881}, 0x4800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r10) ioctl$RTC_UIE_ON(r4, 0x7003) 3.296617895s ago: executing program 0 (id=514): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x49c7}, 0x94) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) 3.173284011s ago: executing program 5 (id=515): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) write$cgroup_pid(r3, &(0x7f0000000240), 0xfdef) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, 0x0, 0x0) 2.136303725s ago: executing program 7 (id=516): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r0, 0x24, 0x0, 0xd7, &(0x7f00000001c0)=[0x0], 0x3ffffe05, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.135716144s ago: executing program 4 (id=526): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2, 0x2, 0x1) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x4, @empty, 0x7}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000040)={{0xc8, 0xb4d3, 0x7, 0x800}, 'syz0\x00', 0x27}) 2.043331996s ago: executing program 7 (id=517): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x49c7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0xfdef) timer_create(0x0, 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x20000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigpending(0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 2.043146996s ago: executing program 4 (id=518): socket$inet6(0xa, 0x2, 0xfffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000feb000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab860c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) ioperm(0x7, 0x81, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x11, r6, 0x1, 0xf}, 0x14) write(r5, &(0x7f0000000200)="cabafcb4be94341b4847674e70d6", 0xe) ftruncate(r4, 0x8800000) r7 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendfile(r8, r4, 0x0, 0x578410eb) sendfile(r8, r4, 0x0, 0x100000000) 1.921398972s ago: executing program 6 (id=519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) readv(0xffffffffffffffff, &(0x7f0000002c00)=[{&(0x7f00000001c0)=""/8, 0x8}], 0x1) (async) readv(0xffffffffffffffff, &(0x7f0000002c00)=[{&(0x7f00000001c0)=""/8, 0x8}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES8], 0x0, 0xffffffff}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES16=r0, @ANYRES8], 0x0, 0xffffffff}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0x0, 0x300, 0x448, 0x0, 0x0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) 1.896873026s ago: executing program 6 (id=520): r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r0, 0x24, 0x0, 0xd7, &(0x7f00000001c0)=[0x0], 0x3ffffe05, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.692186912s ago: executing program 0 (id=521): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x49c7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) 1.441579804s ago: executing program 6 (id=522): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001780)}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd5cd7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xfdef) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0xfdef) timer_create(0x0, 0x0, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x20000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, &(0x7f0000000300)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@noauto_da_alloc}, {@dioread_nolock}, {@test_dummy_encryption}, {@block_validity}, {@nodelalloc}, {@minixdf}, {@auto_da_alloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) rt_sigpending(0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 997.776731ms ago: executing program 4 (id=523): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000001cc0)=[{{&(0x7f00000000c0)={0xa, 0x0, 0xffff, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000080)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000280)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}], 0x18}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4c0c0) 817.621755ms ago: executing program 4 (id=524): sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaab6aaaaaa0180c20000000800450000828b473251dcb6a1761c7403532b24000000000011907800"/50], 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaab6aaaaaa0180c20000000800450000828b473251dcb6a1761c7403532b24000000000011907800"/50], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1a"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{}, {}, 0x0, 0x0, 0x200}}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x0, 0x2}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0x0, 0x2}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 815.170165ms ago: executing program 7 (id=525): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e6ef1f00060000007f00000001"], 0x48) statx(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x6000, 0x31cf6ff02c67efa3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)=0x0) r4 = socket$netlink(0x10, 0x3, 0xf) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) r5 = inotify_init() r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x34d}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(r5, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x1407, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB=',access=user,cache=none,access=user,mask=^MAY_WRITE,audit,smackfsroot=GPL\x00,euid=', @ANYRESDEC=r2, @ANYBLOB=',context=system_u,euid<', @ANYRESDEC=r3, @ANYBLOB="40d66bcbe71681e0"]) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000500), 0xf7d, r1}, 0x38) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0xa}, @empty}}}], 0x30}}], 0x1, 0x0) 814.903605ms ago: executing program 0 (id=527): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000100), 0x26, 0x756, &(0x7f0000000b80)="$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") getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000540)=0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0xfe, 0x7ffc9ffe}]}) setfsuid(0xffffffffffffffff) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unlink(&(0x7f0000000100)='./file0\x00') setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) sendto$unix(r0, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x2, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r4, 0x8008f511, &(0x7f00000000c0)) 743.487484ms ago: executing program 5 (id=528): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r0, 0x24, 0x0, 0xd7, &(0x7f00000001c0)=[0x0], 0x3ffffe05, 0x0, 0x0, 0x0, 0x0}, 0x40) 742.797724ms ago: executing program 5 (id=529): r0 = socket$inet(0x2, 0x6, 0xfffffffb) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000010000)={'\x00', 0x6132}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') write$cgroup_subtree(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="7c1292442b01"], 0xfe3a) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00'}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0xc, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000010040)=ANY=[@ANYBLOB="b40000000000000061112c00009148400000001e000000000000009500000c7c38ce742e702d3d5399af00000000d89d9d1e69a649c7b3889e68c2691f9033ad10629ef9138175dfaac66044e27720ea1357531fcc6d5bbefa435ff47ec47ae96bc00ef924b995b94c766cd4c703bbbfd208810c47326ec3935cbfeb089575260df32a0a80fcd9d0514cada6f7a05ed38643281cf023b3cf52de4b56ea532ddb46b006d166f209c1390f8e1397e55585c490aa60c159e774077ae0eb7d8c2aa23fe11ffabd092c14394a660e5b91ca346bd98b0514a8c94383aab058594fbc5f58"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) listxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/255, 0xff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r3, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x7ffff000}], 0x2, 0x0, 0x0, 0x0) write$P9_RFLUSH(r3, &(0x7f0000000140)={0x7, 0x6d, 0x2}, 0x7) 727.403776ms ago: executing program 4 (id=530): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', './file0/file0', [], 0xa, "bf4e1137a2dad54ca47a1eabfb124c3f6f852c0b3bc1597161777c3e33fbc13f6008a071fec6b19ed3f87f16b4fd27fff4cb32c4b9d7239faeac5d68adf4e519913fc5f6fd1debc52567d3e13f750a03542e12541963c5c571f3c2c2c67406"}, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000006840)={0x44, &(0x7f0000006580)={0x20, 0x13, 0x4, "195c044c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fadvise64(r0, 0x2, 0x0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x418, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x1, 0x41, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="40238937c94f60e48b04000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@RTM_GETNSID={0x3c, 0x5a, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x2}, @NETNSA_NSID={0x8, 0x1, 0xfffffffd}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r7 = syz_pidfd_open(r6, 0x0) syz_usb_disconnect(0xffffffffffffffff) pidfd_send_signal(r7, 0x2, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000840)=ANY=[@ANYBLOB="8500000000000000950000000059b6bdf351fb4ea6fc4a47e688a97aabb10a622906ebc1281e695bb5231b73ba4595b6d39b888ad2323856f934063f132d35bac9c19f9dc3"], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@ipv6_delrule={0x24, 0x21, 0x121, 0x0, 0x1, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x1}]}, 0x24}}, 0x0) 433.413834ms ago: executing program 5 (id=531): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000280)={'#! ', '', [], 0xa, "e722cabeee947b3f08a517531034564268b32e3d029f5e6db07978598a1a0c538a830deeb5681d5004e287"}, 0x2f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12142, 0x0) ftruncate(r2, 0xf4ff) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) (async) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) r6 = socket(0x1e, 0x4, 0x0) connect$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r6, r5, 0x0, 0x8010002b) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r7, 0x25, 0x4, @void}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000000002900773b0000080003001a1a6f6ea8178a333666465212f5bf5c94e01ebb56daa9e2289db301349a728078d39d3595d00dc941c85125d62d59bb3a7dfcf628dcd4ab8c9d172f99e4b0ab57343a2239abcdbd35b7b2", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x8dc621e595fb41fd, &(0x7f0000000540)={@empty}, &(0x7f0000000200)=0x14) 380.568321ms ago: executing program 7 (id=532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) io_setup(0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x8, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r7, 0x0, 0x4) write$binfmt_misc(r7, 0x0, 0xfffffecc) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="ad", 0x1}], 0x1, 0xb) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) (async) io_setup(0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e00000004"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x10, 0x4, 0x8, 0x5}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) pipe(&(0x7f00000000c0)) (async) write$binfmt_misc(r7, 0x0, 0x4) (async) write$binfmt_misc(r7, 0x0, 0xfffffecc) (async) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="ad", 0x1}], 0x1, 0xb) (async) ioctl$KVM_HYPERV_EVENTFD(r5, 0x4018aebd, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) (async) 227.384191ms ago: executing program 7 (id=533): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000001000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000380)={0x14, &(0x7f00000002c0)={0x0, 0x75cc77ded0487908, 0x88, {0x88, 0x22, "7936c22fdd780eb4b0eaafa3ade563799c80bba76f03e5a8c590b209da7f25deee71df581302d615430bae7aab6ad7e942702a3ea873ee740205d351b4bb9d7e8bd4fb8a7fee9c2cce38bfee87f95fa9063dcc46e88fc9a0ec06b9fff53ef9a014495541bd815dc2f06abc502579c514d4cf76c64f1c5965b9531f0bc6b9461651e0e3f060b0"}}, 0xfffffffffffffffe}, &(0x7f00000005c0)={0x1c, &(0x7f00000003c0)={0x40, 0xe, 0xf1, "24291788c6465f8cac7a4f916de8d97ad48569c6eb1f1324e4e1ce9966d6faad3db28b7ead108eaeaff7ea32b169670257457631ca3222cf382c10e6b3364e484520e2711d8e2f03aa837a4ada90c0451011abea1cc2ffeca1eeed9a3e037a6e2e6a15179c8162fae55341b3c6b7f0af17633e83bc42e37195e2650a38c940775bd205f6d13f64cc7bd456606c8e08d7f4152e99ecce9d87f7cc8d820affc09cb98aa1b737984c8d48e149ac715a3bf62083934282f64ccc57312e0fc7883f537af28eb549cf1b006666248f4aae9db26d7dd61ddb451a9a5eacaa045be0a7a7038eeb6d01472440b048c1b6473cda9a95"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x8}}) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000280)=0x21, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x9, 0xa, {{0x5, 0x4, 0x2, 0x27, 0x14, 0x68, 0x0, 0x69, 0x2f, 0x0, @remote, @private=0xa010102}}}}) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010326bd70eafadbdf0740000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40006) memfd_create(&(0x7f0000000600)=']]+%\x00', 0xc) (async) memfd_create(&(0x7f0000000600)=']]+%\x00', 0xc) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000f7000010c00725150000000000010902240001000000000904000001030002000921feff050122f4040905810300c9678a16a80022c9adf5bc1272dee926c15288ba0369b12f067915827e469888a805ed1351ef246e0b8bce7d5caacfa9038cc7ea587f4eccb7"], 0x0) 0s ago: executing program 5 (id=534): socket$inet6(0xa, 0x2, 0xfffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) capget(&(0x7f0000feaff9)={0x19980330}, &(0x7f00000001c0)={0x0, 0x1}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab860c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) ioperm(0x7, 0x81, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f00000001c0)={0x11, 0x11, r6, 0x1, 0xf}, 0x14) write(r5, &(0x7f0000000200)="cabafcb4be94341b4847674e70d6", 0xe) ftruncate(r4, 0x8800000) r7 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendfile(r8, r4, 0x0, 0x578410eb) sendfile(r8, r4, 0x0, 0x100000000) kernel console output (not intermixed with test programs): 641302][ T962] xt_hashlimit: size too large, truncated to 1048576 [ 83.648036][ T962] xt_hashlimit: max too large, truncated to 1048576 [ 84.169428][ T964] xt_hashlimit: size too large, truncated to 1048576 [ 84.176257][ T964] xt_hashlimit: max too large, truncated to 1048576 [ 84.716708][ T970] loop3: detected capacity change from 0 to 512 [ 84.744875][ T970] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.754502][ T970] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.788048][ T284] EXT4-fs (loop3): unmounting filesystem. [ 84.806831][ T981] loop4: detected capacity change from 0 to 512 [ 84.816961][ T981] EXT4-fs (loop4): Test dummy encryption mode enabled [ 84.824567][ T981] EXT4-fs (loop4): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 84.834508][ T981] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.843753][ T981] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (fffc1829) [ 84.853922][ T981] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 84.988383][ T982] loop2: detected capacity change from 0 to 4096 [ 85.042219][ T982] EXT4-fs (loop2): Test dummy encryption mode enabled [ 85.134974][ T982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 85.386366][ T987] loop3: detected capacity change from 0 to 512 [ 85.643949][ T987] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 85.806921][ T286] EXT4-fs (loop2): unmounting filesystem. [ 86.833949][ T994] loop1: detected capacity change from 0 to 4096 [ 86.844974][ T994] EXT4-fs (loop1): Test dummy encryption mode enabled [ 86.955089][ T994] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 87.069838][ T987] EXT4-fs error (device loop3): ext4_init_orphan_info:619: comm syz.3.168: orphan file block 0: bad magic [ 87.190434][ T28] kauditd_printk_skb: 102 callbacks suppressed [ 87.190448][ T28] audit: type=1326 audit(1768787722.025:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=973 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 87.249834][ T28] audit: type=1326 audit(1768787722.065:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=973 comm="syz.0.167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 87.250243][ T987] EXT4-fs (loop3): mount failed [ 87.443655][ T1002] xt_hashlimit: size too large, truncated to 1048576 [ 87.450391][ T1002] xt_hashlimit: max too large, truncated to 1048576 [ 87.714662][ T283] EXT4-fs (loop1): unmounting filesystem. [ 90.194267][ T28] audit: type=1326 audit(1768787723.265:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 90.225474][ T28] audit: type=1326 audit(1768787723.265:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 90.249255][ T28] audit: type=1326 audit(1768787723.265:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 90.272969][ T28] audit: type=1326 audit(1768787723.265:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 90.296291][ T28] audit: type=1326 audit(1768787723.265:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 90.319561][ T28] audit: type=1326 audit(1768787723.265:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 90.363339][ T28] audit: type=1326 audit(1768787723.265:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 90.389338][ T28] audit: type=1326 audit(1768787723.265:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1003 comm="syz.0.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 90.422484][ T1021] loop4: detected capacity change from 0 to 512 [ 90.436571][ T1023] loop3: detected capacity change from 0 to 1024 [ 90.506068][ T1023] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 90.515768][ T1021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 90.526598][ T1023] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.537274][ T1021] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.619733][ T1034] xt_hashlimit: size too large, truncated to 1048576 [ 90.626476][ T1034] xt_hashlimit: max too large, truncated to 1048576 [ 90.849435][ T1023] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm syz.3.180: lblock 0 mapped to illegal pblock 0 (length 5) [ 90.879747][ T1023] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 90.892066][ T1023] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.892066][ T1023] [ 90.924147][ T1023] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #15: comm syz.3.180: lblock 0 mapped to illegal pblock 0 (length 1) [ 90.937813][ T1023] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.180: Freeing blocks not in datazone - block = 1, count = 4 [ 90.952462][ T1023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58388 sclass=netlink_route_socket pid=1023 comm=syz.3.180 [ 91.050306][ T284] EXT4-fs (loop3): unmounting filesystem. [ 91.069036][ T1037] loop1: detected capacity change from 0 to 1024 [ 91.079166][ T1039] SELinux: policydb version 762986991 does not match my version range 15-33 [ 91.088138][ T1039] SELinux: failed to load policy [ 91.100143][ T1037] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 91.108753][ T1037] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.123553][ T1037] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm syz.1.192: lblock 0 mapped to illegal pblock 0 (length 5) [ 91.138703][ T1037] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 91.151384][ T1037] EXT4-fs (loop1): This should not happen!! Data will be lost [ 91.151384][ T1037] [ 91.163793][ T1037] EXT4-fs error (device loop1): ext4_map_blocks:635: inode #15: comm syz.1.192: lblock 0 mapped to illegal pblock 0 (length 1) [ 91.178376][ T1037] EXT4-fs error (device loop1): ext4_free_blocks:6205: comm syz.1.192: Freeing blocks not in datazone - block = 1, count = 4 [ 91.254653][ T1037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58388 sclass=netlink_route_socket pid=1037 comm=syz.1.192 [ 91.490306][ T1053] xt_hashlimit: size too large, truncated to 1048576 [ 91.497247][ T1053] xt_hashlimit: max too large, truncated to 1048576 [ 91.746086][ T1052] loop3: detected capacity change from 0 to 4096 [ 92.433473][ T1052] EXT4-fs (loop3): Test dummy encryption mode enabled [ 92.575130][ T1052] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 92.599895][ T28] audit: type=1326 audit(1768787727.435:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1044 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 92.960796][ T472] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.176649][ T1061] xt_hashlimit: size too large, truncated to 1048576 [ 93.183463][ T1061] xt_hashlimit: max too large, truncated to 1048576 [ 94.294044][ T285] EXT4-fs (loop4): unmounting filesystem. [ 94.300538][ T284] EXT4-fs (loop3): unmounting filesystem. [ 94.771272][ T1033] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 94.794943][ T1067] loop4: detected capacity change from 0 to 512 [ 94.803462][ T28] audit: type=1326 audit(1768787727.435:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1044 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 94.873690][ T1067] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #16: comm syz.4.188: corrupted inode contents [ 94.887241][ T1067] EXT4-fs error (device loop4): ext4_dirty_inode:6135: inode #16: comm syz.4.188: mark_inode_dirty error [ 94.898979][ T28] audit: type=1326 audit(1768787727.435:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1044 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 94.922660][ T1067] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #16: comm syz.4.188: corrupted inode contents [ 94.935245][ T1067] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.188: mark_inode_dirty error [ 94.946793][ T28] audit: type=1326 audit(1768787727.435:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1044 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 94.970518][ T1067] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #16: comm syz.4.188: corrupted inode contents [ 94.982829][ T1067] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 94.991704][ T28] audit: type=1326 audit(1768787727.435:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1044 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 95.015360][ T1067] EXT4-fs error (device loop4): ext4_do_update_inode:5270: inode #16: comm syz.4.188: corrupted inode contents [ 95.027575][ T1067] EXT4-fs error (device loop4): ext4_truncate:4320: inode #16: comm syz.4.188: mark_inode_dirty error [ 95.038862][ T28] audit: type=1326 audit(1768787727.435:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1044 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 95.062523][ T1067] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 95.072011][ T1067] EXT4-fs (loop4): 1 truncate cleaned up [ 95.077755][ T1067] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 95.087247][ T28] audit: type=1326 audit(1768787727.435:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1044 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 95.105442][ T1067] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.121026][ T28] audit: type=1326 audit(1768787727.435:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1044 comm="syz.3.184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 95.127293][ T439] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 95.144479][ T28] audit: type=1326 audit(1768787729.035:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1054 comm="syz.0.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 95.188048][ T1067] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.188: iget: bad i_size value: 360287970189639690 [ 95.200843][ T439] EXT4-fs error (device loop4): ext4_release_dquot:6832: comm kworker/u4:6: Failed to release dquot type 1 [ 95.226970][ T1067] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz.4.188: iget: bad i_size value: 1407374883557376 [ 95.248265][ T283] EXT4-fs (loop1): unmounting filesystem. [ 95.268339][ T1067] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.188: iget: bad i_size value: 360287970189639690 [ 95.282497][ T1067] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.188: iget: bad i_size value: 360287970189639690 [ 95.387857][ T285] EXT4-fs (loop4): unmounting filesystem. [ 95.615564][ T1088] xt_hashlimit: size too large, truncated to 1048576 [ 95.622365][ T1088] xt_hashlimit: max too large, truncated to 1048576 [ 95.890329][ T1087] loop1: detected capacity change from 0 to 4096 [ 96.495247][ T1087] EXT4-fs (loop1): Test dummy encryption mode enabled [ 96.627442][ T1087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 97.240736][ T283] EXT4-fs (loop1): unmounting filesystem. [ 100.192641][ T1102] loop3: detected capacity change from 0 to 4096 [ 100.208538][ T1102] EXT4-fs (loop3): Test dummy encryption mode enabled [ 100.251010][ T1102] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 100.261850][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 100.261862][ T28] audit: type=1326 audit(1768787735.095:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 100.304158][ T28] audit: type=1326 audit(1768787735.095:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 100.327625][ T28] audit: type=1326 audit(1768787735.095:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 100.351095][ T28] audit: type=1326 audit(1768787735.105:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 100.422958][ T284] EXT4-fs (loop3): unmounting filesystem. [ 100.431214][ T28] audit: type=1326 audit(1768787735.105:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 100.467442][ T28] audit: type=1326 audit(1768787735.105:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 100.490844][ T28] audit: type=1326 audit(1768787735.105:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 100.514549][ T28] audit: type=1326 audit(1768787735.105:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1095 comm="syz.3.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 100.674742][ T1119] loop3: detected capacity change from 0 to 1024 [ 100.689815][ T1114] loop2: detected capacity change from 0 to 2048 [ 100.767155][ T1119] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 100.776041][ T1119] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.778569][ T1114] loop2: p1 < > p4 [ 100.798978][ T1114] loop2: p4 size 8388608 extends beyond EOD, truncated [ 100.847323][ T1127] xt_hashlimit: size too large, truncated to 1048576 [ 100.854066][ T1127] xt_hashlimit: max too large, truncated to 1048576 [ 101.044678][ T284] EXT4-fs (loop3): unmounting filesystem. [ 101.085284][ T337] udevd[337]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 101.086933][ T1129] loop3: detected capacity change from 0 to 512 [ 101.095609][ T465] udevd[465]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 101.124529][ T1129] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #16: comm syz.3.208: corrupted inode contents [ 101.136634][ T1129] EXT4-fs error (device loop3): ext4_dirty_inode:6135: inode #16: comm syz.3.208: mark_inode_dirty error [ 101.148618][ T1129] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #16: comm syz.3.208: corrupted inode contents [ 101.160699][ T1129] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.208: mark_inode_dirty error [ 101.172183][ T1129] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #16: comm syz.3.208: corrupted inode contents [ 101.184904][ T1129] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 101.193681][ T1129] EXT4-fs error (device loop3): ext4_do_update_inode:5270: inode #16: comm syz.3.208: corrupted inode contents [ 101.205755][ T1129] EXT4-fs error (device loop3): ext4_truncate:4320: inode #16: comm syz.3.208: mark_inode_dirty error [ 101.217055][ T1129] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 101.238823][ T1129] EXT4-fs (loop3): 1 truncate cleaned up [ 101.244694][ T1129] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 101.253938][ T342] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 101.264027][ T1129] ext4 filesystem being mounted at /44/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.267335][ T342] EXT4-fs error (device loop3): ext4_release_dquot:6832: comm kworker/u4:4: Failed to release dquot type 1 [ 101.293555][ T1129] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.208: iget: bad i_size value: 360287970189639690 [ 101.317292][ T1129] EXT4-fs error (device loop3): ext4_lookup:1858: inode #12: comm syz.3.208: iget: bad i_size value: 1407374883557376 [ 101.335771][ T1129] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.208: iget: bad i_size value: 360287970189639690 [ 101.479666][ T1136] loop2: detected capacity change from 0 to 4096 [ 101.608211][ T1136] EXT4-fs (loop2): Test dummy encryption mode enabled [ 101.646696][ T1129] EXT4-fs error (device loop3): ext4_lookup:1858: inode #15: comm syz.3.208: iget: bad i_size value: 360287970189639690 [ 101.869551][ T1136] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 101.970987][ T28] audit: type=1326 audit(1768787736.765:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1130 comm="syz.2.209" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04579acb9 code=0x7ffc0000 [ 102.202107][ T1144] xt_hashlimit: size too large, truncated to 1048576 [ 102.208902][ T1144] xt_hashlimit: max too large, truncated to 1048576 [ 102.990754][ T472] Bluetooth: hci0: command 0x1003 tx timeout [ 103.003265][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.123508][ T286] EXT4-fs (loop2): unmounting filesystem. [ 103.327173][ T1152] xt_hashlimit: size too large, truncated to 1048576 [ 103.334059][ T1152] xt_hashlimit: max too large, truncated to 1048576 [ 103.890310][ T1151] loop4: detected capacity change from 0 to 4096 [ 104.016969][ T1151] EXT4-fs (loop4): Test dummy encryption mode enabled [ 104.031852][ T1151] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 104.744315][ T285] EXT4-fs (loop4): unmounting filesystem. [ 105.523452][ T1166] loop4: detected capacity change from 0 to 4096 [ 105.601961][ T1166] EXT4-fs (loop4): Test dummy encryption mode enabled [ 105.621724][ T1166] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 105.647879][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 105.647938][ T28] audit: type=1326 audit(1768787740.485:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 105.947426][ T1173] loop2: detected capacity change from 0 to 1024 [ 105.974659][ T28] audit: type=1326 audit(1768787740.485:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 106.117708][ T285] EXT4-fs (loop4): unmounting filesystem. [ 106.145827][ T1173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 106.231523][ T28] audit: type=1326 audit(1768787740.485:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 106.235599][ T1180] loop1: detected capacity change from 0 to 4096 [ 106.254753][ T28] audit: type=1326 audit(1768787740.485:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 106.311535][ T1180] EXT4-fs (loop1): Test dummy encryption mode enabled [ 106.351251][ T471] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.366842][ T28] audit: type=1326 audit(1768787740.485:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 106.403384][ T1180] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 106.445575][ T1173] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.532872][ T471] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.623242][ T471] usb 1-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 106.780919][ T286] EXT4-fs (loop2): unmounting filesystem. [ 106.794543][ T471] usb 1-1: config 1 interface 0 has no altsetting 0 [ 106.811096][ T28] audit: type=1326 audit(1768787740.485:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 106.844603][ T471] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 106.861552][ T471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.879777][ T471] usb 1-1: Product: syz [ 106.884138][ T28] audit: type=1326 audit(1768787740.485:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 106.907464][ T471] usb 1-1: Manufacturer: syz [ 106.917471][ T471] usb 1-1: SerialNumber: syz [ 106.947718][ T28] audit: type=1326 audit(1768787740.485:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1163 comm="syz.4.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 107.005315][ T28] audit: type=1400 audit(1768787741.845:535): avc: denied { execute } for pid=1186 comm="syz.4.225" path="/49/blkio.bfq.group_wait_time" dev="tmpfs" ino=281 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 107.052495][ T28] audit: type=1400 audit(1768787741.865:536): avc: denied { map } for pid=1186 comm="syz.4.225" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 107.081545][ T1190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 107.081595][ T283] EXT4-fs (loop1): unmounting filesystem. [ 107.095156][ T1190] x_tables: unsorted entry at hook 2 [ 107.101891][ T1190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.226'. [ 107.125502][ T284] EXT4-fs (loop3): unmounting filesystem. [ 107.136380][ T471] usb 1-1: USB disconnect, device number 4 [ 107.160516][ T1196] loop1: detected capacity change from 0 to 512 [ 107.192654][ T1196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 107.201828][ T1196] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.300771][ T498] Bluetooth: hci1: Frame reassembly failed (-84) [ 107.441529][ T1210] loop4: detected capacity change from 0 to 4096 [ 107.453537][ T1211] Bluetooth: hci1: Frame reassembly failed (-84) [ 107.512253][ T1210] EXT4-fs (loop4): Test dummy encryption mode enabled [ 107.578612][ T1210] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 108.162461][ T285] EXT4-fs (loop4): unmounting filesystem. [ 108.477681][ T1233] loop4: detected capacity change from 0 to 4096 [ 108.542324][ T1233] EXT4-fs (loop4): Test dummy encryption mode enabled [ 108.617696][ T1233] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.311227][ T473] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 109.317476][ T1196] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 109.334350][ T285] EXT4-fs (loop4): unmounting filesystem. [ 109.346907][ T283] EXT4-fs (loop1): unmounting filesystem. [ 110.761272][ T500] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 110.966202][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 110.966216][ T28] audit: type=1400 audit(1768787745.805:566): avc: denied { append } for pid=1245 comm="syz.4.245" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.042283][ T500] usb 1-1: config 16 has an invalid interface number: 19 but max is 0 [ 111.055855][ T500] usb 1-1: config 16 has no interface number 0 [ 111.091202][ T500] usb 1-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 111.120643][ T500] usb 1-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.152380][ T500] usb 1-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 111.234658][ T500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.243006][ T500] usb 1-1: Product: syz [ 111.247318][ T500] usb 1-1: Manufacturer: syz [ 111.252093][ T500] usb 1-1: SerialNumber: syz [ 112.226754][ T335] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.239421][ T1281] Driver unsupported XDP return value 0 on prog (id 69) dev N/A, expect packet loss! [ 113.230272][ T1292] loop2: detected capacity change from 0 to 4096 [ 114.430584][ T472] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.430665][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 114.445935][ T1292] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.462090][ T1280] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 114.586509][ T1296] loop3: detected capacity change from 0 to 4096 [ 114.597784][ T1296] EXT4-fs (loop3): Test dummy encryption mode enabled [ 114.671281][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 114.763421][ T500] usb 1-1: USB disconnect, device number 5 [ 114.800735][ T1296] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 114.825914][ T28] audit: type=1326 audit(1768787749.655:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 114.850595][ T1292] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 115.071675][ T286] EXT4-fs (loop2): unmounting filesystem. [ 115.192256][ T24] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 115.204811][ T24] usb 2-1: config 0 has no interface number 0 [ 115.260404][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 115.306933][ T284] EXT4-fs (loop3): unmounting filesystem. [ 115.340869][ T28] audit: type=1326 audit(1768787749.655:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 115.746584][ T24] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 116.190250][ T24] usb 2-1: string descriptor 0 read error: -71 [ 116.205712][ T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 116.215159][ T28] audit: type=1326 audit(1768787749.665:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 116.248371][ T28] audit: type=1326 audit(1768787749.665:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 116.249928][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.271773][ T28] audit: type=1326 audit(1768787749.665:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 116.306752][ T24] usb 2-1: config 0 descriptor?? [ 116.365797][ T28] audit: type=1326 audit(1768787749.665:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 116.405060][ T28] audit: type=1326 audit(1768787749.665:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 116.431361][ T28] audit: type=1326 audit(1768787749.665:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1290 comm="syz.3.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 116.466484][ T28] audit: type=1326 audit(1768787750.515:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1299 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 116.478678][ T24] usb 2-1: can't set config #0, error -71 [ 116.534755][ T24] usb 2-1: USB disconnect, device number 2 [ 116.546407][ T28] audit: type=1326 audit(1768787750.515:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1299 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 116.702568][ T28] audit: type=1326 audit(1768787750.515:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1299 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 116.727925][ T498] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.845813][ T28] audit: type=1326 audit(1768787750.515:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1299 comm="syz.0.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 116.874055][ T498] Bluetooth: hci0: Frame reassembly failed (-84) [ 118.329223][ T1352] loop1: detected capacity change from 0 to 4096 [ 118.349197][ T1352] EXT4-fs (loop1): Test dummy encryption mode enabled [ 118.442452][ T1352] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.761233][ T473] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.008108][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 119.019746][ T1335] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 119.071447][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 119.145107][ T283] EXT4-fs (loop1): unmounting filesystem. [ 119.262390][ T19] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.277734][ T19] usb 4-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.315369][ T19] usb 4-1: config 1 interface 0 has no altsetting 0 [ 119.330674][ T19] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 119.343446][ T1362] loop2: detected capacity change from 0 to 40427 [ 119.349985][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.373336][ T1362] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 119.387689][ T19] usb 4-1: Product: syz [ 119.392125][ T1362] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 119.400327][ T19] usb 4-1: Manufacturer: syz [ 119.405609][ T19] usb 4-1: SerialNumber: syz [ 119.837740][ T1362] F2FS-fs (loop2): invalid crc value [ 119.860080][ T1384] netlink: 136 bytes leftover after parsing attributes in process `syz.4.286'. [ 119.869120][ T1384] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 119.886085][ T1362] F2FS-fs (loop2): Found nat_bits in checkpoint [ 119.944242][ T1362] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 119.951524][ T1362] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 120.698965][ T1394] loop4: detected capacity change from 0 to 4096 [ 120.733109][ T1394] EXT4-fs (loop4): Test dummy encryption mode enabled [ 120.927991][ T1394] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 121.041472][ T292] usb 4-1: USB disconnect, device number 3 [ 121.227925][ T285] EXT4-fs (loop4): unmounting filesystem. [ 121.228814][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 121.228850][ T28] audit: type=1400 audit(1768787756.065:646): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 121.259882][ T28] audit: type=1400 audit(1768787756.085:647): avc: denied { getattr } for pid=1405 comm="syz.3.292" name="KEY" dev="sockfs" ino=20766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.441209][ T385] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.471843][ T28] audit: type=1400 audit(1768787756.315:648): avc: denied { remove_name } for pid=286 comm="syz-executor" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.494745][ T28] audit: type=1400 audit(1768787756.315:649): avc: denied { rmdir } for pid=286 comm="syz-executor" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 121.561303][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 121.661218][ T385] usb 1-1: Using ep0 maxpacket: 8 [ 121.667370][ T385] usb 1-1: config 0 has an invalid descriptor of length 132, skipping remainder of the config [ 121.677673][ T385] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 121.686639][ T385] usb 1-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 121.695699][ T385] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.706579][ T385] usb 1-1: config 0 descriptor?? [ 121.849083][ T1415] loop2: detected capacity change from 0 to 4096 [ 121.859515][ T28] audit: type=1400 audit(1768787756.595:650): avc: denied { read } for pid=1412 comm="syz.2.294" path="socket:[20787]" dev="sockfs" ino=20787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.885237][ T1415] EXT4-fs (loop2): Test dummy encryption mode enabled [ 121.902828][ T1415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 121.985967][ T28] audit: type=1326 audit(1768787756.765:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04579acb9 code=0x7ffc0000 [ 122.079294][ T28] audit: type=1326 audit(1768787756.765:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04579acb9 code=0x7ffc0000 [ 122.103891][ T28] audit: type=1326 audit(1768787756.765:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7ff04579acb9 code=0x7ffc0000 [ 122.130000][ T28] audit: type=1326 audit(1768787756.765:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04579acb9 code=0x7ffc0000 [ 122.154236][ T28] audit: type=1326 audit(1768787756.765:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.2.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff04579acb9 code=0x7ffc0000 [ 122.238888][ T385] usb 1-1: string descriptor 0 read error: -71 [ 122.296920][ T385] usb 1-1: USB disconnect, device number 6 [ 122.601490][ T286] EXT4-fs (loop2): unmounting filesystem. [ 122.622390][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.633364][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.643136][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 122.656088][ T19] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 122.665177][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.684826][ T19] usb 5-1: config 0 descriptor?? [ 122.701249][ T500] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.881293][ T500] usb 4-1: Using ep0 maxpacket: 32 [ 122.888238][ T500] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 122.896446][ T500] usb 4-1: config 0 has no interface number 0 [ 122.904662][ T500] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 122.914173][ T500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.922287][ T500] usb 4-1: Product: syz [ 122.926658][ T500] usb 4-1: Manufacturer: syz [ 122.955942][ T500] usb 4-1: SerialNumber: syz [ 122.997942][ T500] usb 4-1: config 0 descriptor?? [ 123.006760][ T500] smsc95xx v2.0.0 [ 123.071241][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 123.071245][ T473] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 123.098141][ T1429] FAULT_INJECTION: forcing a failure. [ 123.098141][ T1429] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 123.111571][ T1429] CPU: 0 PID: 1429 Comm: syz.1.298 Not tainted syzkaller #0 [ 123.118896][ T1429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.128964][ T1429] Call Trace: [ 123.132245][ T1429] [ 123.135187][ T1429] __dump_stack+0x21/0x24 [ 123.139551][ T1429] dump_stack_lvl+0x110/0x170 [ 123.144249][ T1429] ? __cfi_dump_stack_lvl+0x8/0x8 [ 123.149296][ T1429] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 123.155027][ T1429] dump_stack+0x15/0x24 [ 123.159181][ T1429] should_fail_ex+0x3d4/0x520 [ 123.163859][ T1429] should_fail_alloc_page+0x61/0x90 [ 123.169070][ T1429] prepare_alloc_pages+0x148/0x600 [ 123.174204][ T1429] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 123.179418][ T1429] __alloc_pages+0x13a/0x480 [ 123.184024][ T1429] ? __cfi___alloc_pages+0x10/0x10 [ 123.189143][ T1429] ? __cfi____update_load_sum+0x10/0x10 [ 123.194694][ T1429] ? mas_state_walk+0x79b/0xa60 [ 123.199561][ T1429] get_zeroed_page+0x19/0x40 [ 123.204168][ T1429] __pud_alloc+0x37/0x1a0 [ 123.208518][ T1429] handle_mm_fault+0x1ae8/0x26c0 [ 123.213483][ T1429] ? __cfi_mt_find+0x10/0x10 [ 123.218078][ T1429] ? __cfi_handle_mm_fault+0x10/0x10 [ 123.223394][ T1429] ? down_read_trylock+0x27f/0x660 [ 123.228530][ T1429] ? lock_mm_and_find_vma+0x9e/0x320 [ 123.233832][ T1429] ? do_user_addr_fault+0x2ee/0x1050 [ 123.239122][ T1429] do_user_addr_fault+0x63b/0x1050 [ 123.244266][ T1429] exc_page_fault+0x51/0xb0 [ 123.248778][ T1429] asm_exc_page_fault+0x27/0x30 [ 123.253645][ T1429] RIP: 0010:strncpy_from_user+0xdf/0x2d0 [ 123.259274][ T1429] Code: 00 00 4c 89 ee e8 91 98 e2 fe 49 83 fd 07 0f 86 a2 00 00 00 4c 89 75 c0 49 c7 c7 f8 ff ff ff 45 31 e4 4c 89 65 c8 48 8b 45 c0 <4a> 8b 1c 20 48 b8 ff fe fe fe fe fe fe fe 4c 8d 34 03 49 89 dc 49 [ 123.278897][ T1429] RSP: 0018:ffffc9000ffafc68 EFLAGS: 00050246 [ 123.284996][ T1429] RAX: 0000200000000100 RBX: 0000000000000100 RCX: ffff888113928000 [ 123.292970][ T1429] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000007 [ 123.300946][ T1429] RBP: ffffc9000ffafcb0 R08: ffff888113928000 R09: 0000000000000002 [ 123.308919][ T1429] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 123.316883][ T1429] R13: 0000000000000100 R14: 0000200000000100 R15: fffffffffffffff8 [ 123.324890][ T1429] ? strncpy_from_user+0xbf/0x2d0 [ 123.329925][ T1429] __se_sys_fgetxattr+0x239/0x3a0 [ 123.334996][ T1429] ? __x64_sys_fgetxattr+0xb0/0xb0 [ 123.340133][ T1429] ? fpregs_restore_userregs+0x128/0x260 [ 123.345788][ T1429] __x64_sys_fgetxattr+0x9b/0xb0 [ 123.350741][ T1429] x64_sys_call+0x584/0x9a0 [ 123.355259][ T1429] do_syscall_64+0x4c/0xa0 [ 123.359695][ T1429] ? clear_bhb_loop+0x30/0x80 [ 123.364384][ T1429] ? clear_bhb_loop+0x30/0x80 [ 123.369068][ T1429] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 123.374977][ T1429] RIP: 0033:0x7f66cfd9acb9 [ 123.379406][ T1429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.399011][ T1429] RSP: 002b:00007f66d0b8a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 123.407433][ T1429] RAX: ffffffffffffffda RBX: 00007f66d0015fa0 RCX: 00007f66cfd9acb9 [ 123.411526][ T500] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 123.415428][ T1429] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 123.426427][ T500] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 123.434200][ T1429] RBP: 00007f66d0b8a090 R08: 0000000000000000 R09: 0000000000000000 [ 123.434214][ T1429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.434225][ T1429] R13: 00007f66d0016038 R14: 00007f66d0015fa0 R15: 00007ffc0e018ba8 [ 123.434241][ T1429] [ 123.551667][ T19] usbhid 5-1:0.0: can't add hid device: -71 [ 123.566572][ T19] usbhid: probe of 5-1:0.0 failed with error -71 [ 123.580194][ T19] usb 5-1: USB disconnect, device number 3 [ 124.536083][ T1433] loop2: detected capacity change from 0 to 40427 [ 124.543365][ T1433] F2FS-fs (loop2): fault_injection options not supported [ 124.550556][ T1433] F2FS-fs (loop2): fault_type options not supported [ 124.561011][ T1433] F2FS-fs (loop2): invalid crc value [ 124.580432][ T1433] F2FS-fs (loop2): Mismatch valid blocks 2 vs. 16 [ 124.597171][ T1433] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117) [ 125.061208][ T19] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.242319][ T19] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.252591][ T19] usb 5-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.265525][ T19] usb 5-1: config 1 interface 0 has no altsetting 0 [ 125.273645][ T19] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 125.282815][ T19] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.290830][ T19] usb 5-1: Product: syz [ 125.295075][ T19] usb 5-1: Manufacturer: syz [ 125.299709][ T19] usb 5-1: SerialNumber: syz [ 125.353395][ T439] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.505260][ T1470] loop1: detected capacity change from 0 to 1024 [ 125.512805][ T1470] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 125.518519][ T340] usb 5-1: USB disconnect, device number 4 [ 125.531471][ T1470] EXT4-fs (loop1): barriers disabled [ 125.536986][ T1470] JBD2: no valid journal superblock found [ 125.543291][ T1470] EXT4-fs (loop1): error loading journal [ 125.668636][ T1473] xt_hashlimit: size too large, truncated to 1048576 [ 125.675427][ T1473] xt_hashlimit: max too large, truncated to 1048576 [ 125.695151][ T500] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 125.706276][ T500] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 125.716605][ T500] usb 4-1: USB disconnect, device number 4 [ 125.724938][ T1475] FAULT_INJECTION: forcing a failure. [ 125.724938][ T1475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 125.738541][ T1475] CPU: 1 PID: 1475 Comm: syz.3.311 Not tainted syzkaller #0 [ 125.745846][ T1475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.755890][ T1475] Call Trace: [ 125.759159][ T1475] [ 125.762080][ T1475] __dump_stack+0x21/0x24 [ 125.766400][ T1475] dump_stack_lvl+0x110/0x170 [ 125.771067][ T1475] ? __cfi_dump_stack_lvl+0x8/0x8 [ 125.776083][ T1475] ? get_page_from_freelist+0x2d12/0x2d80 [ 125.781832][ T1475] dump_stack+0x15/0x24 [ 125.786013][ T1475] should_fail_ex+0x3d4/0x520 [ 125.790690][ T1475] should_fail_alloc_page+0x61/0x90 [ 125.795896][ T1475] prepare_alloc_pages+0x148/0x600 [ 125.801026][ T1475] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 125.806219][ T1475] __alloc_pages+0x13a/0x480 [ 125.810805][ T1475] ? __cfi_gfp_zone+0x10/0x10 [ 125.815473][ T1475] ? __cfi___alloc_pages+0x10/0x10 [ 125.820586][ T1475] ? __alloc_pages+0x1d9/0x480 [ 125.825346][ T1475] ? __cfi___alloc_pages+0x10/0x10 [ 125.830450][ T1475] __pmd_alloc+0xa1/0x4b0 [ 125.834770][ T1475] ? __kasan_check_write+0x14/0x20 [ 125.839885][ T1475] ? __cfi__raw_spin_lock+0x10/0x10 [ 125.845075][ T1475] ? mas_state_walk+0x79b/0xa60 [ 125.849921][ T1475] ? __cfi___pmd_alloc+0x10/0x10 [ 125.854863][ T1475] ? __kasan_check_read+0x11/0x20 [ 125.859877][ T1475] handle_mm_fault+0xa4f/0x26c0 [ 125.864722][ T1475] ? __cfi_mt_find+0x10/0x10 [ 125.869304][ T1475] ? __cfi_handle_mm_fault+0x10/0x10 [ 125.874588][ T1475] ? down_read_trylock+0x27f/0x660 [ 125.879696][ T1475] ? lock_mm_and_find_vma+0x9e/0x320 [ 125.884982][ T1475] ? do_user_addr_fault+0x2ee/0x1050 [ 125.890271][ T1475] do_user_addr_fault+0x63b/0x1050 [ 125.895380][ T1475] exc_page_fault+0x51/0xb0 [ 125.899878][ T1475] asm_exc_page_fault+0x27/0x30 [ 125.904720][ T1475] RIP: 0010:strncpy_from_user+0xdf/0x2d0 [ 125.910353][ T1475] Code: 00 00 4c 89 ee e8 91 98 e2 fe 49 83 fd 07 0f 86 a2 00 00 00 4c 89 75 c0 49 c7 c7 f8 ff ff ff 45 31 e4 4c 89 65 c8 48 8b 45 c0 <4a> 8b 1c 20 48 b8 ff fe fe fe fe fe fe fe 4c 8d 34 03 49 89 dc 49 [ 125.929969][ T1475] RSP: 0018:ffffc90010f27c68 EFLAGS: 00050246 [ 125.936040][ T1475] RAX: 0000200000000100 RBX: 0000000000000100 RCX: ffff888113e90000 [ 125.944009][ T1475] RDX: 0000000000000000 RSI: 0000000000000100 RDI: 0000000000000007 [ 125.951967][ T1475] RBP: ffffc90010f27cb0 R08: ffff888113e90000 R09: 0000000000000002 [ 125.959924][ T1475] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 125.967879][ T1475] R13: 0000000000000100 R14: 0000200000000100 R15: fffffffffffffff8 [ 125.975849][ T1475] ? strncpy_from_user+0xbf/0x2d0 [ 125.980865][ T1475] __se_sys_fgetxattr+0x239/0x3a0 [ 125.985894][ T1475] ? __x64_sys_fgetxattr+0xb0/0xb0 [ 125.991007][ T1475] ? __cfi_ksys_write+0x10/0x10 [ 125.995844][ T1475] __x64_sys_fgetxattr+0x9b/0xb0 [ 126.000774][ T1475] x64_sys_call+0x584/0x9a0 [ 126.005272][ T1475] do_syscall_64+0x4c/0xa0 [ 126.009677][ T1475] ? clear_bhb_loop+0x30/0x80 [ 126.014349][ T1475] ? clear_bhb_loop+0x30/0x80 [ 126.019018][ T1475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.024904][ T1475] RIP: 0033:0x7fc4a4f9acb9 [ 126.029303][ T1475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.048898][ T1475] RSP: 002b:00007fc4a5e7e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c1 [ 126.057306][ T1475] RAX: ffffffffffffffda RBX: 00007fc4a5215fa0 RCX: 00007fc4a4f9acb9 [ 126.065274][ T1475] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 126.073236][ T1475] RBP: 00007fc4a5e7e090 R08: 0000000000000000 R09: 0000000000000000 [ 126.081206][ T1475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.089179][ T1475] R13: 00007fc4a5216038 R14: 00007fc4a5215fa0 R15: 00007ffcc32a7768 [ 126.097143][ T1475] [ 126.116433][ T1477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.312'. [ 126.125708][ T1477] netlink: 31 bytes leftover after parsing attributes in process `syz.3.312'. [ 126.134952][ T1477] netlink: 'syz.3.312': attribute type 3 has an invalid length. [ 126.143176][ T1477] netlink: 'syz.3.312': attribute type 2 has an invalid length. [ 126.150892][ T1477] netlink: 31 bytes leftover after parsing attributes in process `syz.3.312'. [ 126.160802][ T1479] loop2: detected capacity change from 0 to 256 [ 126.179882][ T1479] FAT-fs (loop2): Directory bread(block 64) failed [ 126.186677][ T1479] FAT-fs (loop2): Directory bread(block 65) failed [ 126.193287][ T1479] FAT-fs (loop2): Directory bread(block 66) failed [ 126.199840][ T1479] FAT-fs (loop2): Directory bread(block 67) failed [ 126.206771][ T1479] FAT-fs (loop2): Directory bread(block 68) failed [ 126.213340][ T1479] FAT-fs (loop2): Directory bread(block 69) failed [ 126.219914][ T1479] FAT-fs (loop2): Directory bread(block 70) failed [ 126.226767][ T1479] FAT-fs (loop2): Directory bread(block 71) failed [ 126.233357][ T1479] FAT-fs (loop2): Directory bread(block 72) failed [ 126.239937][ T1479] FAT-fs (loop2): Directory bread(block 73) failed [ 126.250158][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 126.250169][ T28] audit: type=1400 audit(1768787761.085:684): avc: denied { mount } for pid=1478 comm="syz.2.313" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 126.300494][ T28] audit: type=1400 audit(1768787761.135:685): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 127.279967][ T1489] loop2: detected capacity change from 0 to 4096 [ 127.290438][ T1489] EXT4-fs (loop2): Test dummy encryption mode enabled [ 127.391247][ T473] Bluetooth: hci0: command 0x1003 tx timeout [ 127.391279][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.670146][ T1489] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.313016][ T1499] loop3: detected capacity change from 0 to 4096 [ 128.433652][ T1499] EXT4-fs (loop3): Test dummy encryption mode enabled [ 128.448063][ T286] EXT4-fs (loop2): unmounting filesystem. [ 128.566893][ T1499] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 128.657876][ T28] audit: type=1326 audit(1768787763.425:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1492 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 128.822247][ T28] audit: type=1326 audit(1768787763.425:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1492 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 128.852284][ T28] audit: type=1326 audit(1768787763.425:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1492 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 128.887894][ T28] audit: type=1326 audit(1768787763.425:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1492 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 128.916974][ T28] audit: type=1326 audit(1768787763.425:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1492 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 128.955131][ T1511] loop2: detected capacity change from 0 to 512 [ 128.997172][ T1511] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.010406][ T1513] loop4: detected capacity change from 0 to 512 [ 129.042936][ T1513] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 129.061390][ T28] audit: type=1326 audit(1768787763.425:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1492 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 129.084791][ T28] audit: type=1326 audit(1768787763.425:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1492 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 129.109155][ T28] audit: type=1326 audit(1768787763.425:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1492 comm="syz.3.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 129.160459][ T284] EXT4-fs (loop3): unmounting filesystem. [ 129.170559][ T1513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 129.179942][ T1511] EXT4-fs error (device loop2): __ext4_fill_super:5384: inode #2: comm syz.2.320: inode has both inline data and extents flags [ 129.193559][ T1513] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.207574][ T1511] EXT4-fs (loop2): get root inode failed [ 129.230732][ T1511] EXT4-fs (loop2): mount failed [ 129.245547][ T1513] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 18: comm syz.4.323: lblock 23 mapped to illegal pblock 18 (length 1) [ 129.265942][ T1513] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 129.284811][ T1513] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 18: comm syz.4.323: lblock 23 mapped to illegal pblock 18 (length 1) [ 129.350622][ T1528] EXT4-fs error (device loop4): ext4_map_blocks:635: inode #2: block 3: comm syz.4.323: lblock 8 mapped to illegal pblock 3 (length 26) [ 129.415648][ T1531] xt_hashlimit: size too large, truncated to 1048576 [ 129.422400][ T1531] xt_hashlimit: max too large, truncated to 1048576 [ 129.525239][ T287] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 129.877924][ T287] usb 4-1: config 1 has an invalid interface number: 140 but max is 0 [ 129.892369][ T287] usb 4-1: config 1 has no interface number 0 [ 129.896491][ T285] EXT4-fs (loop4): unmounting filesystem. [ 129.940612][ T287] usb 4-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=3d.88 [ 129.950720][ T287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.141342][ T385] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 130.314722][ T1538] loop2: detected capacity change from 0 to 512 [ 130.372440][ T1538] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 130.391269][ T1538] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.405763][ T1545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.415917][ T385] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.445459][ T1545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.453395][ T385] usb 1-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.470109][ T287] usb 4-1: Invalid descriptor size=18. [ 131.263829][ T1546] loop4: detected capacity change from 0 to 2048 [ 132.241790][ T385] usb 1-1: config 1 interface 0 has no altsetting 0 [ 132.249126][ T1546] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.253178][ T385] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 132.267092][ T385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.275201][ T385] usb 1-1: Product: syz [ 132.279109][ T1544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.330'. [ 132.279485][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 132.279506][ T28] audit: type=1400 audit(1768787767.115:700): avc: denied { unlink } for pid=1539 comm="syz.4.330" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.341397][ T385] usb 1-1: Manufacturer: syz [ 132.346297][ T385] usb 1-1: SerialNumber: syz [ 133.490767][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 133.490767][ T473] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.516597][ T500] usb 1-1: USB disconnect, device number 7 [ 133.522724][ T385] usb 4-1: USB disconnect, device number 5 [ 133.533784][ T285] EXT4-fs (loop4): unmounting filesystem. [ 133.546460][ T1555] loop3: detected capacity change from 0 to 128 [ 133.680889][ T286] EXT4-fs (loop2): unmounting filesystem. [ 133.733149][ T1555] EXT4-fs: failed to create workqueue [ 133.809414][ T1555] EXT4-fs (loop3): mount failed [ 134.127178][ T1552] loop1: detected capacity change from 0 to 4096 [ 134.237539][ T1552] EXT4-fs (loop1): Test dummy encryption mode enabled [ 134.355235][ T1552] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 134.822171][ T28] audit: type=1400 audit(1768787769.665:701): avc: denied { getopt } for pid=1570 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.871945][ T1560] loop4: detected capacity change from 0 to 4096 [ 134.901779][ T283] EXT4-fs (loop1): unmounting filesystem. [ 134.924206][ T1560] EXT4-fs (loop4): Test dummy encryption mode enabled [ 134.936916][ T28] audit: type=1400 audit(1768787769.695:702): avc: denied { ioctl } for pid=1570 comm="syz.3.337" path="socket:[21016]" dev="sockfs" ino=21016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.992375][ T1560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 135.040146][ T28] audit: type=1400 audit(1768787769.805:703): avc: denied { read write } for pid=1575 comm="syz.3.339" name="vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.125440][ T28] audit: type=1400 audit(1768787769.805:704): avc: denied { open } for pid=1575 comm="syz.3.339" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.194637][ T28] audit: type=1400 audit(1768787769.805:705): avc: denied { ioctl } for pid=1575 comm="syz.3.339" path="/dev/vhost-vsock" dev="devtmpfs" ino=268 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 135.251192][ T385] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.262913][ T28] audit: type=1326 audit(1768787769.865:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1557 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 135.325857][ T28] audit: type=1326 audit(1768787769.865:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1557 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 135.349138][ T28] audit: type=1326 audit(1768787769.865:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1557 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 135.350628][ T285] EXT4-fs (loop4): unmounting filesystem. [ 135.372350][ T28] audit: type=1326 audit(1768787769.865:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1557 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 135.501187][ T385] usb 4-1: Using ep0 maxpacket: 32 [ 135.507391][ T385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.648340][ T1589] xt_hashlimit: size too large, truncated to 1048576 [ 135.655194][ T1589] xt_hashlimit: max too large, truncated to 1048576 [ 135.684257][ T385] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.694214][ T385] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 135.703487][ T385] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.712619][ T385] usb 4-1: config 0 descriptor?? [ 135.734434][ T1591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.051191][ T500] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.101220][ T6] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 136.122398][ T385] savu 0003:1E7D:2D5A.0001: hiddev96,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 136.232263][ T500] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.242501][ T500] usb 1-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 136.255401][ T500] usb 1-1: config 1 interface 0 has no altsetting 0 [ 136.263464][ T500] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 136.272554][ T500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.280581][ T500] usb 1-1: Product: syz [ 136.284783][ T500] usb 1-1: Manufacturer: syz [ 136.289392][ T500] usb 1-1: SerialNumber: syz [ 136.302309][ T6] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 136.313231][ T6] usb 3-1: config 0 interface 0 has no altsetting 0 [ 136.319839][ T6] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 136.329326][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.361047][ T6] usb 3-1: config 0 descriptor?? [ 136.366569][ T1596] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 136.384036][ T1599] loop4: detected capacity change from 0 to 512 [ 136.401883][ T500] usb 4-1: USB disconnect, device number 6 [ 136.421046][ T1599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.430153][ T1599] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.454469][ T439] Bluetooth: hci0: Frame reassembly failed (-84) [ 136.497217][ T1534] usb 1-1: USB disconnect, device number 8 [ 136.783514][ T6] uclogic 0003:28BD:0078.0002: interface is invalid, ignoring [ 136.961205][ T500] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 136.984080][ T6] usb 3-1: USB disconnect, device number 3 [ 137.141188][ T500] usb 4-1: Using ep0 maxpacket: 16 [ 137.150078][ T500] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 137.245036][ T1616] loop1: detected capacity change from 0 to 4096 [ 137.276622][ T500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.287681][ T500] usb 4-1: Product: syz [ 137.292411][ T500] usb 4-1: Manufacturer: syz [ 137.297233][ T500] usb 4-1: SerialNumber: syz [ 137.312459][ T1616] EXT4-fs (loop1): Test dummy encryption mode enabled [ 137.395318][ T500] r8152-cfgselector 4-1: config 0 descriptor?? [ 137.548159][ T1616] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 138.048904][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 138.052080][ T28] audit: type=1326 audit(1768787772.885:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1618 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 138.111501][ T283] EXT4-fs (loop1): unmounting filesystem. [ 138.163419][ T500] r8152-cfgselector 4-1: can't set config #0, error -71 [ 138.241488][ T28] audit: type=1326 audit(1768787772.885:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1618 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 138.276590][ T28] audit: type=1326 audit(1768787772.885:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1618 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 138.294130][ T500] r8152-cfgselector 4-1: Unknown version 0x0000 [ 138.309657][ T500] r8152-cfgselector 4-1: USB disconnect, device number 7 [ 138.330031][ T1627] loop1: detected capacity change from 0 to 1024 [ 138.337134][ T28] audit: type=1326 audit(1768787772.885:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1618 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 138.369389][ T28] audit: type=1326 audit(1768787772.885:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1618 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 138.543706][ T472] Bluetooth: hci0: command 0x1003 tx timeout [ 138.549771][ T473] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 138.559586][ T1627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 138.587630][ T28] audit: type=1326 audit(1768787772.885:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1618 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 138.938395][ T283] EXT4-fs (loop1): unmounting filesystem. [ 138.944577][ T1643] xt_hashlimit: size too large, truncated to 1048576 [ 138.951293][ T1643] xt_hashlimit: max too large, truncated to 1048576 [ 138.989850][ T285] EXT4-fs (loop4): unmounting filesystem. [ 138.998493][ T28] audit: type=1326 audit(1768787772.885:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1618 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 139.023223][ T28] audit: type=1326 audit(1768787772.885:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1618 comm="syz.0.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe457b9acb9 code=0x7ffc0000 [ 139.048058][ T28] audit: type=1400 audit(1768787773.415:726): avc: denied { create } for pid=1626 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.069954][ T28] audit: type=1400 audit(1768787773.415:727): avc: denied { accept } for pid=1626 comm="syz.1.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 139.496759][ T1653] loop1: detected capacity change from 0 to 1024 [ 139.529103][ T1653] EXT4-fs: Ignoring removed orlov option [ 139.582838][ T1646] loop4: detected capacity change from 0 to 40427 [ 139.589822][ T1646] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 139.597800][ T1646] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 139.606961][ T1646] F2FS-fs (loop4): invalid crc value [ 139.613771][ T1653] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 139.672451][ T283] EXT4-fs (loop1): unmounting filesystem. [ 139.672762][ T1644] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.686903][ T1646] F2FS-fs (loop4): Found nat_bits in checkpoint [ 139.970483][ T1646] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.992165][ T1646] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.351262][ T385] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 140.401234][ T500] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 140.581217][ T385] usb 2-1: Using ep0 maxpacket: 32 [ 140.587504][ T385] usb 2-1: config 2 has an invalid interface number: 163 but max is 0 [ 140.596083][ T385] usb 2-1: config 2 has no interface number 0 [ 140.602459][ T385] usb 2-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=55.44 [ 140.611664][ T385] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.719639][ T500] usb 1-1: Using ep0 maxpacket: 16 [ 140.738011][ T500] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.748324][ T500] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.763944][ T500] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 140.767896][ T1690] loop4: detected capacity change from 0 to 512 [ 140.773260][ T500] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.787971][ T500] usb 1-1: Product: syz [ 140.792783][ T500] usb 1-1: Manufacturer: syz [ 140.797424][ T500] usb 1-1: SerialNumber: syz [ 140.926451][ T1691] loop3: detected capacity change from 0 to 4096 [ 141.015902][ T385] usb 2-1: string descriptor 0 read error: -71 [ 141.033674][ T1691] EXT4-fs (loop3): Test dummy encryption mode enabled [ 141.133896][ T385] aiptek 2-1:2.163: Aiptek using 400 ms programming speed [ 141.149594][ T1691] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 141.188896][ T500] usb 1-1: 0:2 : does not exist [ 141.212807][ T500] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 141.229534][ T1690] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 141.258568][ T1690] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.296396][ T385] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.163/input/input5 [ 141.385453][ T500] usb 1-1: USB disconnect, device number 9 [ 141.612386][ T385] usb 2-1: USB disconnect, device number 3 [ 141.618268][ C1] aiptek 2-1:2.163: aiptek_irq - usb_submit_urb failed with result -19 [ 141.649328][ T285] EXT4-fs (loop4): unmounting filesystem. [ 141.719935][ T284] EXT4-fs (loop3): unmounting filesystem. [ 141.742214][ T1644] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.753635][ T1644] usb 3-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.766993][ T1644] usb 3-1: config 1 interface 0 has no altsetting 0 [ 141.789340][ T1644] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 141.807393][ T1644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.827027][ T1644] usb 3-1: Product: syz [ 141.838156][ T1644] usb 3-1: Manufacturer: syz [ 141.844224][ T1644] usb 3-1: SerialNumber: syz [ 141.958384][ T1711] xt_hashlimit: size too large, truncated to 1048576 [ 141.965152][ T1711] xt_hashlimit: max too large, truncated to 1048576 [ 142.065275][ T1644] usb 3-1: USB disconnect, device number 4 [ 143.378945][ T1725] loop3: detected capacity change from 0 to 256 [ 143.418202][ T1727] loop2: detected capacity change from 0 to 512 [ 143.429075][ T1725] exfat: Unknown parameter 'keep_last_scard' [ 143.540828][ T1727] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 143.550267][ T1727] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.740594][ T1738] loop1: detected capacity change from 0 to 4096 [ 143.751723][ T1738] EXT4-fs (loop1): Test dummy encryption mode enabled [ 143.848062][ T1725] loop3: detected capacity change from 0 to 16 [ 143.894542][ T1738] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 143.918749][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 143.918796][ T28] audit: type=1326 audit(1768787778.755:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 143.992358][ T1741] loop6: detected capacity change from 0 to 7 [ 144.051520][ T1725] erofs: Unknown parameter 'fmask' [ 144.119774][ T1742] syz.0.384[1742] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.140361][ T1742] netlink: 88 bytes leftover after parsing attributes in process `syz.0.384'. [ 144.181385][ T1725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 144.244057][ T286] EXT4-fs (loop2): unmounting filesystem. [ 144.250864][ T1741] loop6: [ 144.252507][ T28] audit: type=1326 audit(1768787778.755:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 144.264058][ T1742] netlink: 48 bytes leftover after parsing attributes in process `syz.0.384'. [ 144.389155][ T28] audit: type=1326 audit(1768787778.755:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 144.412679][ T28] audit: type=1326 audit(1768787778.755:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 144.437385][ T28] audit: type=1326 audit(1768787778.755:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 144.460773][ T28] audit: type=1326 audit(1768787778.755:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 144.492324][ T1746] loop4: detected capacity change from 0 to 256 [ 144.499948][ T28] audit: type=1326 audit(1768787778.755:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 144.525725][ T1746] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 144.535530][ T1746] FAT-fs (loop4): error, invalid access to FAT (entry 0x000004ff) [ 144.543529][ T28] audit: type=1326 audit(1768787778.755:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1728 comm="syz.1.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 144.567072][ T1746] FAT-fs (loop4): error, invalid access to FAT (entry 0x000004ff) [ 144.575900][ T28] audit: type=1400 audit(1768787779.325:751): avc: denied { mount } for pid=1722 comm="syz.3.380" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 144.597634][ T28] audit: type=1326 audit(1768787779.325:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1722 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4a4f9acb9 code=0x7ffc0000 [ 144.636807][ T1748] loop3: detected capacity change from 0 to 512 [ 144.643628][ T1748] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.695280][ T1752] loop3: detected capacity change from 0 to 256 [ 144.701981][ T1752] exfat: Deprecated parameter 'namecase' [ 144.708389][ T1752] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x111908d0, checksum : 0x1119abd0) [ 144.719157][ T1752] exFAT-fs (loop3): invalid boot region [ 144.724844][ T1752] exFAT-fs (loop3): failed to recognize exfat type [ 144.739014][ T102] loop6: [ 144.742555][ T283] EXT4-fs (loop1): unmounting filesystem. [ 144.875849][ T1763] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 144.882963][ T1763] overlayfs: failed to set xattr on upper [ 144.889098][ T1762] xt_hashlimit: size too large, truncated to 1048576 [ 144.895982][ T1762] xt_hashlimit: max too large, truncated to 1048576 [ 144.910812][ T1763] loop2: detected capacity change from 0 to 1024 [ 144.917621][ T1763] EXT4-fs: Ignoring removed oldalloc option [ 144.924173][ T1763] EXT4-fs: Ignoring removed bh option [ 144.929991][ T1763] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.941299][ T500] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.963235][ T1763] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 145.121203][ T500] usb 5-1: Using ep0 maxpacket: 8 [ 145.127625][ T500] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.128648][ T1770] EXT4-fs (loop2): unmounting filesystem. [ 145.138289][ T500] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.152499][ T500] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.166969][ T500] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 145.176118][ T500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.184195][ T500] usb 5-1: Product: syz [ 145.188447][ T500] usb 5-1: Manufacturer: syz [ 145.193096][ T500] usb 5-1: SerialNumber: syz [ 145.199027][ T500] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 145.205862][ T500] cdc_ncm 5-1:1.0: bind() failure [ 145.231325][ T1644] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.348812][ T1772] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.356006][ T1772] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.363625][ T1772] device bridge_slave_0 entered promiscuous mode [ 145.371928][ T1772] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.378966][ T1772] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.386381][ T1772] device bridge_slave_1 entered promiscuous mode [ 145.400730][ T6] usb 5-1: USB disconnect, device number 5 [ 145.412400][ T1644] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.422890][ T1644] usb 4-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.435864][ T1644] usb 4-1: config 1 interface 0 has no altsetting 0 [ 145.444163][ T1644] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 145.453402][ T1644] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.461472][ T1644] usb 4-1: Product: syz [ 145.465754][ T1644] usb 4-1: Manufacturer: syz [ 145.470378][ T1644] usb 4-1: SerialNumber: syz [ 145.498699][ T1772] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.505842][ T1772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.513108][ T1772] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.520124][ T1772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.542253][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.549886][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.557648][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.568478][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 145.576822][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.583848][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.592680][ T342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.600943][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.608035][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.662366][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 145.677559][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 145.719645][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 145.743737][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 145.757658][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 145.766739][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 145.783355][ T1772] device veth0_vlan entered promiscuous mode [ 145.802519][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 145.812627][ T1772] device veth1_macvtap entered promiscuous mode [ 145.827997][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 145.836630][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.848862][ T1804] loop1: detected capacity change from 0 to 1024 [ 145.857541][ T561] device bridge_slave_1 left promiscuous mode [ 145.865389][ T561] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.873373][ T561] device bridge_slave_0 left promiscuous mode [ 145.879498][ T561] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.888565][ T561] device veth1_macvtap left promiscuous mode [ 145.893828][ T1804] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 145.895131][ T561] device veth0_vlan left promiscuous mode [ 145.905612][ T1804] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.946426][ T283] EXT4-fs (loop1): unmounting filesystem. [ 145.952391][ T1809] loop4: detected capacity change from 0 to 1024 [ 145.960355][ T1809] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 146.025869][ T1809] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 146.036081][ T1809] EXT4-fs error (device loop4): ext4_get_journal_inode:5717: inode #5: comm syz.4.403: unexpected bad inode w/o EXT4_IGET_BAD [ 146.049612][ T1809] EXT4-fs (loop4): no journal found [ 146.055075][ T1809] EXT4-fs (loop4): can't get journal size [ 146.071691][ T1809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.094891][ T285] EXT4-fs (loop4): unmounting filesystem. [ 146.099633][ T1816] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 146.196085][ T6] usb 4-1: USB disconnect, device number 8 [ 146.289698][ T1831] xt_hashlimit: size too large, truncated to 1048576 [ 146.296445][ T1831] xt_hashlimit: max too large, truncated to 1048576 [ 146.384226][ T1840] loop5: detected capacity change from 0 to 4096 [ 146.392078][ T1840] EXT4-fs (loop5): Test dummy encryption mode enabled [ 146.432295][ T1840] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 146.651190][ T287] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.694347][ T1843] loop3: detected capacity change from 0 to 40427 [ 146.712199][ T1843] F2FS-fs (loop3): fault_injection options not supported [ 146.719317][ T1843] F2FS-fs (loop3): fault_type options not supported [ 146.726015][ T1843] F2FS-fs (loop3): Image doesn't support compression [ 146.733865][ T1843] F2FS-fs (loop3): invalid crc value [ 146.744097][ T1843] F2FS-fs (loop3): Found nat_bits in checkpoint [ 146.787598][ T1843] F2FS-fs (loop3): Start checkpoint disabled! [ 146.795851][ T1843] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 146.803392][ T1843] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 146.853151][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.881866][ T287] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.912233][ T287] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 146.930627][ T287] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 146.947983][ T287] usb 2-1: Manufacturer: syz [ 147.032296][ T287] usb 2-1: config 0 descriptor?? [ 148.591215][ T1420] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 148.676033][ T287] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 148.686753][ T287] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 148.693961][ T287] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 148.700932][ T287] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 148.707833][ T287] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 148.715099][ T287] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 148.721980][ T287] pyra 0003:1E7D:2CF6.0003: unknown main item tag 0x0 [ 148.737080][ T287] pyra 0003:1E7D:2CF6.0003: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 148.802469][ T1420] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.818136][ T1420] usb 5-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.831047][ T1420] usb 5-1: config 1 interface 0 has no altsetting 0 [ 148.838508][ T1772] EXT4-fs (loop5): unmounting filesystem. [ 148.840669][ T1420] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 148.853414][ T1420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.861455][ T1420] usb 5-1: Product: syz [ 148.865648][ T1420] usb 5-1: Manufacturer: syz [ 148.870673][ T1420] usb 5-1: SerialNumber: syz [ 148.875527][ T500] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 148.883376][ T1838] netlink: 64 bytes leftover after parsing attributes in process `syz.1.411'. [ 148.900690][ T1838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.913399][ T1838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.921549][ T1878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63770 sclass=netlink_route_socket pid=1878 comm=syz.5.422 [ 148.935475][ T287] pyra 0003:1E7D:2CF6.0003: couldn't init struct pyra_device [ 148.944562][ T287] pyra 0003:1E7D:2CF6.0003: couldn't install mouse [ 148.952748][ T287] pyra: probe of 0003:1E7D:2CF6.0003 failed with error -71 [ 148.975980][ T287] usb 2-1: USB disconnect, device number 4 [ 148.978707][ T1885] loop5: detected capacity change from 0 to 512 [ 148.998657][ T1884] fido_id[1884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 149.023467][ T1885] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.424: bad orphan inode 11862016 [ 149.034160][ T1885] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 149.043301][ T1885] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.061193][ T500] usb 1-1: Using ep0 maxpacket: 16 [ 149.068414][ T1772] EXT4-fs (loop5): unmounting filesystem. [ 149.075077][ T500] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.086479][ T500] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.096853][ T500] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 149.115384][ T500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.122296][ T500] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 149.131461][ T500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.140213][ T500] usb 1-1: config 0 descriptor?? [ 149.454074][ T1895] loop1: detected capacity change from 0 to 1024 [ 149.472427][ T1895] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 149.481082][ T1895] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.498963][ T283] EXT4-fs (loop1): unmounting filesystem. [ 149.570508][ T500] hid (null): unknown global tag 0xe [ 149.575942][ T500] hid (null): unknown global tag 0xd [ 149.583150][ T1902] capability: warning: `syz.3.428' uses deprecated v2 capabilities in a way that may be insecure [ 149.584762][ T500] hid (null): unknown global tag 0xc [ 149.599055][ T500] hid (null): unknown global tag 0xe [ 149.604631][ T500] hid (null): global environment stack underflow [ 149.611201][ T500] hid (null): unknown global tag 0xd9 [ 149.616838][ T500] hid (null): unknown global tag 0xd [ 149.645823][ T500] hid (null): unknown global tag 0xc [ 149.662609][ T500] hid (null): global environment stack underflow [ 149.669042][ T500] hid (null): unknown global tag 0xc [ 149.676421][ T500] hid (null): nested delimiters [ 149.765115][ T1909] loop1: detected capacity change from 0 to 4096 [ 149.775796][ T1909] EXT4-fs (loop1): Test dummy encryption mode enabled [ 149.811533][ T500] hid (null): nested delimiters [ 149.822701][ T1911] process 'syz.3.431' launched '/dev/fd/4' with NULL argv: empty string added [ 149.855412][ T1913] fuse: Bad value for 'group_id' [ 149.896268][ T500] hid (null): nested delimiters [ 149.928247][ T1909] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 149.953823][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 149.953882][ T28] audit: type=1326 audit(1768787784.785:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1898 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 150.268189][ T500] hid (null): unknown global tag 0xd [ 150.426745][ T500] hid (null): unknown global tag 0xe [ 150.442436][ T500] hid (null): unknown global tag 0xd [ 150.451673][ T500] hid (null): unknown global tag 0xd [ 150.457020][ T28] audit: type=1326 audit(1768787784.785:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1898 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 150.481019][ T500] hid (null): unknown global tag 0xe [ 150.486504][ T500] hid (null): unknown global tag 0xd [ 150.491976][ T500] hid (null): unknown global tag 0xd [ 150.497314][ T500] hid (null): report_id 60851 is invalid [ 150.507878][ T500] hid (null): unknown global tag 0xe [ 150.520641][ T28] audit: type=1326 audit(1768787784.785:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1898 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 150.550376][ T500] hid (null): invalid report_size -669116054 [ 150.621928][ T500] hid (null): global environment stack underflow [ 150.628332][ T500] hid (null): unknown global tag 0xe [ 150.633917][ T500] hid (null): unknown global tag 0xe [ 150.636028][ T28] audit: type=1326 audit(1768787784.785:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1898 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 150.641041][ T500] hid (null): unknown global tag 0xd [ 150.662862][ T28] audit: type=1326 audit(1768787784.785:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1898 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 150.669953][ T283] EXT4-fs (loop1): unmounting filesystem. [ 150.691400][ T28] audit: type=1326 audit(1768787784.795:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1898 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 150.731463][ T500] usb 1-1: USB disconnect, device number 10 [ 150.838951][ T1420] usb 5-1: USB disconnect, device number 6 [ 150.900213][ T28] audit: type=1326 audit(1768787784.795:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1898 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 150.985242][ T28] audit: type=1326 audit(1768787784.795:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1898 comm="syz.1.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66cfd9acb9 code=0x7ffc0000 [ 151.009966][ T28] audit: type=1400 audit(1768787785.125:812): avc: denied { execute_no_trans } for pid=1910 comm="syz.3.431" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 151.025375][ T1931] loop1: detected capacity change from 0 to 512 [ 151.040196][ T28] audit: type=1400 audit(1768787785.625:813): avc: denied { bind } for pid=1924 comm="syz.0.434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 151.066138][ T1931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 151.074909][ T1931] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 151.217414][ T1941] netlink: 48 bytes leftover after parsing attributes in process `syz.1.438'. [ 151.252502][ T1945] netlink: 'syz.1.439': attribute type 4 has an invalid length. [ 151.274771][ T1945] loop1: detected capacity change from 0 to 512 [ 151.291679][ T1946] xt_hashlimit: size too large, truncated to 1048576 [ 151.298391][ T1946] xt_hashlimit: max too large, truncated to 1048576 [ 151.337207][ T1420] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 151.378857][ T1945] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 151.428896][ T1945] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.711198][ T287] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 151.870930][ T1420] usb 5-1: not running at top speed; connect to a high speed hub [ 151.883865][ T1420] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 151.892944][ T1420] usb 5-1: config 1 has no interface number 1 [ 151.900531][ T1420] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 151.910118][ T1420] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.918341][ T1420] usb 5-1: Product: syz [ 151.922661][ T1420] usb 5-1: Manufacturer: syz [ 151.927293][ T1420] usb 5-1: SerialNumber: syz [ 151.932062][ T471] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 151.977952][ T287] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.988202][ T287] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.997920][ T287] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 152.007089][ T287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.015114][ T287] usb 2-1: SerialNumber: syz [ 152.026634][ T287] usb 2-1: 0:2 : does not exist [ 152.132294][ T471] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.142906][ T471] usb 4-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 152.155825][ T471] usb 4-1: config 1 interface 0 has no altsetting 0 [ 152.163805][ T471] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 152.172933][ T471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.181448][ T471] usb 4-1: Product: syz [ 152.186216][ T471] usb 4-1: Manufacturer: syz [ 152.190841][ T471] usb 4-1: SerialNumber: syz [ 152.225924][ T1945] overlayfs: './file2' not a directory [ 152.233356][ T1945] overlayfs: './file1' not a directory [ 152.242078][ T1964] netlink: 'syz.5.444': attribute type 3 has an invalid length. [ 152.247684][ T1420] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 152.277237][ T1420] usb 5-1: USB disconnect, device number 7 [ 152.440592][ T287] usb 2-1: USB disconnect, device number 5 [ 152.920404][ T1970] loop4: detected capacity change from 0 to 4096 [ 152.931893][ T1970] EXT4-fs (loop4): Test dummy encryption mode enabled [ 153.059023][ T1970] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 153.210276][ T471] usb 4-1: USB disconnect, device number 9 [ 153.278798][ T283] EXT4-fs (loop1): unmounting filesystem. [ 153.765815][ T285] EXT4-fs (loop4): unmounting filesystem. [ 153.896961][ T1986] loop1: detected capacity change from 0 to 1024 [ 153.903394][ T471] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 153.904141][ T1986] EXT4-fs: Ignoring removed mblk_io_submit option [ 153.924189][ T1986] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 154.876062][ T500] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 155.009860][ T1993] loop4: detected capacity change from 0 to 4096 [ 155.294284][ T1993] EXT4-fs (loop4): Test dummy encryption mode enabled [ 155.314391][ T1993] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.342027][ T471] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 155.352292][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 155.352312][ T28] audit: type=1326 audit(1768787790.175:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 155.411277][ T500] usb 6-1: Using ep0 maxpacket: 8 [ 155.521558][ T500] usb 6-1: too many configurations: 213, using maximum allowed: 8 [ 155.530595][ T1986] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2749: inode #15: comm syz.1.447: corrupted in-inode xattr [ 155.606649][ T1996] xt_hashlimit: size too large, truncated to 1048576 [ 155.613414][ T1996] xt_hashlimit: max too large, truncated to 1048576 [ 155.653720][ T28] audit: type=1326 audit(1768787790.175:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 155.677206][ T1986] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 155.678358][ T285] EXT4-fs (loop4): unmounting filesystem. [ 155.695924][ T471] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.697024][ T28] audit: type=1326 audit(1768787790.175:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 155.707767][ T500] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 155.735787][ T500] usb 6-1: can't read configurations, error -61 [ 155.757926][ T28] audit: type=1326 audit(1768787790.175:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 155.784171][ T28] audit: type=1326 audit(1768787790.175:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 155.859799][ T28] audit: type=1326 audit(1768787790.175:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 155.883364][ T471] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 155.892496][ T471] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.900489][ T471] usb 4-1: Product: syz [ 155.905276][ T471] usb 4-1: Manufacturer: 傐偩蹥环萄ઽۻ窹腲祌挡擎䟍䋋䐙錙堟ꂻ⡥윕ஓ箭挞蠘ϑ퐂悹꿮葓䯎⧗㉸獇ẹ蔶홋鿩뭌籧┣웱䞿ꌌ冣켔阙婚渲栋봔ꐘｖ崠໑ᣞ쀉쵣졞롬꾷ৠשּ踱鍛렕竅䒡ꎧ땓粟窍샑䦠߹䤈榭摳ٙ瀼⶯ⱺပ恺埜Ｑ犛쥇楣褩䯔礞꽚㴗ኗ复㸠஺秕厹䓱⁖꠾ [ 155.938655][ T28] audit: type=1326 audit(1768787790.175:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 155.963478][ T28] audit: type=1326 audit(1768787790.175:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz.4.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a7fd9acb9 code=0x7ffc0000 [ 156.001611][ T500] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 156.033457][ T471] usb 4-1: SerialNumber: syz [ 156.481234][ T500] usb 6-1: Using ep0 maxpacket: 8 [ 156.519937][ T500] usb 6-1: too many configurations: 213, using maximum allowed: 8 [ 156.878781][ T471] usb 4-1: 0:2 : does not exist [ 156.897503][ T471] usb 4-1: USB disconnect, device number 10 [ 156.910769][ T2013] netlink: 52 bytes leftover after parsing attributes in process `syz.3.458'. [ 156.932499][ T500] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 156.951715][ T500] usb 6-1: can't read configurations, error -71 [ 156.975451][ T2014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 156.991482][ T500] usb usb6-port1: attempt power cycle [ 156.997044][ T28] audit: type=1400 audit(1768787790.745:847): avc: denied { rmdir } for pid=283 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.039591][ T28] audit: type=1400 audit(1768787790.745:848): avc: denied { unlink } for pid=283 comm="syz-executor" name="file1" dev="loop1" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 157.055419][ T2022] device vlan2 entered promiscuous mode [ 157.113419][ T2022] device veth0 entered promiscuous mode [ 157.129038][ T2022] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 157.155601][ T2025] loop3: detected capacity change from 0 to 512 [ 157.159349][ T2027] loop4: detected capacity change from 0 to 256 [ 157.168383][ T2025] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 157.200409][ T2027] exfat: Unknown parameter 'keep_last_scard' [ 157.207203][ T2025] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 157.251471][ T2005] EXT4-fs (loop1): unmounting filesystem. [ 157.455908][ T2027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.463'. [ 157.501289][ T500] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 157.553620][ T500] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.591554][ T500] usb 6-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 157.605259][ T500] usb 6-1: config 1 interface 0 has no altsetting 0 [ 157.614646][ T500] usb 6-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 157.624455][ T500] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.633130][ T500] usb 6-1: Product: syz [ 157.637571][ T500] usb 6-1: Manufacturer: syz [ 157.645175][ T500] usb 6-1: SerialNumber: syz [ 157.934664][ T500] usb 6-1: USB disconnect, device number 4 [ 158.121234][ T2025] loop3: detected capacity change from 0 to 256 [ 158.129803][ T2025] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 158.148085][ T2025] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 158.346772][ T2042] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.354023][ T2042] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.378112][ T2042] device bridge_slave_0 entered promiscuous mode [ 158.392237][ T2042] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.407591][ T2042] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.422428][ T2042] device bridge_slave_1 entered promiscuous mode [ 158.507736][ T2042] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.514846][ T2042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.522138][ T2042] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.529257][ T2042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.570324][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.578200][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.586256][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.604859][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.613094][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.620156][ T439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.627923][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.636444][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.643511][ T439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.652347][ T498] device bridge_slave_1 left promiscuous mode [ 158.658560][ T498] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.666354][ T498] device bridge_slave_0 left promiscuous mode [ 158.672639][ T498] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.680799][ T498] device veth1_macvtap left promiscuous mode [ 158.687250][ T498] device veth0_vlan left promiscuous mode [ 158.752678][ T2055] loop6: detected capacity change from 0 to 7 [ 158.759315][ T337] loop6: [ 158.767423][ T2055] loop6: [ 158.782002][ T2055] syz.5.470[2055] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.782854][ T2055] netlink: 88 bytes leftover after parsing attributes in process `syz.5.470'. [ 158.803868][ T2055] netlink: 48 bytes leftover after parsing attributes in process `syz.5.470'. [ 158.822834][ T102] loop6: [ 158.836937][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.857113][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.882225][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 158.926522][ T2042] device veth0_vlan entered promiscuous mode [ 158.933270][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.959233][ T2042] device veth1_macvtap entered promiscuous mode [ 158.967421][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.976774][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.984408][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.992847][ T2057] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.999887][ T2057] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.007871][ T2057] device bridge_slave_0 entered promiscuous mode [ 159.018734][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.031658][ T2057] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.038764][ T2057] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.046485][ T2057] device bridge_slave_1 entered promiscuous mode [ 159.059508][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 159.149058][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.159320][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.177079][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.186689][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.195223][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.202280][ T439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.210478][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.219037][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.254068][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.261172][ T439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.277230][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.339052][ T2077] loop6: detected capacity change from 0 to 4096 [ 159.346263][ T2077] EXT4-fs (loop6): Test dummy encryption mode enabled [ 159.441304][ T2077] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 159.717807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 159.752229][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 159.786190][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 159.799406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 159.846015][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.866655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.887092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.900162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.912611][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.925034][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.949963][ T2057] device veth0_vlan entered promiscuous mode [ 159.982039][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.990174][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 160.381174][ T2097] loop5: detected capacity change from 0 to 4096 [ 160.983473][ T2097] EXT4-fs (loop5): Test dummy encryption mode enabled [ 161.102389][ T2057] device veth1_macvtap entered promiscuous mode [ 161.141455][ T2097] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 161.157357][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 161.157766][ T28] audit: type=1326 audit(1768787795.995:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.5.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3304f9acb9 code=0x7ffc0000 [ 161.199382][ T28] audit: type=1326 audit(1768787795.995:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.5.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3304f9acb9 code=0x7ffc0000 [ 161.222789][ T28] audit: type=1326 audit(1768787795.995:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.5.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f3304f9acb9 code=0x7ffc0000 [ 161.246746][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 161.247233][ T28] audit: type=1326 audit(1768787795.995:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.5.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3304f9acb9 code=0x7ffc0000 [ 161.275908][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 161.296720][ T28] audit: type=1326 audit(1768787795.995:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.5.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3304f9acb9 code=0x7ffc0000 [ 161.345160][ T1772] EXT4-fs (loop5): unmounting filesystem. [ 161.347434][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.359328][ T498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.371681][ T28] audit: type=1326 audit(1768787795.995:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.5.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3304f9acb9 code=0x7ffc0000 [ 161.421306][ T28] audit: type=1326 audit(1768787795.995:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.5.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3304f9acb9 code=0x7ffc0000 [ 161.471199][ T28] audit: type=1326 audit(1768787795.995:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2087 comm="syz.5.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3304f9acb9 code=0x7ffc0000 [ 161.521001][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.614013][ T2107] loop7: detected capacity change from 0 to 40427 [ 161.630777][ T2107] F2FS-fs (loop7): fault_injection options not supported [ 161.648090][ T2107] F2FS-fs (loop7): fault_type options not supported [ 161.661975][ T2107] F2FS-fs (loop7): invalid crc value [ 161.668202][ T2107] F2FS-fs (loop7): Mismatch valid blocks 2 vs. 16 [ 161.674991][ T2107] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-117) [ 161.731281][ T287] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 161.789450][ T2042] EXT4-fs (loop6): unmounting filesystem. [ 161.932384][ T287] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.942627][ T287] usb 5-1: config 1 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 161.955787][ T287] usb 5-1: config 1 interface 0 has no altsetting 0 [ 162.256695][ T287] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 162.268086][ T287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.276860][ T287] usb 5-1: Product: syz [ 162.281092][ T287] usb 5-1: Manufacturer: syz [ 162.288149][ T287] usb 5-1: SerialNumber: syz [ 162.766194][ T471] usb 5-1: USB disconnect, device number 8 [ 163.498886][ T28] audit: type=1400 audit(1768787798.335:902): avc: denied { watch } for pid=2133 comm="syz.0.490" path="/106/file0" dev="tmpfs" ino=578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 163.551292][ T473] Bluetooth: hci0: command 0x1003 tx timeout [ 163.557379][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.568898][ T2115] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 163.690257][ T2138] loop4: detected capacity change from 0 to 40427 [ 163.833051][ T2146] loop6: detected capacity change from 0 to 4096 [ 163.844346][ T2146] EXT4-fs (loop6): Test dummy encryption mode enabled [ 163.932289][ T2138] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 164.029127][ T2146] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 164.056588][ T28] audit: type=1326 audit(1768787798.895:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2139 comm="syz.6.492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c7d19acb9 code=0x7ffc0000 [ 164.129622][ T2138] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 164.272967][ T2138] F2FS-fs (loop4): invalid crc value [ 164.505185][ T2138] F2FS-fs (loop4): Found nat_bits in checkpoint [ 164.620131][ T2138] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 164.627284][ T2138] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 164.664398][ T2042] EXT4-fs (loop6): unmounting filesystem. [ 164.811189][ T287] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 164.852065][ T2163] loop6: detected capacity change from 0 to 40427 [ 164.862981][ T2163] F2FS-fs (loop6): fault_injection options not supported [ 164.870967][ T2163] F2FS-fs (loop6): fault_type options not supported [ 164.888800][ T2163] F2FS-fs (loop6): invalid crc value [ 164.895060][ T2163] F2FS-fs (loop6): Mismatch valid blocks 2 vs. 16 [ 164.901989][ T2163] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-117) [ 165.001199][ T287] usb 6-1: Using ep0 maxpacket: 8 [ 165.007752][ T287] usb 6-1: config 0 has an invalid descriptor of length 132, skipping remainder of the config [ 165.020069][ T287] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 165.029311][ T287] usb 6-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 165.038529][ T287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.047433][ T287] usb 6-1: config 0 descriptor?? [ 165.071297][ T471] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 165.252277][ T471] usb 8-1: config 16 has an invalid interface number: 19 but max is 0 [ 165.260518][ T471] usb 8-1: config 16 has no interface number 0 [ 165.267029][ T471] usb 8-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 165.278419][ T471] usb 8-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.289842][ T471] usb 8-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee [ 165.299010][ T471] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.307176][ T471] usb 8-1: Product: syz [ 165.313427][ T471] usb 8-1: Manufacturer: syz [ 165.318089][ T471] usb 8-1: SerialNumber: syz [ 165.405924][ T2181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 165.523858][ T287] usb 6-1: string descriptor 0 read error: -71 [ 165.530668][ T287] usb 6-1: USB disconnect, device number 5 [ 165.691234][ T500] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 165.702748][ T471] usb 8-1: USB disconnect, device number 2 [ 165.872325][ T500] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.882493][ T500] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.894813][ T500] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.904168][ T500] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.904532][ T337] udevd[337]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 165.912212][ T500] usb 5-1: Product: syz [ 165.932440][ T500] usb 5-1: Manufacturer: syz [ 165.937087][ T500] usb 5-1: SerialNumber: syz [ 165.991569][ T498] Bluetooth: hci0: Frame reassembly failed (-84) [ 166.144419][ T2192] loop5: detected capacity change from 0 to 40427 [ 166.159218][ T2192] F2FS-fs (loop5): fault_injection options not supported [ 166.170519][ T500] usb 5-1: USB disconnect, device number 9 [ 166.182942][ T2192] F2FS-fs (loop5): fault_type options not supported [ 166.198641][ T2192] F2FS-fs (loop5): Image doesn't support compression [ 166.207488][ T2192] F2FS-fs (loop5): invalid crc value [ 166.213809][ T2192] F2FS-fs (loop5): Found nat_bits in checkpoint [ 166.240007][ T2192] F2FS-fs (loop5): Start checkpoint disabled! [ 166.246544][ T2192] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0 [ 166.254094][ T2192] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 166.341676][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 166.341689][ T28] audit: type=1400 audit(1768787801.185:919): avc: denied { ioctl } for pid=2191 comm="syz.5.505" path="/18/file0/file1" dev="loop5" ino=10 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 166.372310][ T2202] F2FS-fs (loop5): Skipping Checkpoint. Checkpoints currently disabled. [ 166.395835][ T8] kworker/u4:0: attempt to access beyond end of device [ 166.395835][ T8] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 166.561234][ T2204] loop7: detected capacity change from 0 to 4096 [ 166.572462][ T2204] EXT4-fs (loop7): Test dummy encryption mode enabled [ 166.658507][ T2204] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 166.721268][ T28] audit: type=1326 audit(1768787801.515:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.7.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac899acb9 code=0x7ffc0000 [ 166.845815][ T28] audit: type=1326 audit(1768787801.515:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.7.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac899acb9 code=0x7ffc0000 [ 167.064231][ T28] audit: type=1326 audit(1768787801.515:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.7.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7ffac899acb9 code=0x7ffc0000 [ 167.332731][ T28] audit: type=1326 audit(1768787801.515:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.7.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac899acb9 code=0x7ffc0000 [ 167.401332][ T28] audit: type=1326 audit(1768787801.515:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.7.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac899acb9 code=0x7ffc0000 [ 167.425125][ T2057] EXT4-fs (loop7): unmounting filesystem. [ 167.455214][ T2215] loop7: detected capacity change from 0 to 512 [ 167.463075][ T28] audit: type=1326 audit(1768787801.515:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.7.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffac899acb9 code=0x7ffc0000 [ 167.486569][ T28] audit: type=1326 audit(1768787801.525:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.7.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac899acb9 code=0x7ffc0000 [ 167.510177][ T28] audit: type=1326 audit(1768787801.525:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2196 comm="syz.7.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffac899acb9 code=0x7ffc0000 [ 167.587790][ T2219] xt_hashlimit: size too large, truncated to 1048576 [ 167.594547][ T2219] xt_hashlimit: max too large, truncated to 1048576 [ 167.801307][ T2215] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 167.813641][ T2215] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.749665][ T473] Bluetooth: hci0: command 0x1003 tx timeout [ 168.972627][ T2057] EXT4-fs (loop7): unmounting filesystem. [ 168.991962][ T28] audit: type=1400 audit(1768787803.835:928): avc: denied { bind } for pid=2230 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 169.061202][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.091254][ T2190] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 169.560439][ T2248] loop7: detected capacity change from 0 to 4096 [ 169.593480][ T2248] EXT4-fs (loop7): Test dummy encryption mode enabled [ 170.030116][ T2248] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 170.162935][ T2258] syz.4.524[2258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.163018][ T2258] syz.4.524[2258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.215531][ T2259] syz.4.524[2259] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.251395][ T2260] netlink: 24 bytes leftover after parsing attributes in process `syz.4.524'. [ 170.276524][ T2057] EXT4-fs (loop7): unmounting filesystem. [ 170.425169][ T2261] loop6: detected capacity change from 0 to 4096 [ 170.434735][ T2261] EXT4-fs (loop6): Test dummy encryption mode enabled [ 170.447203][ T2261] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 170.461526][ T2276] loop4: detected capacity change from 0 to 256 [ 170.481030][ T2276] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 170.712660][ T2280] loop5: detected capacity change from 0 to 128 [ 170.841192][ T287] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.981300][ T2280] syz.5.531: attempt to access beyond end of device [ 170.981300][ T2280] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 171.001237][ T2280] Buffer I/O error on dev loop5, logical block 69, lost async page write [ 171.051175][ T287] usb 5-1: Using ep0 maxpacket: 16 [ 171.057453][ T287] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 171.073172][ T287] usb 5-1: config 0 has no interface number 0 [ 171.085817][ T287] usb 5-1: too many endpoints for config 0 interface 251 altsetting 18: 76, using maximum allowed: 30 [ 171.107619][ T287] usb 5-1: config 0 interface 251 altsetting 18 has 0 endpoint descriptors, different from the interface descriptor's value: 76 [ 171.143096][ T287] usb 5-1: config 0 interface 251 has no altsetting 0 [ 171.151166][ C1] ================================================================== [ 171.159247][ C1] BUG: KASAN: use-after-free in __run_timers+0x340/0x9f0 [ 171.166289][ C1] Write of size 8 at addr ffff88811daa8a00 by task syz.0.527/2263 [ 171.173282][ T287] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 171.174104][ C1] [ 171.174111][ C1] CPU: 1 PID: 2263 Comm: syz.0.527 Not tainted syzkaller #0 [ 171.192717][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.193738][ T287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.202771][ C1] Call Trace: [ 171.202779][ C1] [ 171.202785][ C1] __dump_stack+0x21/0x24 [ 171.221226][ C1] dump_stack_lvl+0x110/0x170 [ 171.225923][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 171.230963][ C1] ? update_rq_clock+0x536/0x5c0 [ 171.231363][ T287] usb 5-1: Product: syz [ 171.235925][ C1] ? __run_timers+0x340/0x9f0 [ 171.244750][ C1] print_address_description+0x71/0x200 [ 171.250275][ T287] usb 5-1: Manufacturer: syz [ 171.250313][ C1] print_report+0x4a/0x60 [ 171.259216][ C1] kasan_report+0x122/0x150 [ 171.260390][ T287] usb 5-1: SerialNumber: syz [ 171.263745][ C1] ? __run_timers+0x340/0x9f0 [ 171.263773][ C1] __asan_report_store8_noabort+0x17/0x20 [ 171.278751][ C1] __run_timers+0x340/0x9f0 [ 171.281628][ T287] r8152-cfgselector 5-1: config 0 descriptor?? [ 171.283299][ C1] ? sched_clock+0x9/0x10 [ 171.293782][ C1] ? sched_clock_cpu+0x6e/0x260 [ 171.298663][ C1] ? calc_index+0x200/0x200 [ 171.303187][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 171.308422][ C1] run_timer_softirq+0x6a/0xf0 [ 171.313208][ C1] handle_softirqs+0x1d7/0x600 [ 171.317988][ C1] __irq_exit_rcu+0x52/0xf0 [ 171.322501][ C1] irq_exit_rcu+0x9/0x10 [ 171.326753][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 171.332414][ C1] [ 171.335350][ C1] [ 171.338287][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 171.344283][ C1] RIP: 0010:_copy_to_iter+0x7c/0xea0 [ 171.349589][ C1] Code: 40 6e 41 86 48 c7 84 24 90 00 00 00 c0 e2 65 82 48 8d 8c 24 80 00 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f8 f8 f8 4a 89 04 39 <48> b8 f8 f8 f8 f3 f3 f3 f3 f3 48 89 4c 24 70 4a 89 44 39 08 e8 6b [ 171.369205][ C1] RSP: 0018:ffffc9000e0676c0 EFLAGS: 00000a06 [ 171.375287][ C1] RAX: f8f8f8f8f1f1f1f1 RBX: 0000000000000000 RCX: 1ffff92001c0cee8 [ 171.383271][ C1] RDX: ffffc9000e067db0 RSI: 0000000000000000 RDI: ffff88811fa9d400 [ 171.391250][ C1] RBP: ffffc9000e067810 R08: 0000000000000000 R09: ffffffff83ee1db0 [ 171.399229][ C1] R10: 0000000000000000 R11: ffffffff84552db0 R12: 0000000000000000 [ 171.407212][ C1] R13: 0000000000000000 R14: ffffc9000e067db0 R15: dffffc0000000000 [ 171.415202][ C1] ? __cfi_unix_stream_read_actor+0x10/0x10 [ 171.421111][ C1] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 171.426762][ C1] ? __switch_to_asm+0x3a/0x60 [ 171.431540][ C1] ? __cfi__copy_to_iter+0x10/0x10 [ 171.436670][ C1] ? release_firmware_map_entry+0x190/0x190 [ 171.442579][ C1] ? __check_object_size+0x90/0x600 [ 171.447806][ C1] ? __kasan_check_read+0x11/0x20 [ 171.452839][ C1] simple_copy_to_iter+0x50/0x70 [ 171.457790][ C1] __skb_datagram_iter+0xf1/0x730 [ 171.462838][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 171.468750][ C1] ? preempt_schedule+0xbc/0xd0 [ 171.473616][ C1] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 171.479262][ C1] ? __kasan_check_write+0x14/0x20 [ 171.484382][ C1] skb_copy_datagram_iter+0x40/0x150 [ 171.489690][ C1] unix_stream_read_actor+0x6f/0xc0 [ 171.494917][ C1] unix_stream_read_generic+0xd07/0x2000 [ 171.498094][ T2276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.500599][ C1] ? unix_stream_read_actor+0xc0/0xc0 [ 171.514301][ C1] ? debug_smp_processor_id+0x17/0x20 [ 171.519686][ C1] ? __cfi_autoremove_wake_function+0x10/0x10 [ 171.525778][ C1] ? selinux_socket_recvmsg+0x22f/0x340 [ 171.529564][ T2276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.531364][ C1] ? __kasan_slab_free+0x11/0x20 [ 171.544010][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 171.549578][ C1] ? __cfi_selinux_socket_recvmsg+0x10/0x10 [ 171.555499][ C1] unix_stream_recvmsg+0x176/0x1d0 [ 171.560633][ C1] ? __cfi_unix_stream_recvmsg+0x10/0x10 [ 171.566304][ C1] ? __cfi_unix_stream_read_actor+0x10/0x10 [ 171.572223][ C1] ? security_socket_recvmsg+0x99/0xc0 [ 171.577698][ C1] __sys_recvfrom+0x354/0x4d0 [ 171.582393][ C1] ? __cfi___sys_recvfrom+0x10/0x10 [ 171.587612][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 171.593177][ C1] ? xfd_validate_state+0x70/0x150 [ 171.598310][ C1] ? __secure_computing+0xea/0x290 [ 171.603444][ C1] __x64_sys_recvfrom+0xe5/0x100 [ 171.608392][ C1] x64_sys_call+0x7c/0x9a0 [ 171.612819][ C1] do_syscall_64+0x4c/0xa0 [ 171.617245][ C1] ? clear_bhb_loop+0x30/0x80 [ 171.621941][ C1] ? clear_bhb_loop+0x30/0x80 [ 171.626641][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.632555][ C1] RIP: 0033:0x7fe457b9acb9 [ 171.636990][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.656610][ C1] RSP: 002b:00007fe4589c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 171.665027][ C1] RAX: ffffffffffffffda RBX: 00007fe457e15fa0 RCX: 00007fe457b9acb9 [ 171.673000][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 171.680971][ C1] RBP: 00007fe457c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 171.688952][ C1] R10: 0000000000010102 R11: 0000000000000246 R12: 0000000000000000 [ 171.696918][ C1] R13: 00007fe457e16038 R14: 00007fe457e15fa0 R15: 00007ffdf5605b88 [ 171.704891][ C1] [ 171.707924][ C1] [ 171.710261][ C1] Allocated by task 2190: [ 171.714579][ C1] kasan_set_track+0x4b/0x70 [ 171.719169][ C1] kasan_save_alloc_info+0x25/0x30 [ 171.724283][ C1] __kasan_kmalloc+0x95/0xb0 [ 171.728883][ C1] __kmalloc+0xb1/0x1e0 [ 171.733045][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 171.738073][ C1] hci_uart_tty_ioctl+0x3d6/0xa20 [ 171.743104][ C1] tty_ioctl+0x8ef/0xc60 [ 171.747351][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 171.752024][ C1] __x64_sys_ioctl+0x7b/0x90 [ 171.756612][ C1] x64_sys_call+0x58b/0x9a0 [ 171.761136][ C1] do_syscall_64+0x4c/0xa0 [ 171.765562][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.771456][ C1] [ 171.773781][ C1] Freed by task 2190: [ 171.777754][ C1] kasan_set_track+0x4b/0x70 [ 171.782351][ C1] kasan_save_free_info+0x31/0x50 [ 171.787387][ C1] ____kasan_slab_free+0x132/0x180 [ 171.792504][ C1] __kasan_slab_free+0x11/0x20 [ 171.797265][ C1] slab_free_freelist_hook+0xc2/0x190 [ 171.802642][ C1] __kmem_cache_free+0xb7/0x1b0 [ 171.807499][ C1] kfree+0x6f/0xf0 [ 171.811234][ C1] hci_release_dev+0x12a3/0x13b0 [ 171.816178][ C1] bt_host_release+0x82/0x90 [ 171.820779][ C1] device_release+0xa4/0x1d0 [ 171.825369][ C1] kobject_put+0x19d/0x280 [ 171.829791][ C1] put_device+0x1f/0x30 [ 171.833951][ C1] hci_dev_cmd+0x279/0x740 [ 171.838382][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 171.843061][ C1] sock_do_ioctl+0x114/0x330 [ 171.847644][ C1] sock_ioctl+0x4ca/0x720 [ 171.851975][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 171.856651][ C1] __x64_sys_ioctl+0x7b/0x90 [ 171.861249][ C1] x64_sys_call+0x58b/0x9a0 [ 171.865758][ C1] do_syscall_64+0x4c/0xa0 [ 171.870183][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.876081][ C1] [ 171.878405][ C1] Last potentially related work creation: [ 171.884118][ C1] kasan_save_stack+0x3a/0x60 [ 171.888799][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 171.894172][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 171.899979][ C1] insert_work+0x51/0x300 [ 171.904322][ C1] __queue_work+0x9b1/0xd30 [ 171.908831][ C1] queue_work_on+0xde/0x150 [ 171.913346][ C1] __hci_cmd_sync_sk+0xa7f/0xd30 [ 171.918292][ C1] hci_cmd_sync_status+0x53/0x120 [ 171.923317][ C1] hci_dev_cmd+0x35b/0x740 [ 171.927728][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 171.932404][ C1] sock_do_ioctl+0x114/0x330 [ 171.936997][ C1] sock_ioctl+0x4ca/0x720 [ 171.941353][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 171.946027][ C1] __x64_sys_ioctl+0x7b/0x90 [ 171.950611][ C1] x64_sys_call+0x58b/0x9a0 [ 171.955114][ C1] do_syscall_64+0x4c/0xa0 [ 171.959530][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.965430][ C1] [ 171.967760][ C1] Second to last potentially related work creation: [ 171.974335][ C1] kasan_save_stack+0x3a/0x60 [ 171.979013][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 171.984386][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 171.990224][ C1] insert_work+0x51/0x300 [ 171.994547][ C1] __queue_work+0x9b1/0xd30 [ 171.999061][ C1] queue_work_on+0xde/0x150 [ 172.003573][ C1] hci_cmd_timeout+0x191/0x200 [ 172.008344][ C1] process_one_work+0x71f/0xc40 [ 172.013198][ C1] worker_thread+0xa29/0x11e0 [ 172.017872][ C1] kthread+0x281/0x320 [ 172.021952][ C1] ret_from_fork+0x1f/0x30 [ 172.026369][ C1] [ 172.028689][ C1] The buggy address belongs to the object at ffff88811daa8000 [ 172.028689][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 172.042738][ C1] The buggy address is located 2560 bytes inside of [ 172.042738][ C1] 8192-byte region [ffff88811daa8000, ffff88811daaa000) [ 172.056193][ C1] [ 172.058519][ C1] The buggy address belongs to the physical page: [ 172.064935][ C1] page:ffffea000476aa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11daa8 [ 172.075172][ C1] head:ffffea000476aa00 order:3 compound_mapcount:0 compound_pincount:0 [ 172.083489][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 172.089566][ C1] raw: 4000000000010200 ffffea000483ee00 dead000000000003 ffff888100043500 [ 172.098145][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 172.106722][ C1] page dumped because: kasan: bad access detected [ 172.113130][ C1] page_owner tracks the page as allocated [ 172.118848][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 138, tgid 138 (dhcpcd), ts 6066419177, free_ts 0 [ 172.136470][ C1] post_alloc_hook+0x1f5/0x210 [ 172.141260][ C1] prep_new_page+0x1c/0x110 [ 172.145765][ C1] get_page_from_freelist+0x2d12/0x2d80 [ 172.151308][ C1] __alloc_pages+0x1d9/0x480 [ 172.155902][ C1] alloc_slab_page+0x6e/0xf0 [ 172.160505][ C1] new_slab+0x98/0x3d0 [ 172.164583][ C1] ___slab_alloc+0x6bd/0xb20 [ 172.169181][ C1] __slab_alloc+0x5e/0xa0 [ 172.173532][ C1] __kmem_cache_alloc_node+0x203/0x2c0 [ 172.178993][ C1] kmalloc_trace+0x29/0xb0 [ 172.183420][ C1] audit_log_d_path+0xc6/0x240 [ 172.188193][ C1] common_lsm_audit+0x330/0x1730 [ 172.193138][ C1] slow_avc_audit+0x1c4/0x240 [ 172.197817][ C1] avc_has_perm+0x1fb/0x250 [ 172.202338][ C1] file_has_perm+0x52d/0x700 [ 172.206933][ C1] match_file+0xc8/0x130 [ 172.211179][ C1] page_owner free stack trace missing [ 172.216544][ C1] [ 172.218867][ C1] Memory state around the buggy address: [ 172.224490][ C1] ffff88811daa8900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.232544][ C1] ffff88811daa8980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.240598][ C1] >ffff88811daa8a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.248653][ C1] ^ [ 172.252711][ C1] ffff88811daa8a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.260769][ C1] ffff88811daa8b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 172.268820][ C1] ================================================================== [ 172.276877][ C1] Disabling lock debugging due to kernel taint [ 172.283106][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 172.294822][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 172.303237][ C1] CPU: 1 PID: 2263 Comm: syz.0.527 Tainted: G B syzkaller #0 [ 172.312000][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 172.322049][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 172.327346][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 44 29 00 4c 89 ff e8 a0 80 b7 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 3c 71 6e 00 49 8b 7d 00 e8 33 7c [ 172.346949][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 172.353018][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888111f55100 [ 172.361007][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 172.368974][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 172.376947][ C1] R10: dffffc0000000000 R11: ffffed1023b55139 R12: dffffc0000000000 [ 172.384919][ C1] R13: 0000000000000000 R14: ffff88811daa89c8 R15: 0000000000000008 [ 172.392900][ C1] FS: 00007fe4589c66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 172.401837][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.408432][ C1] CR2: 0000200000002520 CR3: 0000000130e0b000 CR4: 00000000003506a0 [ 172.416416][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.424384][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.432358][ C1] Call Trace: [ 172.435634][ C1] [ 172.438482][ C1] delayed_work_timer_fn+0x61/0x80 [ 172.443610][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 172.449430][ C1] call_timer_fn+0x46/0x2a0 [ 172.453951][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 172.459786][ C1] __run_timers+0x689/0x9f0 [ 172.464314][ C1] ? calc_index+0x200/0x200 [ 172.468843][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 172.474066][ C1] run_timer_softirq+0x6a/0xf0 [ 172.478838][ C1] handle_softirqs+0x1d7/0x600 [ 172.483615][ C1] __irq_exit_rcu+0x52/0xf0 [ 172.488126][ C1] irq_exit_rcu+0x9/0x10 [ 172.492372][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 172.498018][ C1] [ 172.500952][ C1] [ 172.503882][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 172.509865][ C1] RIP: 0010:_copy_to_iter+0x7c/0xea0 [ 172.515152][ C1] Code: 40 6e 41 86 48 c7 84 24 90 00 00 00 c0 e2 65 82 48 8d 8c 24 80 00 00 00 48 c1 e9 03 48 b8 f1 f1 f1 f1 f8 f8 f8 f8 4a 89 04 39 <48> b8 f8 f8 f8 f3 f3 f3 f3 f3 48 89 4c 24 70 4a 89 44 39 08 e8 6b [ 172.534766][ C1] RSP: 0018:ffffc9000e0676c0 EFLAGS: 00000a06 [ 172.540832][ C1] RAX: f8f8f8f8f1f1f1f1 RBX: 0000000000000000 RCX: 1ffff92001c0cee8 [ 172.548800][ C1] RDX: ffffc9000e067db0 RSI: 0000000000000000 RDI: ffff88811fa9d400 [ 172.556774][ C1] RBP: ffffc9000e067810 R08: 0000000000000000 R09: ffffffff83ee1db0 [ 172.564746][ C1] R10: 0000000000000000 R11: ffffffff84552db0 R12: 0000000000000000 [ 172.572726][ C1] R13: 0000000000000000 R14: ffffc9000e067db0 R15: dffffc0000000000 [ 172.580705][ C1] ? __cfi_unix_stream_read_actor+0x10/0x10 [ 172.586602][ C1] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 172.592238][ C1] ? __switch_to_asm+0x3a/0x60 [ 172.597000][ C1] ? __cfi__copy_to_iter+0x10/0x10 [ 172.602113][ C1] ? release_firmware_map_entry+0x190/0x190 [ 172.608016][ C1] ? __check_object_size+0x90/0x600 [ 172.613229][ C1] ? __kasan_check_read+0x11/0x20 [ 172.618250][ C1] simple_copy_to_iter+0x50/0x70 [ 172.623190][ C1] __skb_datagram_iter+0xf1/0x730 [ 172.628216][ C1] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 172.634111][ C1] ? preempt_schedule+0xbc/0xd0 [ 172.638966][ C1] ? __cfi_simple_copy_to_iter+0x10/0x10 [ 172.644604][ C1] ? __kasan_check_write+0x14/0x20 [ 172.649715][ C1] skb_copy_datagram_iter+0x40/0x150 [ 172.655005][ C1] unix_stream_read_actor+0x6f/0xc0 [ 172.660222][ C1] unix_stream_read_generic+0xd07/0x2000 [ 172.665870][ C1] ? unix_stream_read_actor+0xc0/0xc0 [ 172.671252][ C1] ? debug_smp_processor_id+0x17/0x20 [ 172.676632][ C1] ? __cfi_autoremove_wake_function+0x10/0x10 [ 172.682702][ C1] ? selinux_socket_recvmsg+0x22f/0x340 [ 172.688253][ C1] ? __kasan_slab_free+0x11/0x20 [ 172.693194][ C1] ? slab_free_freelist_hook+0xc2/0x190 [ 172.698740][ C1] ? __cfi_selinux_socket_recvmsg+0x10/0x10 [ 172.704643][ C1] unix_stream_recvmsg+0x176/0x1d0 [ 172.709764][ C1] ? __cfi_unix_stream_recvmsg+0x10/0x10 [ 172.715398][ C1] ? __cfi_unix_stream_read_actor+0x10/0x10 [ 172.721297][ C1] ? security_socket_recvmsg+0x99/0xc0 [ 172.726756][ C1] __sys_recvfrom+0x354/0x4d0 [ 172.731438][ C1] ? __cfi___sys_recvfrom+0x10/0x10 [ 172.736645][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 172.742190][ C1] ? xfd_validate_state+0x70/0x150 [ 172.747321][ C1] ? __secure_computing+0xea/0x290 [ 172.752431][ C1] __x64_sys_recvfrom+0xe5/0x100 [ 172.757368][ C1] x64_sys_call+0x7c/0x9a0 [ 172.761787][ C1] do_syscall_64+0x4c/0xa0 [ 172.766204][ C1] ? clear_bhb_loop+0x30/0x80 [ 172.770889][ C1] ? clear_bhb_loop+0x30/0x80 [ 172.775567][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.781462][ C1] RIP: 0033:0x7fe457b9acb9 [ 172.785878][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.805478][ C1] RSP: 002b:00007fe4589c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 172.813897][ C1] RAX: ffffffffffffffda RBX: 00007fe457e15fa0 RCX: 00007fe457b9acb9 [ 172.821872][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 172.829839][ C1] RBP: 00007fe457c08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 172.837818][ C1] R10: 0000000000010102 R11: 0000000000000246 R12: 0000000000000000 [ 172.845806][ C1] R13: 00007fe457e16038 R14: 00007fe457e15fa0 R15: 00007ffdf5605b88 [ 172.853887][ C1] [ 172.856943][ C1] Modules linked in: [ 172.860848][ C1] ---[ end trace 0000000000000000 ]--- [ 172.866297][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 172.871591][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 44 29 00 4c 89 ff e8 a0 80 b7 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 3c 71 6e 00 49 8b 7d 00 e8 33 7c [ 172.891206][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 172.897283][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888111f55100 [ 172.905251][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 172.913224][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: fffffffffffffffb [ 172.921214][ C1] R10: dffffc0000000000 R11: ffffed1023b55139 R12: dffffc0000000000 [ 172.929193][ C1] R13: 0000000000000000 R14: ffff88811daa89c8 R15: 0000000000000008 [ 172.937184][ C1] FS: 00007fe4589c66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 172.946114][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 172.952722][ C1] CR2: 0000200000002520 CR3: 0000000130e0b000 CR4: 00000000003506a0 [ 172.960695][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.968666][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.976638][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 172.984364][ C1] Kernel Offset: disabled [ 172.988685][ C1] Rebooting in 86400 seconds..