last executing test programs: 4m45.325101309s ago: executing program 32 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1000000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x6, 0xb}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r6}, 0xc) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") keyctl$get_security(0x11, 0x0, 0x0, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) 2m4.024677241s ago: executing program 3 (id=2798): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000010000001801000020756c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009002000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2dc00, &(0x7f0000000b00)=ANY=[], 0x0) 2m3.972638202s ago: executing program 3 (id=2800): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) 2m3.915771223s ago: executing program 3 (id=2803): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)={0x34, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}}, 0x20048840) 2m3.869422954s ago: executing program 3 (id=2804): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000540)='./file0\x00', 0x18048, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x27d, &(0x7f0000000000)="$eJzs3cFqE0EYB/CvaZKNvdizeFjw4qmoJ69BKogBIZKDgmCgemlF2F6ipzyGT+DBR/IxeipeVppdmza2xYRs1ia/H4T9yD+7mWFgZw8zyfv7nw4PPh9/zH9+i04njWbEOM8jdqMR21HYKo+NSd2Oi8Yxv9YC5wAAy9PvD7t1t4HFff+Hz2RZd3j2zJX8lQx+VNIoAAAAAAAAAAAAKnfV+v84rXb9PwBQL+v/11+WdYc75fPbZdb/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU5zfO7+Q2vutsHACyf+R8ANo/5HwA2j/kfADbP6zdvX3Z7vf1+mnYiTsajwWhQHIv8+Yve/qN0Ynd61sloNNg+zx8XeXo5b8VOmT+5Mm/HwwdFfpY9e9WbyZM4qL77AAAAAAAAAAAAAAAAAAAA8F/YS9PJzv+4Zn//XhLl7v3ZvKgu/D7AzP79ZtxrrqwbAAAAAAAAAAAAAAAAAAAAcKsdf/l6ODw6+pDNUdxZ6Kxril95YWkXXLBIYsVfuhXn77TKwVjSleNptY1/165vmG4oYtUjuN7FnztEo76bEwAAAAAAAAAAAAAAAAAAbJjppt+6WwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Zn+/38FRVIUETHOC3V3FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhjvwMAAP//cUGYlA==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) 2m3.530687362s ago: executing program 3 (id=2814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2m3.218282759s ago: executing program 3 (id=2819): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100edff00029500000000000000b7020000000000007b9af8ff00000000c5090000ffffff807baaf0ff00000000bf2700000000000027080000fffdffffbfa400000000000007040000f0ffffff540200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/freeze_filesystems', 0x8080, 0x48) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10a0000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf25020000000c000300000000000000000014000c00fe800000000000feff000000000000bb"], 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000009, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001580)=@assoc_value={r4, 0x3}, &(0x7f00000015c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f00000000c0), 0x10) sendto$l2tp(r5, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x406, r6) write$sndseq(r7, &(0x7f00000005c0)=[{0x4, 0x0, 0x5, 0x5, @time={0xcbf, 0x6}, {0x1, 0xf8}, {0x7, 0x10}, @raw32={[0x0, 0x7fe, 0x82]}}, {0x2, 0x5, 0xff, 0x3, @tick=0x9, {0x1, 0x4}, {0x9, 0x81}, @connect={{0xd1, 0x83}, {0x1, 0x3f}}}], 0x38) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001440)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x108, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xffffffff, 0xffffff00, 0xff000000], 0x4e20, 0x4e21, 0x4e22, 0x4e23, 0x200000, 0x4, 0x9, 0x0, 0x6}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'ipvlan0\x00', 'caif0\x00', {0xff}, {0xff}, 0x87, 0x5, 0x7, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "7f56"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"c6a5", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0xf806}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2m3.218015919s ago: executing program 33 (id=2819): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100edff00029500000000000000b7020000000000007b9af8ff00000000c5090000ffffff807baaf0ff00000000bf2700000000000027080000fffdffffbfa400000000000007040000f0ffffff540200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/freeze_filesystems', 0x8080, 0x48) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10a0000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf25020000000c000300000000000000000014000c00fe800000000000feff000000000000bb"], 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000009, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001580)=@assoc_value={r4, 0x3}, &(0x7f00000015c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f00000000c0), 0x10) sendto$l2tp(r5, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x406, r6) write$sndseq(r7, &(0x7f00000005c0)=[{0x4, 0x0, 0x5, 0x5, @time={0xcbf, 0x6}, {0x1, 0xf8}, {0x7, 0x10}, @raw32={[0x0, 0x7fe, 0x82]}}, {0x2, 0x5, 0xff, 0x3, @tick=0x9, {0x1, 0x4}, {0x9, 0x81}, @connect={{0xd1, 0x83}, {0x1, 0x3f}}}], 0x38) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001440)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x108, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xffffffff, 0xffffff00, 0xff000000], 0x4e20, 0x4e21, 0x4e22, 0x4e23, 0x200000, 0x4, 0x9, 0x0, 0x6}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'ipvlan0\x00', 'caif0\x00', {0xff}, {0xff}, 0x87, 0x5, 0x7, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "7f56"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"c6a5", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0xf806}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m16.610484686s ago: executing program 2 (id=3735): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) truncate(&(0x7f0000000000)='./file1\x00', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80742, 0x148) 1m16.264219454s ago: executing program 2 (id=3740): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000180), 0x64, 0x526, &(0x7f0000000200)="$eJzs3UFrJFkdAPB/dbrHSSazyaoHXXB3dFcyg053snF3g4fdFURPC+p6H2PSCSGddEh3didh0Qx+AEFEBU/qwYvgBxBkwYtHEQb0rKgoojN68KBTUt2VTCbTne4ZetKZ9O8HlXrvVVX/3+tQ1fWqHlUBjKwrEfFmRNxL0/RaREzl5YV8iv32lK139857S9mURJq+/Y8kkrzs4LOSfH4p3+xiRHzlixFfTx6O29jdW1+s1arbeb7S3NiqNHb3rq9tLK5WV6ub8/Nzry68tvDKwuxA2nk5Il7//F++9+2ffuH1X3763T/e+NvVb2TVmsyXH23HIyqetLDd9FLruzi6wfZjBjuLiq0W5sY7rTH2UMmtJ1wnAAA6y87xPxgRn4iIazEVYyefzgIAAABPofSNyfhvEpF2dqFLOQAAAPAUKbTGwCaFcj4WYDIKhXK5PYb3wzFRqNUbzU+t1Hc2l9tjZaejVFhZq1Vn87HC01FKsvxcK30///Kx/HxEPBsR350ab+XLS/Xa8rAvfgAAAMCIuHSs///vqXb/HwAAADhnpoddAQAAAOCJ0/8HAACA80//HwAAAM61L731Vja9ERGt918vv7O7s15/5/pytbFe3thZKi/Vt7fKq/X6auuZfRu9Pq9Wr299JjZ3blaa1Uaz0tjdu7FR39ls3lh74BXYAAAAwCl69oX3f59ExP5nx1tT5kJ/m/a5GnBWFQ9TST7vsFv/4Zn2/M+nVCngVIwNuwLA0BSHXQFgaErDrgAwdEmP5V0H7/wmn398sPUBAAAGb+aj3e//F07ccv/kxcCZZyeG0eX+P4yu1v3/fkfyOlmAc6XkDABGXo/7/92HCeb3/3uPI0rT9vyFI0F7jToAAAAGabI1JYVyfnlvMgqFcjnicuu1AKVkZa1WnY2IZyLid1OlD2T5udaWSc8xwwAAAAAAAAAAAAAAAAAAAAAAAABAW5omkQIAAADnWkThr8mv2s/yn5l6afL49YELyX+mIn9F6Ls/fPv7Nxebze25rPyfh+XNH+TlLw/jCgYAAACMhEd6gf9BP/2gHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAg3T3zntLB9Npxv375yJiulP8YlxszS9GKSIm/pVE8ch2SUSMDSD+ePbnI53iJ1m1DkN2ij8+gPj7t06MH9P5t3A8/sRPIi4NID6Msvez48+bnfa/QlxpzTvvf8WIB/KPq/vxLw6Pf2Ndjj+X+4zx3O2fV7rGvxXxXLHz8ecgftIl/ot9xv/aV/f2ui1LfxQx0/H3J3kgVqW5sVVp7O5dX9tYXK2uVjfn5+deXXht4ZWF2crKWq2a/+0Y4zsf+8W9k9o/0SX+dI/2v9Rn+/93++adD7WTpU7xr77YIf6vf5yv8XD8Qv7b98k8nS2fOUjvt9NHPf+z3z5/UvuXu7S/1///ap/tv/blb/2pz1UBgFPQ2N1bX6zVqtvnNpH10s9ANSTOYOKbg/vA7IQ8TdNsn6pVr8R0PNbnJHEWvpZWYthHJgAAYNDun/QPuyYAAAAAAAAAAAAAAAAAAAAwuk7jcWLHY+4fppJBPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAg/h8AAP//quXTJw==") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x4048086) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x400122a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRESHEX=r3], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {0x0}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x2}, {0xfff1, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000e6ffff070003"], 0x20}}, 0x400c044) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m13.639401684s ago: executing program 6 (id=3751): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 1m13.428582849s ago: executing program 6 (id=3753): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x99e86f6a6737948, 0x2000000000000216, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) 1m13.343774531s ago: executing program 2 (id=3755): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310304000000000000000900000008000300", @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x0) 1m12.737156675s ago: executing program 2 (id=3758): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m12.719943325s ago: executing program 2 (id=3759): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x1d, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 1m12.571930749s ago: executing program 6 (id=3766): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000180), 0x64, 0x526, &(0x7f0000000200)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x4048086) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x400122a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRESHEX=r3], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x2}, {0xfff1, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000025"], 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000e6ffff070003"], 0x20}}, 0x400c044) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m12.398378423s ago: executing program 2 (id=3769): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x3}}, 0x18) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 1m12.367049543s ago: executing program 34 (id=3769): bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0xf0, 0x3}}, 0x18) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c) 1m11.808787926s ago: executing program 6 (id=3775): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m11.695327089s ago: executing program 6 (id=3778): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xfffffffffffffffa}, 0x114244, 0x7, 0xafe8, 0x4, 0x8002, 0x7fffffff, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1m11.357900426s ago: executing program 6 (id=3790): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x24, 0xd, 0x9, 0xe, 0x0, 0x5b, 0x2400, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100)}, 0xa808, 0x8, 0xb7e8, 0x3, 0x4, 0x3, 0x5, 0x0, 0x80b90, 0x0, 0x4e8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x3, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m11.340787157s ago: executing program 35 (id=3790): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x24, 0xd, 0x9, 0xe, 0x0, 0x5b, 0x2400, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f0000000100)}, 0xa808, 0x8, 0xb7e8, 0x3, 0x4, 0x3, 0x5, 0x0, 0x80b90, 0x0, 0x4e8}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x3, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xec}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 46.375013768s ago: executing program 5 (id=4110): syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20044040) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x2) 46.276511261s ago: executing program 5 (id=4112): ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) gettid() r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) 46.155533023s ago: executing program 5 (id=4114): socket$kcm(0xa, 0x1, 0x106) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'bridge0\x00'}}, 0x1e) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x7}, 0x0) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 46.106645815s ago: executing program 5 (id=4115): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x6, 0x4ef, &(0x7f0000000740)="$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") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 45.832421901s ago: executing program 5 (id=4120): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x4280000, 0x0, 0x0, 0x10000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, 0x0}, 0x20) 45.753293673s ago: executing program 5 (id=4122): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f000022f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8005, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x2, 0x1) 45.753229972s ago: executing program 36 (id=4122): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f000022f000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8005, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x2, 0x1) 35.135762565s ago: executing program 4 (id=4219): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001000ffff27bd7000ee"], 0x20}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x67) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 35.069744917s ago: executing program 4 (id=4223): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2c5, &(0x7f0000000600)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x2040, 0x0) 34.889807181s ago: executing program 4 (id=4226): syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x853, 0x6}, 0x0, 0x0, 0xfffffffd, 0x1, 0xe8a5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x90, 0x43, 0xa0, 0x0, 0x98, 0x1c0, 0x178, 0x178, 0x1c0, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}], 0x2}}, @common=@unspec=@helper={{0x48}, {0x0, 'irc-20000\x00'}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x4b, 0x9}, {0x6, 0xfd, 0xd, 0x2000100}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) 34.630425297s ago: executing program 4 (id=4231): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000480)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ff303030303032fd33a1ddfe6717c3d234022f30303030302c6e6f606f74732cb7f973636172642c6e66733d6e6f738f176d945097ec0dd5eadb028dfd7ea6ef584b372f5d74d4250c9b6f8f839859f3492898b4b06691432b63bab01154fdffffffffffffff5b47720a85ad56c37ed0", @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff3030303030313737373737373737f9909fdfd4291a9ccfbbdb0556c0f39fdb37372c004c0f1208ec0c34b7df4ba1b5e6b76697434de7574db9bcaef6a61212c3f260bebc7ac5b1b113e1119b83f1cf9f686b3dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7acab1c2e7b6a547f8120c12a14b06fb302b8adb87fa67ab868940868fee39f0796736ccd4adf62186a216263c1322da47b156791f49bf9e904cf364616ba0d1bf1"], 0x1, 0x291, &(0x7f0000000740)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 34.235891676s ago: executing program 4 (id=4237): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="680000001000370429bd7000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c020000000000480012800b0001006970366772650000380002800400120008000100", @ANYRES32=r1, @ANYBLOB="14000700ff020000000000000000000000000001140006002001000000"], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x0) 34.05031102s ago: executing program 4 (id=4240): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x200, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 34.05008568s ago: executing program 37 (id=4240): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x200, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) 5.922914155s ago: executing program 8 (id=4544): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x88, &(0x7f0000000100)={[{@dioread_lock}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@nouid32}, {@noinit_itable}, {@auto_da_alloc}]}, 0x3, 0x438, &(0x7f0000000d80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000100)={0xff9c, 0x8001}) 4.763605791s ago: executing program 8 (id=4534): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100edff00029500000000000000b7020000000000007b9af8ff00000000c5090000ffffff807baaf0ff00000000bf2700000000000027080000fffdffffbfa400000000000007040000f0ffffff540200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/freeze_filesystems', 0x8080, 0x48) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10a0000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf25020000000c000300000000000000000014000c00fe800000000000feff000000000000bb"], 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000009, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001580)=@assoc_value={0x0, 0x3}, &(0x7f00000015c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f00000000c0), 0x10) sendto$l2tp(r4, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x406, r5) write$sndseq(r6, &(0x7f00000005c0)=[{0x4, 0x0, 0x5, 0x5, @time={0xcbf, 0x6}, {0x1, 0xf8}, {0x7, 0x10}, @raw32={[0x0, 0x7fe, 0x82]}}, {0x2, 0x5, 0xff, 0x3, @tick=0x9, {0x1, 0x4}, {0x9, 0x81}, @connect={{0xd1, 0x83}, {0x1, 0x3f}}}], 0x38) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001440)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x108, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xffffffff, 0xffffff00, 0xff000000], 0x4e20, 0x4e21, 0x4e22, 0x4e23, 0x200000, 0x4, 0x9, 0x0, 0x6}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'ipvlan0\x00', 'caif0\x00', {0xff}, {0xff}, 0x87, 0x5, 0x7, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "7f56"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"c6a5", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0xf806}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.04537109s ago: executing program 0 (id=4547): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x64, 0xd99d}}]}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 2.868750604s ago: executing program 0 (id=4550): syz_emit_ethernet(0x6b, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x35, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0x2d, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae"}}}}}}, 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1a}, 0x94) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f000001b400)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f011400dcdc14"], 0xdd12}], 0x1, 0x0, 0x0, 0x20}, 0x200400d0) 2.867713025s ago: executing program 8 (id=4551): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket$inet(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r7, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r10, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0x20b0, 0x6, 0x11000, 0x8, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) 2.715822568s ago: executing program 0 (id=4554): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x73, 0xc9, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffa43, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x4}, 0x102248, 0x8, 0x0, 0x9, 0xffffffffffffffff, 0xb, 0x4, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.955802235s ago: executing program 1 (id=4557): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c000500010006000000240007"], 0x6c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 1.880034137s ago: executing program 7 (id=4558): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/freeze_filesystems', 0x8080, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000009, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, 0x0, &(0x7f00000015c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) write$sndseq(r4, &(0x7f00000005c0)=[{0x4, 0x0, 0x5, 0x5, @time={0xcbf, 0x6}, {0x1, 0xf8}, {0x7, 0x10}, @raw32={[0x0, 0x7fe, 0x82]}}, {0x2, 0x5, 0xff, 0x3, @tick=0x9, {0x1, 0x4}, {0x9, 0x81}, @connect={{0xd1, 0x83}, {0x1, 0x3f}}}], 0x38) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001440)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x108, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xffffffff, 0xffffff00, 0xff000000], 0x4e20, 0x4e21, 0x4e22, 0x4e23, 0x200000, 0x4, 0x9, 0x0, 0x6}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'ipvlan0\x00', 'caif0\x00', {0xff}, {0xff}, 0x87, 0x5, 0x7, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "7f56"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"c6a5", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0xf806}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.689474551s ago: executing program 0 (id=4559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x78, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8, 0x6baa, 0x3, 0xd, 0xfffffffe}, 0x10, 0x0, 0x401, 0x9, 0xf4e, 0x18, 0x1b, 0x2, 0x3, 0x6, {0xf, 0x9, 0x5, 0x6, 0x4, 0xe097}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40400d8}, 0x0) 1.683209292s ago: executing program 9 (id=4560): openat$rfkill(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$tun(r0, &(0x7f00000005c0)=ANY=[], 0xfdef) 1.564067154s ago: executing program 9 (id=4561): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000180), 0x64, 0x526, &(0x7f0000000200)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x38, r1, 0x1, 0x0, 0x1, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}}, 0x4048086) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x400122a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYRESHEX=r3], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x2}, {0xfff1, 0xffff}, {0x0, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x4004041}, 0x20004440) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000e6ffff070003"], 0x20}}, 0x400c044) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.540091825s ago: executing program 0 (id=4562): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100edff00029500000000000000b7020000000000007b9af8ff00000000c5090000ffffff807baaf0ff00000000bf2700000000000027080000fffdffffbfa400000000000007040000f0ffffff540200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/freeze_filesystems', 0x8080, 0x48) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10a0000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf25020000000c000300000000000000000014000c00fe800000000000feff000000000000bb"], 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000009, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001580)=@assoc_value={0x0, 0x3}, &(0x7f00000015c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f00000000c0), 0x10) sendto$l2tp(r4, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x406, r5) write$sndseq(r6, &(0x7f00000005c0)=[{0x4, 0x0, 0x5, 0x5, @time={0xcbf, 0x6}, {0x1, 0xf8}, {0x7, 0x10}, @raw32={[0x0, 0x7fe, 0x82]}}, {0x2, 0x5, 0xff, 0x3, @tick=0x9, {0x1, 0x4}, {0x9, 0x81}, @connect={{0xd1, 0x83}, {0x1, 0x3f}}}], 0x38) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001440)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x108, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xffffffff, 0xffffff00, 0xff000000], 0x4e20, 0x4e21, 0x4e22, 0x4e23, 0x200000, 0x4, 0x9, 0x0, 0x6}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'ipvlan0\x00', 'caif0\x00', {0xff}, {0xff}, 0x87, 0x5, 0x7, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "7f56"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"c6a5", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0xf806}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.082052115s ago: executing program 1 (id=4563): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80480, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000440)={'ip6erspan0\x00', 0x400}) 1.070712666s ago: executing program 9 (id=4573): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x2, 0x7) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r0, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) 963.678418ms ago: executing program 7 (id=4564): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x4280000, 0x0, 0x0, 0x10000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, 0x0}, 0x20) 917.327889ms ago: executing program 8 (id=4565): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) prlimit64(0x0, 0x8, &(0x7f0000001080)={0x4, 0x7}, 0x0) preadv(r0, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 899.391869ms ago: executing program 9 (id=4566): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000001c0012800b00010062726964676500000c00028005002a0001"], 0x3c}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422407f83477ca1", 0xe, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) 887.0015ms ago: executing program 7 (id=4567): socket$nl_route(0x10, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200810, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10001, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000180)={0x6, 0x71}) 848.354011ms ago: executing program 7 (id=4568): perf_event_open$cgroup(&(0x7f0000000280)={0x0, 0x80, 0x33, 0xd, 0x6, 0x90, 0x0, 0x7, 0x1000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040)}, 0x100001, 0x7125, 0x1, 0x0, 0x5, 0x464d, 0x94, 0x0, 0x40000, 0x0, 0x1}, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0xf) syz_clone3(0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0x0, 0x3) 847.78976ms ago: executing program 8 (id=4569): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100edff00029500000000000000b7020000000000007b9af8ff00000000c5090000ffffff807baaf0ff00000000bf2700000000000027080000fffdffffbfa400000000000007040000f0ffffff540200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/freeze_filesystems', 0x8080, 0x48) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10a0000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf25020000000c000300000000000000000014000c00fe800000000000feff000000000000bb"], 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000009, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001580)=@assoc_value={r4, 0x3}, &(0x7f00000015c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f00000000c0), 0x10) sendto$l2tp(r5, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x406, r6) write$sndseq(r7, &(0x7f00000005c0)=[{0x4, 0x0, 0x5, 0x5, @time={0xcbf, 0x6}, {0x1, 0xf8}, {0x7, 0x10}, @raw32={[0x0, 0x7fe, 0x82]}}, {0x2, 0x5, 0xff, 0x3, @tick=0x9, {0x1, 0x4}, {0x9, 0x81}, @connect={{0xd1, 0x83}, {0x1, 0x3f}}}], 0x38) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001440)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x108, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xffffffff, 0xffffff00, 0xff000000], 0x4e20, 0x4e21, 0x4e22, 0x4e23, 0x200000, 0x4, 0x9, 0x0, 0x6}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'ipvlan0\x00', 'caif0\x00', {0xff}, {0xff}, 0x87, 0x5, 0x7, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "7f56"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"c6a5", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0xf806}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r7) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r8, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 823.787011ms ago: executing program 9 (id=4570): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xbe) socket$inet(0x2, 0x80001, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 796.017301ms ago: executing program 1 (id=4571): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x73, 0xc9, 0x8, 0x0, 0x6, 0x0, 0xfffffffffffffa43, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x1, 0x4}, 0x102248, 0x8, 0x0, 0x9, 0xffffffffffffffff, 0xb, 0x4, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xa, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 619.164146ms ago: executing program 7 (id=4572): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x5ab2, &(0x7f0000000040)={0x0, 0x100c8a2, 0xc000, 0x1, 0x18}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x21cd, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=')'], 0x50) io_uring_enter(r0, 0x221d, 0xcf75, 0x37, 0x0, 0x0) 602.309926ms ago: executing program 0 (id=4583): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c5090100edff00029500000000000000b7020000000000007b9af8ff00000000c5090000ffffff807baaf0ff00000000bf2700000000000027080000fffdffffbfa400000000000007040000f0ffffff540200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/freeze_filesystems', 0x8080, 0x48) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10a0000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000ffdbdf25020000000c000300000000000000000014000c00fe800000000000feff000000000000bb"], 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x20000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4000009, 0xd}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r2) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000001580)=@assoc_value={0x0, 0x3}, &(0x7f00000015c0)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r4, &(0x7f00000000c0), 0x10) sendto$l2tp(r4, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, 0x2004}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = fcntl$dupfd(r5, 0x406, r5) write$sndseq(r6, &(0x7f00000005c0)=[{0x4, 0x0, 0x5, 0x5, @time={0xcbf, 0x6}, {0x1, 0xf8}, {0x7, 0x10}, @raw32={[0x0, 0x7fe, 0x82]}}, {0x2, 0x5, 0xff, 0x3, @tick=0x9, {0x1, 0x4}, {0x9, 0x81}, @connect={{0xd1, 0x83}, {0x1, 0x3f}}}], 0x38) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001440)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x108, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xffffffff, 0xffffff00, 0xff000000], 0x4e20, 0x4e21, 0x4e22, 0x4e23, 0x200000, 0x4, 0x9, 0x0, 0x6}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xff, 0x0, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'ipvlan0\x00', 'caif0\x00', {0xff}, {0xff}, 0x87, 0x5, 0x7, 0x20}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "7f56"}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@mh={{0x28}, {"c6a5", 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz1\x00', {0xf806}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 601.560576ms ago: executing program 9 (id=4574): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c000500010006000000240007"], 0x6c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 550.425167ms ago: executing program 1 (id=4575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newqdisc={0x78, 0x28, 0x4ee4e6a52ff56541, 0x3ffd, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x8, 0x6baa, 0x3, 0xd, 0xfffffffe}, 0x10, 0x0, 0x401, 0x9, 0xf4e, 0x18, 0x1b, 0x2, 0x3, 0x6, {0xf, 0x9, 0x5, 0x6, 0x4, 0xe097}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40400d8}, 0x0) 453.335989ms ago: executing program 1 (id=4576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xc, 0x42}]}, 0x10) listen(r0, 0x2005) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000005c0)="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", 0x571}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000028c0)="f2", 0x1}], 0x1}}], 0x2, 0x48045) 451.997249ms ago: executing program 7 (id=4587): socket$inet6(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000480)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x0, 0x0, {}, 0xfffffffffffffffc, 0x1, 0x2}}}, 0x118) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x81, 0xfa00, {0x0, 0x2, r2, 0x30, 0x0, @ib={0x1b, 0xfff9, 0x1, {"c36332913fa9eacb4a94b8523000"}, 0x1, 0x4000000000001, 0x7}}}, 0xa0) 423.41891ms ago: executing program 1 (id=4577): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={r3, 0xffffffff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) 0s ago: executing program 8 (id=4578): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x4280000, 0x0, 0x0, 0x10000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, 0x0}, 0x20) kernel console output (not intermixed with test programs): [ 282.815056][ T28] audit: type=1400 audit(1782704207.196:1032): avc: denied { read } for pid=13702 comm="syz.0.3878" path="socket:[37074]" dev="sockfs" ino=37074 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 283.014169][T13710] loop4: detected capacity change from 0 to 128 [ 283.079171][T13710] ext4 filesystem being mounted at /798/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 283.136169][T13713] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 283.215520][ T28] audit: type=1400 audit(1782704207.616:1033): avc: denied { write } for pid=13709 comm="syz.4.3880" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.293390][ T28] audit: type=1400 audit(1782704207.646:1034): avc: denied { write } for pid=13709 comm="syz.4.3880" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 283.650489][T13718] veth0: entered promiscuous mode [ 283.702384][T13718] veth0: left promiscuous mode [ 283.741202][T13726] loop0: detected capacity change from 0 to 512 [ 283.759670][T13726] EXT4-fs (loop0): orphan cleanup on readonly fs [ 283.789409][T13726] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.3887: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 283.818266][T13728] sctp: [Deprecated]: syz.7.3886 (pid 13728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.818266][T13728] Use struct sctp_sack_info instead [ 283.861394][T13726] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 283.868863][T13726] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.3887: Bad quota inode: 4, type: 1 [ 283.881956][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 283.881980][ C1] EXT4-fs (loop0): last error at time 1782704208: ext4_ext_check_inode:521: inode 4 [ 283.917783][T13726] loop0: lost filesystem error report for type 5 error -117 [ 283.917981][T13726] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 283.963156][T13726] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 283.981847][T13726] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3887'. [ 284.042583][T13728] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 284.042583][T13728] program syz.7.3886 not setting count and/or reply_len properly [ 284.121684][T13738] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3889'. [ 284.304978][T13753] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3894'. [ 284.387502][T13757] loop0: detected capacity change from 0 to 1024 [ 284.412243][T13757] EXT4-fs: Ignoring removed nobh option [ 284.435076][T13757] EXT4-fs: Ignoring removed i_version option [ 284.531721][ T28] audit: type=1400 audit(1782704208.926:1035): avc: denied { write } for pid=13756 comm="syz.0.3896" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.617280][ T28] audit: type=1400 audit(1782704208.926:1036): avc: denied { write } for pid=13756 comm="syz.0.3896" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.675447][ T28] audit: type=1400 audit(1782704208.926:1037): avc: denied { write } for pid=13756 comm="syz.0.3896" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 284.729848][ T28] audit: type=1400 audit(1782704208.926:1038): avc: denied { write } for pid=13756 comm="syz.0.3896" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 284.796485][ T28] audit: type=1400 audit(1782704208.926:1039): avc: denied { reparent } for pid=13756 comm="syz.0.3896" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 284.880678][ T3703] Bluetooth: hci0: Frame reassembly failed (-84) [ 285.282413][T13788] loop0: detected capacity change from 0 to 512 [ 285.312894][T13790] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3910'. [ 285.338782][T13788] EXT4-fs (loop0): orphan cleanup on readonly fs [ 285.347864][T13788] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.3909: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 285.371661][T13788] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 285.378965][T13788] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.3909: Bad quota inode: 4, type: 1 [ 285.388355][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 285.388379][ C1] EXT4-fs (loop0): last error at time 1782704209: ext4_ext_check_inode:521: inode 4 [ 285.476088][T13799] loop8: detected capacity change from 0 to 128 [ 285.489639][T13788] loop0: lost filesystem error report for type 5 error -117 [ 285.491227][T13788] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 285.516615][T13788] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 285.520981][T13799] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.559615][T13788] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3909'. [ 285.812763][T13817] loop8: detected capacity change from 0 to 512 [ 285.852899][T13817] EXT4-fs (loop8): orphan cleanup on readonly fs [ 285.860301][T13817] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.3921: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 285.896034][T13817] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 285.898881][T13817] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.3921: Bad quota inode: 4, type: 1 [ 285.909541][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 285.909565][ C0] EXT4-fs (loop8): last error at time 1782704210: ext4_ext_check_inode:521: inode 4 [ 285.955613][T13817] loop8: lost filesystem error report for type 5 error -117 [ 285.958426][T13817] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 285.987808][T13817] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 286.185246][T13821] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3921'. [ 286.198067][T13808] loop4: detected capacity change from 0 to 128 [ 286.396164][T13808] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.701997][ T3721] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 286.951571][ T3787] Bluetooth: hci0: command 0x1003 tx timeout [ 286.958685][T11188] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 287.054902][T13837] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.115838][T13840] loop7: detected capacity change from 0 to 128 [ 287.190874][T13840] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.215596][T13846] loop8: detected capacity change from 0 to 512 [ 287.225945][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 287.226016][ T28] audit: type=1400 audit(1782704211.626:1043): avc: denied { write } for pid=13839 comm="syz.7.3929" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.299022][T13846] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.350096][ T28] audit: type=1400 audit(1782704211.746:1044): avc: denied { write } for pid=13845 comm="syz.8.3931" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.455253][ T28] audit: type=1400 audit(1782704211.746:1045): avc: denied { write } for pid=13845 comm="syz.8.3931" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 287.659833][T13861] EXT4-fs (loop8): orphan cleanup on readonly fs [ 287.671289][T13861] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.3937: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 287.739796][T13861] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 287.740000][T13861] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.3937: Bad quota inode: 4, type: 1 [ 287.750544][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 287.750565][ C0] EXT4-fs (loop8): last error at time 1782704212: ext4_ext_check_inode:521: inode 4 [ 287.877209][T13861] loop8: lost filesystem error report for type 5 error -117 [ 287.877426][T13861] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 287.908414][T13861] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 287.947212][T13861] netlink: 180 bytes leftover after parsing attributes in process `syz.8.3937'. [ 288.047776][T13872] set_capacity_and_notify: 1 callbacks suppressed [ 288.047795][T13872] loop8: detected capacity change from 0 to 2048 [ 288.090602][T13872] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.296436][T13183] EXT4-fs unmount: 53 callbacks suppressed [ 288.296454][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.416799][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3952'. [ 288.477580][T13907] loop7: detected capacity change from 0 to 512 [ 288.492956][T13907] EXT4-fs (loop7): orphan cleanup on readonly fs [ 288.502007][T13907] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.3953: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 288.541640][T13910] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 288.541640][T13910] program syz.0.3955 not setting count and/or reply_len properly [ 288.581345][T13907] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 288.581532][T13907] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.3953: Bad quota inode: 4, type: 1 [ 288.592019][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 288.592043][ C1] EXT4-fs (loop7): last error at time 1782704212: ext4_ext_check_inode:521: inode 4 [ 288.680200][T13907] loop7: lost filesystem error report for type 5 error -117 [ 288.684244][T13907] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 288.722824][T13907] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 288.730690][T13907] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 288.857145][ T28] audit: type=1400 audit(1782704213.256:1046): avc: denied { write } for pid=13916 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.864703][T13922] netlink: 180 bytes leftover after parsing attributes in process `syz.7.3953'. [ 288.919761][ T28] audit: type=1400 audit(1782704213.316:1047): avc: denied { write } for pid=13929 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.141880][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.443403][ T28] audit: type=1400 audit(1782704213.846:1048): avc: denied { mount } for pid=13947 comm="syz.0.3965" name="/" dev="autofs" ino=38452 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 289.473841][T13948] netlink: 100 bytes leftover after parsing attributes in process `syz.8.3964'. [ 290.167880][T13985] loop8: detected capacity change from 0 to 128 [ 290.204075][T13985] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.230691][T13985] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.248153][ T28] audit: type=1400 audit(1782704214.646:1049): avc: denied { write } for pid=13983 comm="syz.8.3981" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.364354][T13183] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 290.379027][T13994] loop5: detected capacity change from 0 to 1024 [ 290.396855][T13994] EXT4-fs: Ignoring removed nobh option [ 290.404006][T13994] EXT4-fs: Ignoring removed i_version option [ 290.455695][T13994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.481954][T14004] loop8: detected capacity change from 0 to 512 [ 290.487417][ T28] audit: type=1400 audit(1782704214.886:1050): avc: denied { write } for pid=13992 comm="syz.5.3983" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.493663][T14004] EXT4-fs: Ignoring removed orlov option [ 290.540728][T14004] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.3986: bg 0: block 5: invalid block bitmap [ 290.566067][ T3811] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.586273][T14004] loop8: lost filesystem error report for type 5 error -117 [ 290.587540][T14004] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 290.600530][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 290.600555][ C0] EXT4-fs (loop8): initial error at time 1782704214: ext4_validate_block_bitmap:432 [ 290.600580][ C0] EXT4-fs (loop8): last error at time 1782704214: ext4_validate_block_bitmap:432 [ 290.654415][T14004] loop8: lost filesystem error report for type 5 error -117 [ 290.659397][T14004] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.3986: invalid indirect mapped block 3 (level 2) [ 290.682450][T14004] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 290.683998][T14004] EXT4-fs (loop8): 2 truncates cleaned up [ 290.719865][T14004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.766878][T14004] EXT4-fs (loop8): shut down requested (2) [ 290.815699][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.901962][T14018] lo speed is unknown, defaulting to 1000 [ 291.112256][T14020] loop0: detected capacity change from 0 to 128 [ 291.291845][T14020] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 291.673307][T14042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.702209][T14044] loop7: detected capacity change from 0 to 512 [ 291.728429][T14044] EXT4-fs: Ignoring removed orlov option [ 291.754717][T14044] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4001: bg 0: block 5: invalid block bitmap [ 291.803032][T14044] loop7: lost filesystem error report for type 5 error -117 [ 291.812082][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 291.819034][T14042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.827007][ C1] EXT4-fs (loop7): initial error at time 1782704216: ext4_validate_block_bitmap:432 [ 291.860410][T14044] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 291.868973][ C1] EXT4-fs (loop7): last error at time 1782704216: ext4_validate_block_bitmap:432 [ 291.903175][T14044] loop7: lost filesystem error report for type 5 error -117 [ 291.903356][T14044] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4001: invalid indirect mapped block 3 (level 2) [ 291.938634][T14044] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 291.939069][ T3711] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 291.950594][T14044] EXT4-fs (loop7): 2 truncates cleaned up [ 291.983209][T14044] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.012713][T14053] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 292.012713][T14053] program syz.4.4004 not setting count and/or reply_len properly [ 292.076450][T14044] EXT4-fs (loop7): shut down requested (2) [ 292.098917][T14060] loop8: detected capacity change from 0 to 512 [ 292.120300][T14060] EXT4-fs (loop8): orphan cleanup on readonly fs [ 292.129765][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.144583][T14060] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.4008: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 292.208115][T14060] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 292.208305][T14060] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.4008: Bad quota inode: 4, type: 1 [ 292.220866][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 292.220900][ C1] EXT4-fs (loop8): last error at time 1782704216: ext4_ext_check_inode:521: inode 4 [ 292.260303][T14060] loop8: lost filesystem error report for type 5 error -117 [ 292.260483][T14060] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 292.289671][T14060] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 292.298112][T14060] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 292.327682][T14060] netlink: 180 bytes leftover after parsing attributes in process `syz.8.4008'. [ 292.349168][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.668797][ T3711] Bluetooth: hci0: Frame reassembly failed (-84) [ 292.735703][T14082] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 292.754868][T13132] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 292.770822][T14077] loop8: detected capacity change from 0 to 128 [ 292.771687][T14082] SELinux: failed to load policy [ 292.832941][T13132] CPU: 0 UID: 0 PID: 13132 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 292.832975][T13132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 292.832990][T13132] Call Trace: [ 292.832998][T13132] [ 292.833008][T13132] __dump_stack+0x1d/0x30 [ 292.833207][T13132] dump_stack_lvl+0x95/0xd0 [ 292.833227][T13132] dump_stack+0x15/0x1b [ 292.833248][T13132] dump_header+0x80/0x240 [ 292.833269][T13132] oom_kill_process+0x295/0x350 [ 292.833442][T13132] out_of_memory+0x981/0xbc0 [ 292.833470][T13132] try_charge_memcg+0x621/0xa00 [ 292.833521][T13132] charge_memcg+0x6d/0x120 [ 292.833548][T13132] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 292.833680][T13132] swap_cache_alloc_folio+0x47b/0x5e0 [ 292.833710][T13132] swap_cluster_readahead+0x3d2/0x460 [ 292.833793][T13132] swapin_readahead+0xd8/0x8a0 [ 292.833827][T13132] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 292.833862][T13132] ? hrtimer_start_range_ns+0x108/0x120 [ 292.833902][T13132] ? __rcu_read_unlock+0x4e/0x70 [ 292.833925][T13132] ? swap_cache_get_folio+0x1f7/0x200 [ 292.833950][T13132] do_swap_page+0x2a2/0x1ec0 [ 292.834060][T13132] ? __schedule+0x799/0xd10 [ 292.834081][T13132] ? __rcu_read_lock+0x36/0x50 [ 292.834103][T13132] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 292.834132][T13132] handle_mm_fault+0xb3c/0x2da0 [ 292.834245][T13132] do_user_addr_fault+0x634/0x1060 [ 292.834273][T13132] ? trace_page_fault_user+0x1f/0xa0 [ 292.834298][T13132] exc_page_fault+0x62/0xa0 [ 292.834356][T13132] asm_exc_page_fault+0x26/0x30 [ 292.834376][T13132] RIP: 0033:0x7f77ae147fd7 [ 292.834393][T13132] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 292.834414][T13132] RSP: 002b:00007ffcd5e3d700 EFLAGS: 00010202 [ 292.834482][T13132] RAX: 0000000000000000 RBX: 000055556d944500 RCX: 00007f77ae147fd7 [ 292.834496][T13132] RDX: 00007ffcd5e3d740 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.834508][T13132] RBP: 00007ffcd5e3d7ac R08: 0000000000000000 R09: 0000000000000000 [ 292.834522][T13132] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 292.834535][T13132] R13: 00000000000927c0 R14: 0000000000047597 R15: 00007ffcd5e3d800 [ 292.835392][T13132] [ 292.839987][T13132] memory: usage 307200kB, limit 307200kB, failcnt 171 [ 293.168703][T13132] memory+swap: usage 2392kB, limit 9007199254740988kB, failcnt 0 [ 293.184235][T13132] kmem: usage 2044kB, limit 9007199254740988kB, failcnt 0 [ 293.205778][T13132] Memory cgroup stats for /syz7: [ 293.206125][T13132] cache 0 [ 293.250443][T13132] rss 0 [ 293.258791][T13132] shmem 0 [ 293.268860][T14077] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 293.272207][T13132] mapped_file 0 [ 293.272221][T13132] dirty 0 [ 293.272230][T13132] writeback 0 [ 293.272238][T13132] workingset_refault_anon 52 [ 293.272248][T13132] workingset_refault_file 0 [ 293.272257][T13132] swap 176128 [ 293.272265][T13132] swapcached 393216 [ 293.272274][T13132] pgpgin 11565 [ 293.272362][T13132] pgpgout 11564 [ 293.272370][T13132] pgfault 15210 [ 293.272379][T13132] pgmajfault 21 [ 293.272387][T13132] inactive_anon 0 [ 293.272396][T13132] active_anon 4096 [ 293.272404][T13132] inactive_file 0 [ 293.272413][T13132] active_file 0 [ 293.272421][T13132] unevictable 0 [ 293.272430][T13132] hierarchical_memory_limit 314572800 [ 293.272440][T13132] hierarchical_memsw_limit 9223372036854771712 [ 293.272448][T13132] total_cache 0 [ 293.272455][T13132] total_rss 0 [ 293.272517][T13132] total_shmem 0 [ 293.272526][T13132] total_mapped_file 0 [ 293.272535][T13132] total_dirty 0 [ 293.272543][T13132] total_writeback 0 [ 293.272573][T13132] total_workingset_refault_anon 52 [ 293.272583][T13132] total_workingset_refault_file 0 [ 293.272593][T13132] total_swap 176128 [ 293.272601][T13132] total_swapcached 393216 [ 293.272610][T13132] total_pgpgin 11565 [ 293.272619][T13132] total_pgpgout 11564 [ 293.272628][T13132] total_pgfault 15210 [ 293.272636][T13132] total_pgmajfault 21 [ 293.272689][T13132] total_inactive_anon 0 [ 293.272697][T13132] total_active_anon 4096 [ 293.272706][T13132] total_inactive_file 0 [ 293.272732][T13132] total_active_file 0 [ 293.272740][T13132] total_unevictable 0 [ 293.272749][T13132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4010,pid=14067,uid=0 [ 293.272839][T13132] Memory cgroup out of memory: Killed process 14067 (syz.7.4010) total-vm:96084kB, anon-rss:1236kB, file-rss:22164kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 293.625025][T14110] loop7: detected capacity change from 0 to 512 [ 293.834596][T14110] EXT4-fs (loop7): orphan cleanup on readonly fs [ 293.844620][T14110] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.4024: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 293.870451][T14110] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 293.871188][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 293.893466][ C1] EXT4-fs (loop7): last error at time 1782704218: ext4_ext_check_inode:521: inode 4 [ 293.911958][T14110] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.4024: Bad quota inode: 4, type: 1 [ 293.937927][T14110] loop7: lost filesystem error report for type 5 error -117 [ 293.939292][T14110] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 293.974141][T14110] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 293.986353][T14110] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 294.081966][T14110] netlink: 180 bytes leftover after parsing attributes in process `syz.7.4024'. [ 294.124335][ T3713] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 294.157218][T14156] loop4: detected capacity change from 0 to 128 [ 294.173905][T14156] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 294.194821][T14156] ext4 filesystem being mounted at /827/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.231669][ T28] audit: type=1400 audit(1782704218.616:1051): avc: denied { write } for pid=14155 comm="syz.4.4025" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 294.302965][ T28] audit: type=1400 audit(1782704218.666:1052): avc: denied { write } for pid=14112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.349250][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.379960][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.400044][ T28] audit: type=1400 audit(1782704218.786:1053): avc: denied { write } for pid=14167 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.492921][T14177] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4027'. [ 294.615890][T14190] loop4: detected capacity change from 0 to 128 [ 294.636362][T14193] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4031'. [ 294.669409][T14190] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 294.709796][T14190] ext4 filesystem being mounted at /830/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.722971][T11188] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 294.723840][ T3787] Bluetooth: hci0: command 0x1003 tx timeout [ 294.764079][ T28] audit: type=1400 audit(1782704219.166:1054): avc: denied { write } for pid=14172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.837628][ T28] audit: type=1400 audit(1782704219.206:1055): avc: denied { write } for pid=14202 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.877033][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 294.956213][T14215] loop0: detected capacity change from 0 to 1024 [ 294.994022][T14215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.020498][T14223] loop8: detected capacity change from 0 to 512 [ 295.036509][ T28] audit: type=1400 audit(1782704219.436:1056): avc: denied { write } for pid=14213 comm="syz.0.4047" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.069584][T14223] EXT4-fs (loop8): orphan cleanup on readonly fs [ 295.079612][T14223] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.4040: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 295.109359][T14223] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 295.109657][ T28] audit: type=1400 audit(1782704219.466:1057): avc: denied { write } for pid=14206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.118373][T14230] loop7: detected capacity change from 0 to 128 [ 295.122397][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 295.122418][ C1] EXT4-fs (loop8): last error at time 1782704219: ext4_ext_check_inode:521: inode 4 [ 295.156177][T14223] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.4040: Bad quota inode: 4, type: 1 [ 295.181405][T14230] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.212435][T14223] loop8: lost filesystem error report for type 5 error -117 [ 295.212592][T14223] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 295.228525][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.246498][T14223] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 295.254505][T14223] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.282359][ T28] audit: type=1400 audit(1782704219.676:1058): avc: denied { write } for pid=14235 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.298281][T14223] netlink: 180 bytes leftover after parsing attributes in process `syz.8.4040'. [ 295.361942][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.448512][T14244] loop4: detected capacity change from 0 to 512 [ 295.490797][T14244] EXT4-fs (loop4): orphan cleanup on readonly fs [ 295.499672][T14244] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.4046: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 295.521951][T14244] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 295.522166][T14244] EXT4-fs error (device loop4): ext4_quota_enable:7235: comm syz.4.4046: Bad quota inode: 4, type: 1 [ 295.531675][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 295.531696][ C0] EXT4-fs (loop4): last error at time 1782704219: ext4_ext_check_inode:521: inode 4 [ 295.565931][ T3707] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 295.680663][T14244] loop4: lost filesystem error report for type 5 error -117 [ 295.685198][T14244] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 295.728620][T14244] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 295.739196][T14244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.776182][T14264] loop5: detected capacity change from 0 to 8192 [ 295.786239][T14272] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 295.786239][T14272] program syz.0.4053 not setting count and/or reply_len properly [ 295.798744][ T28] audit: type=1400 audit(1782704220.186:1059): avc: denied { write } for pid=14240 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.860670][T14277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1573 sclass=netlink_route_socket pid=14277 comm=syz.4.4046 [ 295.908269][ T28] audit: type=1400 audit(1782704220.276:1060): avc: denied { write } for pid=14276 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 295.988550][T14292] netlink: 'syz.7.4059': attribute type 10 has an invalid length. [ 295.997806][T14292] netlink: 65015 bytes leftover after parsing attributes in process `syz.7.4059'. [ 296.247831][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.262119][T14306] loop7: detected capacity change from 0 to 8192 [ 296.294422][T14306] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 296.589569][T14353] loop5: detected capacity change from 0 to 128 [ 296.714590][T13073] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 296.727279][T13073] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 296.742287][T13073] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 296.751024][T13073] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 296.824299][T14363] fido_id[14363]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 296.845860][T14365] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.869235][T14365] ext4: Unknown parameter 'nouser_xattr' [ 296.938733][T14368] EXT4-fs (loop8): orphan cleanup on readonly fs [ 296.949605][T14368] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.4073: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 296.996373][T14368] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 296.996687][T14368] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.4073: Bad quota inode: 4, type: 1 [ 297.006272][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 297.006294][ C0] EXT4-fs (loop8): last error at time 1782704221: ext4_ext_check_inode:521: inode 4 [ 297.043489][T14368] loop8: lost filesystem error report for type 5 error -117 [ 297.092586][T14368] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 297.116942][T14368] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 297.124651][T14368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.152097][T14380] program syz.7.4077 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.192775][T14368] netlink: 180 bytes leftover after parsing attributes in process `syz.8.4073'. [ 297.237414][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.281464][T14392] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 297.281464][T14392] program syz.7.4079 not setting count and/or reply_len properly [ 297.771398][T14458] EXT4-fs (loop0): orphan cleanup on readonly fs [ 297.780149][T14458] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.4093: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 297.800297][T14458] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 297.801197][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 297.801256][T14458] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.4093: Bad quota inode: 4, type: 1 [ 297.810306][ C1] EXT4-fs (loop0): last error at time 1782704222: ext4_ext_check_inode:521: inode 4 [ 297.840764][T14458] loop0: lost filesystem error report for type 5 error -117 [ 297.843060][T14458] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 297.866624][T14463] EXT4-fs (loop8): orphan cleanup on readonly fs [ 297.867637][T14458] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 297.873576][T14463] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.4094: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 297.882156][T14458] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.900470][T14463] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 297.915690][T14463] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.4094: Bad quota inode: 4, type: 1 [ 297.925083][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 297.925108][ C1] EXT4-fs (loop8): last error at time 1782704222: ext4_ext_check_inode:521: inode 4 [ 297.945543][T14458] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4093'. [ 297.956655][T14463] loop8: lost filesystem error report for type 5 error -117 [ 297.965309][T14463] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 297.990013][T14463] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 297.997983][T14463] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.014608][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.087728][T14493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1573 sclass=netlink_route_socket pid=14493 comm=syz.8.4094 [ 298.345865][T14514] sctp: [Deprecated]: syz.4.4098 (pid 14514) Use of struct sctp_assoc_value in delayed_ack socket option. [ 298.345865][T14514] Use struct sctp_sack_info instead [ 298.390779][T14514] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 298.390779][T14514] program syz.4.4098 not setting count and/or reply_len properly [ 298.899337][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.994436][T14524] GUP no longer grows the stack in syz.7.4104 (14524): 200000004000-20000000a000 (200000002000) [ 299.016072][T14524] CPU: 1 UID: 0 PID: 14524 Comm: syz.7.4104 Not tainted syzkaller #0 PREEMPT(lazy) [ 299.016107][T14524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.016121][T14524] Call Trace: [ 299.016130][T14524] [ 299.016139][T14524] __dump_stack+0x1d/0x30 [ 299.016241][T14524] dump_stack_lvl+0x95/0xd0 [ 299.016263][T14524] dump_stack+0x15/0x1b [ 299.016285][T14524] __get_user_pages+0x1b27/0x1f10 [ 299.016355][T14524] ? __rcu_read_unlock+0x4e/0x70 [ 299.016389][T14524] get_user_pages_remote+0x1d5/0x6b0 [ 299.016568][T14524] __access_remote_vm+0x156/0x4d0 [ 299.016604][T14524] access_remote_vm+0x32/0x40 [ 299.016691][T14524] proc_pid_cmdline_read+0x334/0x710 [ 299.016728][T14524] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 299.016768][T14524] vfs_readv+0x417/0x6d0 [ 299.016863][T14524] __x64_sys_preadv+0xfd/0x1c0 [ 299.016887][T14524] x64_sys_call+0x2915/0x3020 [ 299.016912][T14524] do_syscall_64+0x136/0x3c0 [ 299.016983][T14524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.017016][T14524] RIP: 0033:0x7f77ae18ce59 [ 299.017036][T14524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.017115][T14524] RSP: 002b:00007f77acbe7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 299.017140][T14524] RAX: ffffffffffffffda RBX: 00007f77ae405fa0 RCX: 00007f77ae18ce59 [ 299.017157][T14524] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000003 [ 299.017173][T14524] RBP: 00007f77ae222e6f R08: 00000000fffffff9 R09: 0000000000000000 [ 299.017189][T14524] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 299.017205][T14524] R13: 00007f77ae406038 R14: 00007f77ae405fa0 R15: 00007ffcd5e3d408 [ 299.017345][T14524] [ 299.235726][T14528] set_capacity_and_notify: 4 callbacks suppressed [ 299.235744][T14528] loop7: detected capacity change from 0 to 512 [ 299.312723][T14536] all: renamed from bridge_slave_1 [ 299.337154][T14528] EXT4-fs (loop7): orphan cleanup on readonly fs [ 299.347152][T14528] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.4105: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 299.366259][T14528] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 299.369949][T14542] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 299.369949][T14542] program syz.0.4108 not setting count and/or reply_len properly [ 299.371232][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 299.403417][ C1] EXT4-fs (loop7): last error at time 1782704223: ext4_ext_check_inode:521: inode 4 [ 299.411785][T14528] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.4105: Bad quota inode: 4, type: 1 [ 299.428257][T14528] loop7: lost filesystem error report for type 5 error -117 [ 299.428417][T14528] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 299.438923][T14541] loop4: detected capacity change from 0 to 512 [ 299.463058][T14528] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 299.470860][T14528] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.490998][T14541] EXT4-fs (loop4): orphan cleanup on readonly fs [ 299.504524][T14541] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #4: comm syz.4.4111: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 299.524438][T14541] loop4: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 299.531189][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 299.536442][T14541] EXT4-fs error (device loop4): ext4_quota_enable:7235: comm syz.4.4111: Bad quota inode: 4, type: 1 [ 299.540579][ C1] EXT4-fs (loop4): last error at time 1782704223: ext4_ext_check_inode:521: inode 4 [ 299.566884][T14541] loop4: lost filesystem error report for type 5 error -117 [ 299.573521][T14547] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4112'. [ 299.583644][T14541] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 299.608116][T14528] netlink: 180 bytes leftover after parsing attributes in process `syz.7.4105'. [ 299.618497][T14546] loop8: detected capacity change from 0 to 4096 [ 299.626314][T14541] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 299.639131][T14541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.642590][T14546] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.668758][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.702426][T14553] loop5: detected capacity change from 0 to 512 [ 299.708892][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 299.708911][ T28] audit: type=1400 audit(1782704224.106:1069): avc: denied { write } for pid=14545 comm="syz.8.4113" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.744673][T14553] EXT4-fs error (device loop5): ext4_quota_enable:7232: comm syz.5.4115: inode #262144: comm syz.5.4115: iget: illegal inode # [ 299.769495][T14557] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1573 sclass=netlink_route_socket pid=14557 comm=syz.4.4111 [ 299.780782][T14553] loop5: lost filesystem error report for type 5 error -117 [ 299.785260][T14553] EXT4-fs error (device loop5): ext4_quota_enable:7235: comm syz.5.4115: Bad quota inode: 262144, type: 2 [ 299.791189][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 299.801749][T14553] loop5: lost filesystem error report for type 5 error -117 [ 299.805089][ C1] EXT4-fs (loop5): initial error at time 1782704224: ext4_quota_enable:7232 [ 299.816230][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.820026][ C1] [ 299.820038][ C1] EXT4-fs (loop5): last error at time 1782704224: ext4_quota_enable:7232 [ 299.867653][T14553] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=262144). Please run e2fsck to fix. [ 299.886347][T14553] EXT4-fs (loop5): mount failed [ 299.984598][T14565] sctp: [Deprecated]: syz.8.4118 (pid 14565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 299.984598][T14565] Use struct sctp_sack_info instead [ 300.011263][ T3709] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.057612][T14565] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 300.057612][T14565] program syz.8.4118 not setting count and/or reply_len properly [ 300.286932][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.297702][ T3709] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.704340][T14568] lo speed is unknown, defaulting to 1000 [ 300.740640][ T3709] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.909199][ T3709] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.157328][ T28] audit: type=1400 audit(1782704225.556:1070): avc: denied { bind } for pid=14600 comm="syz.7.4133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 301.278581][T14608] sctp: [Deprecated]: syz.4.4134 (pid 14608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 301.278581][T14608] Use struct sctp_sack_info instead [ 301.364578][ T3709] bridge_slave_1: left allmulticast mode [ 301.410188][ T3709] bridge_slave_1: left promiscuous mode [ 301.418366][T14615] loop7: detected capacity change from 0 to 512 [ 301.440735][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.480740][T14615] EXT4-fs (loop7): orphan cleanup on readonly fs [ 301.510182][T14615] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.4137: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 301.537262][T14615] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 301.537461][T14615] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.4137: Bad quota inode: 4, type: 1 [ 301.547131][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 301.547157][ C0] EXT4-fs (loop7): last error at time 1782704225: ext4_ext_check_inode:521: inode 4 [ 301.582664][ T3709] bridge_slave_0: left allmulticast mode [ 301.599326][ T3709] bridge_slave_0: left promiscuous mode [ 301.614705][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.649860][T14615] loop7: lost filesystem error report for type 5 error -117 [ 301.650147][T14615] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 301.700670][ T28] audit: type=1400 audit(1782704226.096:1071): avc: denied { write } for pid=14611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.756910][ T3709] bond1 (unregistering): (slave geneve2): Releasing active interface [ 301.782958][T14615] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 301.790829][T14615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 301.830612][ T28] audit: type=1400 audit(1782704226.216:1072): avc: denied { write } for pid=14627 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.869250][ T3709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.904129][ T3709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.927321][ T3709] bond0 (unregistering): Released all slaves [ 301.950395][ T3709] bond1 (unregistering): Released all slaves [ 301.983984][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 301.999980][T14629] netlink: 180 bytes leftover after parsing attributes in process `syz.7.4137'. [ 302.086555][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.151646][ T28] audit: type=1400 audit(1782704226.546:1073): avc: denied { ioctl } for pid=14634 comm="syz.7.4139" path="socket:[40138]" dev="sockfs" ino=40138 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 302.297602][ T3709] hsr_slave_0: left promiscuous mode [ 302.304866][T14649] sctp: [Deprecated]: syz.8.4141 (pid 14649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 302.304866][T14649] Use struct sctp_sack_info instead [ 302.326162][ T3709] hsr_slave_1: left promiscuous mode [ 302.339648][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.353262][ T28] audit: type=1400 audit(1782704226.756:1074): avc: denied { write } for pid=14642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.384622][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.400944][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811afe3200: rx timeout, send abort [ 302.418141][ T28] audit: type=1400 audit(1782704226.796:1075): avc: denied { write } for pid=14655 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.447103][T14649] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 302.447103][T14649] program syz.8.4141 not setting count and/or reply_len properly [ 302.517070][ T3709] team0 (unregistering): Port device team_slave_1 removed [ 302.537738][ T3709] team0 (unregistering): Port device team_slave_0 removed [ 302.568656][ T28] audit: type=1326 audit(1782704226.966:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14658 comm="syz.4.4142" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f837710ce59 code=0x0 [ 302.616692][ T3703] smc: removing ib device sz1 [ 302.633799][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18 [ 302.789843][T14568] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.797424][T14568] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.815158][T14568] bridge_slave_0: entered allmulticast mode [ 302.859399][T14568] bridge_slave_0: entered promiscuous mode [ 302.863587][ T28] audit: type=1400 audit(1782704227.256:1077): avc: denied { write } for pid=14664 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.878203][T14568] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.903689][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88810cde5400: rx timeout, send abort [ 302.916088][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811afe3200: abort rx timeout. Force session deactivation [ 302.951751][ T28] audit: type=1400 audit(1782704227.346:1078): avc: denied { write } for pid=14677 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.954633][T14568] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.019085][T14568] bridge_slave_1: entered allmulticast mode [ 303.049216][T14568] bridge_slave_1: entered promiscuous mode [ 303.063490][ T3018] 8021q: adding VLAN 0 to HW filter on device eth19 [ 303.093664][T14568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.134949][T14568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.143895][T14686] loop8: detected capacity change from 0 to 512 [ 303.181206][T14686] EXT4-fs (loop8): orphan cleanup on readonly fs [ 303.189790][T14686] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.4146: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 303.196724][T14568] team0: Port device team_slave_0 added [ 303.222240][T14686] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 303.224936][T14686] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.4146: Bad quota inode: 4, type: 1 [ 303.235573][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 303.235595][ C0] EXT4-fs (loop8): last error at time 1782704227: ext4_ext_check_inode:521: inode 4 [ 303.301592][T14686] loop8: lost filesystem error report for type 5 error -117 [ 303.301927][T14686] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 303.336268][T14568] team0: Port device team_slave_1 added [ 303.338387][T14686] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 303.361867][T14686] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 303.366569][T14568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.383516][T14568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.403756][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88810cde5400: abort rx timeout. Force session deactivation [ 303.410516][T14568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.434233][T14568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.444059][T14568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.511224][T14568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.568560][ T3018] 8021q: adding VLAN 0 to HW filter on device eth20 [ 303.588445][T14568] hsr_slave_0: entered promiscuous mode [ 303.618133][T14568] hsr_slave_1: entered promiscuous mode [ 303.778072][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.870864][T14715] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4150'. [ 304.010301][T14734] loop7: detected capacity change from 0 to 512 [ 304.022678][T14734] EXT4-fs: Ignoring removed oldalloc option [ 304.038363][T14734] EXT4-fs: Ignoring removed i_version option [ 304.054942][T14736] netlink: 'syz.0.4157': attribute type 3 has an invalid length. [ 304.056381][T14734] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 304.087110][T14734] EXT4-fs (loop7): orphan cleanup on readonly fs [ 304.095015][T14734] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4156: invalid indirect mapped block 4294967295 (level 1) [ 304.111898][T14734] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 304.112069][T14734] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.4156: invalid indirect mapped block 4294967295 (level 1) [ 304.122962][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 304.122985][ C1] EXT4-fs (loop7): initial error at time 1782704228: ext4_free_branches:1023: inode 11 [ 304.123021][ C1] EXT4-fs (loop7): last error at time 1782704228: ext4_free_branches:1023: inode 11 [ 304.174102][T14734] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 304.174531][T14734] EXT4-fs (loop7): 2 truncates cleaned up [ 304.191251][T14734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 304.225174][T14734] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 304.271147][T14734] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 304.283610][T14734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 304.293535][T14734] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 304.347937][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.349870][T14568] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 304.376162][T14568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.393946][T14568] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 304.407587][T14568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.420764][T14568] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 304.429951][T14746] sctp: [Deprecated]: syz.0.4158 (pid 14746) Use of struct sctp_assoc_value in delayed_ack socket option. [ 304.429951][T14746] Use struct sctp_sack_info instead [ 304.432349][T14568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.456682][T14746] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 304.456682][T14746] program syz.0.4158 not setting count and/or reply_len properly [ 304.458696][T14568] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 304.515816][T14568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.564658][T14568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.585286][T14568] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.597268][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.605214][ T3709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.620311][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.628983][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.851283][T14568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.946814][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 304.946833][ T28] audit: type=1400 audit(1782704229.346:1083): avc: denied { ioctl } for pid=14769 comm="syz.8.4163" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 305.096154][T14568] veth0_vlan: entered promiscuous mode [ 305.108457][T14789] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.125090][T14568] veth1_vlan: entered promiscuous mode [ 305.162639][T14568] veth0_macvtap: entered promiscuous mode [ 305.169872][T14792] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4166'. [ 305.182871][T14568] veth1_macvtap: entered promiscuous mode [ 305.197840][T14568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.214648][T14568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.228383][ T154] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.231853][T14795] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4166'. [ 305.238724][ T154] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.356354][ T154] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.368340][ T154] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.976591][ T28] audit: type=1400 audit(1782704230.376:1084): avc: denied { associate } for pid=14815 comm="syz.0.4172" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 306.037464][T14816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=14816 comm=syz.9.4171 [ 306.358195][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.373385][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.690344][T14827] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 306.690344][T14827] program syz.0.4177 not setting count and/or reply_len properly [ 306.760836][T14831] loop9: detected capacity change from 0 to 512 [ 306.767643][T14832] sctp: [Deprecated]: syz.4.4178 (pid 14832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 306.767643][T14832] Use struct sctp_sack_info instead [ 306.796170][T14832] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 306.796170][T14832] program syz.4.4178 not setting count and/or reply_len properly [ 306.822265][T14831] EXT4-fs (loop9): orphan cleanup on readonly fs [ 306.834575][T14831] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.4179: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 306.856719][T14831] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 306.856951][T14831] EXT4-fs error (device loop9): ext4_quota_enable:7235: comm syz.9.4179: Bad quota inode: 4, type: 1 [ 306.866401][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 306.866421][ C1] EXT4-fs (loop9): last error at time 1782704231: ext4_ext_check_inode:521: inode 4 [ 306.903835][T14831] loop9: lost filesystem error report for type 5 error -117 [ 306.904136][T14831] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 306.950609][T14831] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 306.961779][T14835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14835 comm=syz.8.4180 [ 306.975491][T14831] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.148750][T14842] loop8: detected capacity change from 0 to 512 [ 307.164258][T14843] netlink: 180 bytes leftover after parsing attributes in process `syz.9.4179'. [ 307.190619][T14842] EXT4-fs (loop8): orphan cleanup on readonly fs [ 307.202069][T14842] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.4182: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 307.222920][T14842] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 307.223176][T14842] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.4182: Bad quota inode: 4, type: 1 [ 307.232437][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 307.232458][ C0] EXT4-fs (loop8): last error at time 1782704231: ext4_ext_check_inode:521: inode 4 [ 307.280835][T14842] loop8: lost filesystem error report for type 5 error -117 [ 307.281779][T14842] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 307.322638][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.333135][T14842] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 307.340743][T14842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 307.483572][T14847] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 307.500577][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.529926][T14849] loop7: detected capacity change from 0 to 128 [ 307.645290][T14861] loop7: detected capacity change from 0 to 1024 [ 307.663906][T14861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 307.700053][T14867] loop9: detected capacity change from 0 to 256 [ 307.713900][T14867] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 307.742335][T14861] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.780942][ T28] audit: type=1400 audit(1782704232.176:1085): avc: denied { write } for pid=14858 comm="syz.7.4190" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 307.859113][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.911872][T14887] loop7: detected capacity change from 0 to 512 [ 307.929469][T14887] EXT4-fs (loop7): orphan cleanup on readonly fs [ 307.938811][T14887] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.4200: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 307.971626][T14887] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 307.972168][T14887] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.4200: Bad quota inode: 4, type: 1 [ 307.983140][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 307.983159][ C0] EXT4-fs (loop7): last error at time 1782704232: ext4_ext_check_inode:521: inode 4 [ 308.019145][T14887] loop7: lost filesystem error report for type 5 error -117 [ 308.019420][T14887] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 308.047871][T14887] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 308.057005][T14887] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.087423][T14895] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 308.087423][T14895] program syz.9.4201 not setting count and/or reply_len properly [ 308.241458][T14897] sctp: [Deprecated]: syz.0.4202 (pid 14897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 308.241458][T14897] Use struct sctp_sack_info instead [ 308.300663][T14897] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 308.300663][T14897] program syz.0.4202 not setting count and/or reply_len properly [ 308.503740][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.977051][ T28] audit: type=1400 audit(1782704233.376:1086): avc: denied { mount } for pid=14920 comm="syz.9.4207" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 309.281214][ T28] audit: type=1400 audit(1782704233.646:1087): avc: denied { search } for pid=14920 comm="syz.9.4207" name="/" dev="configfs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 309.822043][T14955] loop9: detected capacity change from 0 to 2048 [ 309.858718][ T28] audit: type=1400 audit(1782704234.256:1088): avc: denied { read } for pid=14957 comm="syz.8.4209" path="socket:[40656]" dev="sockfs" ino=40656 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 310.092297][T14955] Alternate GPT is invalid, using primary GPT. [ 310.099276][T14955] loop9: p1 p2 p3 [ 310.188821][T14984] loop9: detected capacity change from 0 to 512 [ 310.207820][T14984] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 310.222104][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 310.245560][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop9p3, 10) failed: No such file or directory [ 310.257736][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop9p2, 10) failed: No such file or directory [ 310.278850][T14984] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.297126][T14984] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 310.338277][ T28] audit: type=1400 audit(1782704234.736:1089): avc: denied { write } for pid=14983 comm="syz.9.4214" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 310.418131][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.594716][T14966] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.675648][T15002] loop7: detected capacity change from 0 to 1024 [ 310.685542][T15002] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 310.729895][T15002] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (12687!=20869) [ 310.731047][T15006] loop4: detected capacity change from 0 to 256 [ 310.740914][T15002] EXT4-fs error (device loop7): ext4_get_journal_inode:5900: inode #32: comm syz.7.4220: iget: special inode unallocated [ 310.762803][T15002] loop7: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 310.762997][T15002] EXT4-fs (loop7): no journal found [ 310.774382][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 310.774403][ C0] EXT4-fs (loop7): initial error at time 1782704235: ext4_get_journal_inode:5900: inode 32 [ 310.774428][ C0] EXT4-fs (loop7): last error at time 1782704235: ext4_get_journal_inode:5900: inode 32 [ 310.813469][T15006] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 310.822226][T15002] EXT4-fs (loop7): can't get journal size [ 310.853040][T15002] EXT4-fs error (device loop7): ext4_protect_reserved_inode:160: inode #32: comm syz.7.4220: iget: special inode unallocated [ 310.876935][T15002] loop7: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 310.880658][T15002] EXT4-fs (loop7): failed to initialize system zone (-117) [ 310.923508][T15014] netlink: 'syz.0.4225': attribute type 10 has an invalid length. [ 310.942056][T15002] EXT4-fs (loop7): mount failed [ 310.981249][T15014] bond0: (slave dummy0): Releasing backup interface [ 311.000166][T15019] netlink: 'syz.0.4225': attribute type 10 has an invalid length. [ 311.032612][T15014] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 311.064598][T15014] team0: Failed to send options change via netlink (err -105) [ 311.109609][T15014] team0: Port device dummy0 added [ 311.125357][T15019] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 311.153432][ T28] audit: type=1400 audit(1782704235.556:1090): avc: denied { mounton } for pid=15027 comm="syz.4.4231" path="/863/file1/bus" dev="loop4" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 311.187619][T15019] team0: Failed to send options change via netlink (err -105) [ 311.200547][T15019] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 311.211482][T15019] team0: Port device dummy0 removed [ 311.219745][T15019] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 311.264151][ C1] I/O error, dev loop4, sector 66 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 311.275658][T15033] FAT-fs (loop4): Directory bread(block 66) failed [ 311.287857][T15033] FAT-fs (loop4): Directory bread(block 67) failed [ 311.321637][T15033] FAT-fs (loop4): Directory bread(block 68) failed [ 311.330640][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4232'. [ 311.343337][T15033] FAT-fs (loop4): Directory bread(block 69) failed [ 311.350021][T15033] FAT-fs (loop4): Directory bread(block 70) failed [ 311.364262][T15033] FAT-fs (loop4): Directory bread(block 71) failed [ 311.381897][T15042] EXT4-fs (loop9): orphan cleanup on readonly fs [ 311.387517][T15033] FAT-fs (loop4): Directory bread(block 72) failed [ 311.391938][T15042] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.4234: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 311.402547][T15033] FAT-fs (loop4): Directory bread(block 73) failed [ 311.421238][T15033] FAT-fs (loop4): Directory bread(block 74) failed [ 311.428221][T15033] FAT-fs (loop4): Directory bread(block 75) failed [ 311.438193][T15042] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 311.439912][T15042] EXT4-fs error (device loop9): ext4_quota_enable:7235: comm syz.9.4234: Bad quota inode: 4, type: 1 [ 311.449450][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 311.449494][ C0] EXT4-fs (loop9): last error at time 1782704235: ext4_ext_check_inode:521: inode 4 [ 311.465953][T15045] syzkaller1: entered promiscuous mode [ 311.470435][T15042] loop9: lost filesystem error report for type 5 error -117 [ 311.487009][T15045] syzkaller1: entered allmulticast mode [ 311.501900][T15042] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 311.519284][T15042] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 311.526592][T15042] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 311.566970][T15047] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 311.566970][T15047] program syz.8.4235 not setting count and/or reply_len properly [ 311.572650][T15042] netlink: 180 bytes leftover after parsing attributes in process `syz.9.4234'. [ 311.607261][ T3509] FAT-fs (loop4): bread failed in fat_clusters_flush [ 311.621740][T13862] FAT-fs (loop4): unable to read boot sector to mark fs as dirty [ 311.634996][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.670007][T15050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.688662][T15050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.736629][T15055] netlink: 'syz.7.4242': attribute type 1 has an invalid length. [ 311.777894][T15055] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.812308][T15055] bond1: entered promiscuous mode [ 311.817842][T15055] bond1: entered allmulticast mode [ 311.869118][T15068] set_capacity_and_notify: 3 callbacks suppressed [ 311.869139][T15068] loop7: detected capacity change from 0 to 512 [ 311.885282][T15068] EXT4-fs: Ignoring removed bh option [ 311.898727][T15068] EXT4-fs error (device loop7): ext4_iget_extra_inode:5180: inode #15: comm syz.7.4245: corrupted in-inode xattr: e_value size too large [ 311.915817][T15068] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 311.916769][T15068] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.4245: couldn't read orphan inode 15 (err -117) [ 311.917637][T15072] sctp: [Deprecated]: syz.0.4244 (pid 15072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 311.917637][T15072] Use struct sctp_sack_info instead [ 311.927034][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 311.927059][ C1] EXT4-fs (loop7): initial error at time 1782704236: ext4_iget_extra_inode:5180: inode 15 [ 311.927108][ C1] EXT4-fs (loop7): last error at time 1782704236: ext4_iget_extra_inode:5180: inode 15 [ 311.927772][T15068] loop7: lost filesystem error report for type 5 error -117 [ 311.985935][T15068] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.012874][ T28] audit: type=1400 audit(1782704236.416:1091): avc: denied { write } for pid=15067 comm="syz.7.4245" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.039447][T15068] EXT4-fs warning (device loop7): dx_probe:801: inode #2: comm syz.7.4245: Unrecognised inode hash code 4 [ 312.047266][T15072] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 312.047266][T15072] program syz.0.4244 not setting count and/or reply_len properly [ 312.052155][T15068] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.4245: Corrupt directory, running e2fsck is recommended [ 312.052636][ T28] audit: type=1400 audit(1782704236.436:1092): avc: denied { write } for pid=15067 comm="syz.7.4245" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.052735][ T28] audit: type=1400 audit(1782704236.436:1093): avc: denied { write } for pid=15067 comm="syz.7.4245" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.052804][ T28] audit: type=1400 audit(1782704236.436:1094): avc: denied { write } for pid=15067 comm="syz.7.4245" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 312.304004][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.315843][ T49] bridge_slave_1: left allmulticast mode [ 312.333929][ T49] bridge_slave_1: left promiscuous mode [ 312.354363][ T28] audit: type=1400 audit(1782704236.756:1095): avc: denied { write } for pid=15078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.387141][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.390424][ T28] audit: type=1400 audit(1782704236.756:1096): avc: denied { write } for pid=15099 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.433227][ T49] bridge_slave_0: left allmulticast mode [ 312.438405][T15104] loop7: detected capacity change from 0 to 512 [ 312.444023][ T49] bridge_slave_0: left promiscuous mode [ 312.463016][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.481687][T15104] EXT4-fs (loop7): orphan cleanup on readonly fs [ 312.489123][T15104] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.4249: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 312.509331][T15104] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 312.509589][T15104] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.4249: Bad quota inode: 4, type: 1 [ 312.520843][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 312.520908][ C0] EXT4-fs (loop7): last error at time 1782704236: ext4_ext_check_inode:521: inode 4 [ 312.554174][T15104] loop7: lost filesystem error report for type 5 error -117 [ 312.554955][T15104] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 312.584532][T15104] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 312.596536][T15104] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.630997][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.651514][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.664472][ T49] bond0 (unregistering): Released all slaves [ 312.681826][ T3018] 8021q: adding VLAN 0 to HW filter on device eth21 [ 312.691951][T15111] netlink: 180 bytes leftover after parsing attributes in process `syz.7.4249'. [ 312.740494][T13073] IPVS: starting estimator thread 0... [ 312.757736][ T49] tipc: Left network mode [ 312.762424][T15057] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.780426][T15057] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.789409][T15057] bridge_slave_0: entered allmulticast mode [ 312.791540][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.799231][T15057] bridge_slave_0: entered promiscuous mode [ 312.831874][T15114] IPVS: using max 2496 ests per chain, 124800 per kthread [ 312.847269][ T49] hsr_slave_0: left promiscuous mode [ 312.864945][ T49] hsr_slave_1: left promiscuous mode [ 312.877063][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.888020][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.989672][T15129] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 312.989672][T15129] program syz.0.4256 not setting count and/or reply_len properly [ 313.036596][ T49] team0 (unregistering): Port device team_slave_1 removed [ 313.047365][ T28] audit: type=1400 audit(1782704237.446:1097): avc: denied { bind } for pid=15127 comm="syz.8.4258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 313.069627][ T49] team0 (unregistering): Port device team_slave_0 removed [ 313.113312][T15057] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.121547][T15057] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.130559][T15057] bridge_slave_1: entered allmulticast mode [ 313.138047][T15057] bridge_slave_1: entered promiscuous mode [ 313.160873][T15057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.175714][T15057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.235150][T15057] team0: Port device team_slave_0 added [ 313.250341][T15057] team0: Port device team_slave_1 added [ 313.297681][ T28] audit: type=1400 audit(1782704237.696:1098): avc: denied { write } for pid=15136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.334098][T15057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.361899][T15057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.424612][T15057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.446880][ T3018] 8021q: adding VLAN 0 to HW filter on device eth22 [ 313.462423][ T49] IPVS: stop unused estimator thread 0... [ 313.469476][T15057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.486257][T15057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.522466][T15057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.563130][T15057] hsr_slave_0: entered promiscuous mode [ 313.576625][T15057] hsr_slave_1: entered promiscuous mode [ 313.596948][T15057] debugfs: 'hsr0' already exists in 'hsr' [ 313.610027][T15057] Cannot create hsr debugfs directory [ 313.835129][ T3018] 8021q: adding VLAN 0 to HW filter on device eth23 [ 313.879933][T15177] sctp: [Deprecated]: syz.0.4263 (pid 15177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 313.879933][T15177] Use struct sctp_sack_info instead [ 313.913610][T15177] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 313.913610][T15177] program syz.0.4263 not setting count and/or reply_len properly [ 314.008118][T15057] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.020299][T15057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.030969][T15057] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.041217][T15057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.049795][T15057] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 314.060814][T15057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.076000][T15057] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 314.087807][T15057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.098199][ T3018] 8021q: adding VLAN 0 to HW filter on device eth24 [ 314.141889][T15057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.156557][T15057] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.173429][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.181322][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.201751][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.209188][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.266593][T15210] loop9: detected capacity change from 0 to 512 [ 314.287460][T15210] EXT4-fs (loop9): orphan cleanup on readonly fs [ 314.315159][T15210] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.4267: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 314.362790][T15210] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 314.368313][T15210] EXT4-fs error (device loop9): ext4_quota_enable:7235: comm syz.9.4267: Bad quota inode: 4, type: 1 [ 314.378143][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 314.378169][ C1] EXT4-fs (loop9): last error at time 1782704238: ext4_ext_check_inode:521: inode 4 [ 314.408218][T15210] loop9: lost filesystem error report for type 5 error -117 [ 314.408416][T15210] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 314.459774][T15210] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 314.479153][T15210] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.575004][T15057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.680500][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.792304][T15057] veth0_vlan: entered promiscuous mode [ 314.835521][T15057] veth1_vlan: entered promiscuous mode [ 314.964975][T15282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4278'. [ 314.968325][T15279] netlink: 96 bytes leftover after parsing attributes in process `syz.9.4279'. [ 315.014265][T15057] veth0_macvtap: entered promiscuous mode [ 315.052796][T15057] veth1_macvtap: entered promiscuous mode [ 315.104263][T15057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.147825][T15057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.170129][T15303] loop9: detected capacity change from 0 to 512 [ 315.186492][T15303] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 315.198701][ T3699] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.222247][T15303] EXT4-fs (loop9): 1 truncate cleaned up [ 315.229298][ T3699] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.245271][T15303] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.285879][ T3699] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.326220][ T3699] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.377873][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 315.377890][ T28] audit: type=1400 audit(1782704239.776:1112): avc: denied { write } for pid=15321 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.470033][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.495080][T15330] loop9: detected capacity change from 0 to 512 [ 315.549363][T15330] EXT4-fs (loop9): orphan cleanup on readonly fs [ 315.556067][T15330] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.4289: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 315.593153][T15330] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 315.593861][T15330] EXT4-fs error (device loop9): ext4_quota_enable:7235: comm syz.9.4289: Bad quota inode: 4, type: 1 [ 315.605783][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 315.605806][ C1] EXT4-fs (loop9): last error at time 1782704239: ext4_ext_check_inode:521: inode 4 [ 315.703167][T15330] loop9: lost filesystem error report for type 5 error -117 [ 315.703526][T15330] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 315.765910][T15330] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 315.788672][T15330] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.818338][ T28] audit: type=1400 audit(1782704240.216:1113): avc: denied { write } for pid=15328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.870898][T15330] netlink: 180 bytes leftover after parsing attributes in process `syz.9.4289'. [ 315.892115][T15362] sctp: [Deprecated]: syz.1.4293 (pid 15362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 315.892115][T15362] Use struct sctp_sack_info instead [ 315.922838][ T28] audit: type=1400 audit(1782704240.326:1114): avc: denied { write } for pid=15361 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 315.996755][ T28] audit: type=1400 audit(1782704240.356:1115): avc: denied { bind } for pid=15364 comm="syz.9.4297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 316.077964][T15362] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 316.077964][T15362] program syz.1.4293 not setting count and/or reply_len properly [ 316.189607][ T28] audit: type=1400 audit(1782704240.586:1116): avc: denied { write } for pid=15369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.255933][ T28] audit: type=1400 audit(1782704240.656:1117): avc: denied { write } for pid=15384 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.387059][ T28] audit: type=1400 audit(1782704240.786:1118): avc: denied { write } for pid=15387 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.485866][T15402] loop0: detected capacity change from 0 to 512 [ 316.607591][ T28] audit: type=1400 audit(1782704240.906:1119): avc: denied { remount } for pid=15373 comm="syz.0.4299" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 316.700680][ T28] audit: type=1326 audit(1782704240.946:1120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15400 comm="syz.7.4301" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f77ae18ce59 code=0x0 [ 316.823291][T15412] loop8: detected capacity change from 0 to 512 [ 316.842764][ T28] audit: type=1400 audit(1782704241.226:1121): avc: denied { write } for pid=15404 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.870752][T15412] EXT4-fs (loop8): orphan cleanup on readonly fs [ 316.878939][T15412] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.4303: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 316.899867][T15412] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 316.900125][T15412] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.4303: Bad quota inode: 4, type: 1 [ 316.913220][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 316.913246][ C0] EXT4-fs (loop8): last error at time 1782704241: ext4_ext_check_inode:521: inode 4 [ 316.961562][T15412] loop8: lost filesystem error report for type 5 error -117 [ 316.961885][T15412] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 317.044862][T15412] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 317.396762][T15437] loop9: detected capacity change from 0 to 512 [ 317.485389][T15437] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.766047][T15463] loop7: detected capacity change from 0 to 1024 [ 317.798246][T15463] EXT4-fs: Ignoring removed nobh option [ 317.872737][T15463] EXT4-fs: Ignoring removed i_version option [ 317.916475][T15471] loop9: detected capacity change from 0 to 256 [ 318.029058][T15464] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 318.038449][T15464] FAT-fs (loop9): Filesystem has been set read-only [ 318.046615][T15464] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 318.057078][T15464] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 318.067546][T15464] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 318.077557][T15464] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 318.089795][T15464] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 318.099205][T15464] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 318.109139][T15464] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 318.120575][T15464] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 318.139649][T15464] FAT-fs (loop9): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 318.326681][T15500] loop1: detected capacity change from 0 to 512 [ 318.399126][T15512] tmpfs: Too small a size for current use [ 318.417492][T15500] EXT4-fs (loop1): orphan cleanup on readonly fs [ 318.451999][T15500] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.4319: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 318.564155][T15524] loop0: detected capacity change from 0 to 1024 [ 318.581902][T15521] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 318.581902][T15521] program syz.8.4323 not setting count and/or reply_len properly [ 318.600663][T15500] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 318.601191][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 318.619239][ C1] EXT4-fs (loop1): last error at time 1782704243: ext4_ext_check_inode:521: inode 4 [ 318.629388][T15500] EXT4-fs error (device loop1): ext4_quota_enable:7235: comm syz.1.4319: Bad quota inode: 4, type: 1 [ 318.652712][T15500] loop1: lost filesystem error report for type 5 error -117 [ 318.654405][T15500] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 318.718797][T15500] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 318.752508][T15524] EXT4-fs mount: 7 callbacks suppressed [ 318.752527][T15524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.774629][T15500] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.808778][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.871195][T15550] loop7: detected capacity change from 0 to 128 [ 318.910865][T15550] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 318.947027][T15561] loop0: detected capacity change from 0 to 512 [ 318.959338][T15550] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.989740][T15561] EXT4-fs (loop0): orphan cleanup on readonly fs [ 318.996494][T15561] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.4331: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 319.005239][T15550] ext2 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.016707][T15561] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 319.041176][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 319.041539][T15561] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.4331: Bad quota inode: 4, type: 1 [ 319.051261][ C0] EXT4-fs (loop0): last error at time 1782704243: ext4_ext_check_inode:521: inode 4 [ 319.090104][T15561] loop0: lost filesystem error report for type 5 error -117 [ 319.119118][T15561] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 319.156381][T15561] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 319.167644][T15561] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 319.293606][T15584] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4331'. [ 319.394646][T13132] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.407079][T15057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.484117][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.589480][T15610] loop8: detected capacity change from 0 to 512 [ 319.647627][T15610] EXT4-fs (loop8): 1 truncate cleaned up [ 319.672926][T15610] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.720932][T15628] loop1: detected capacity change from 0 to 512 [ 319.735796][T15627] sctp: [Deprecated]: syz.0.4340 (pid 15627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.735796][T15627] Use struct sctp_sack_info instead [ 319.750197][T15628] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.769071][T15628] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.4339: corrupted in-inode xattr: invalid ea_ino [ 319.771562][T15627] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 319.771562][T15627] program syz.0.4340 not setting count and/or reply_len properly [ 319.802395][T15628] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.816338][T15628] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.4339: couldn't read orphan inode 15 (err -117) [ 319.825813][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 319.825849][ C0] EXT4-fs (loop1): initial error at time 1782704244: ext4_iget_extra_inode:5180: inode 15 [ 319.825902][ C0] EXT4-fs (loop1): last error at time 1782704244: ext4_iget_extra_inode:5180: inode 15 [ 319.870770][T15628] loop1: lost filesystem error report for type 5 error -117 [ 319.872663][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.892930][T15628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.194756][T15057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.208751][T15657] sctp: [Deprecated]: syz.9.4346 (pid 15657) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.208751][T15657] Use struct sctp_sack_info instead [ 320.237397][T15657] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 320.237397][T15657] program syz.9.4346 not setting count and/or reply_len properly [ 320.282748][T15660] loop7: detected capacity change from 0 to 512 [ 320.307526][T15660] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 320.337054][T15660] EXT4-fs (loop7): 1 truncate cleaned up [ 320.351653][T15660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.375642][T15664] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4349'. [ 320.394788][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 320.394821][ T28] audit: type=1400 audit(1782704244.786:1148): avc: denied { write } for pid=15658 comm="syz.7.4348" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.409563][T15669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4351'. [ 320.428537][T15669] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4351'. [ 320.430824][ T3711] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.430875][ T3711] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.430914][ T3711] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.430978][ T3711] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 320.852281][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.189861][ T68] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.364883][ T68] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.376228][ T68] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.388610][ T68] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.631051][T15701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4360'. [ 321.858900][T15705] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 322.140306][ T28] audit: type=1400 audit(1782704246.536:1149): avc: denied { write } for pid=15702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.368913][T15734] sctp: [Deprecated]: syz.7.4364 (pid 15734) Use of struct sctp_assoc_value in delayed_ack socket option. [ 322.368913][T15734] Use struct sctp_sack_info instead [ 322.451228][T15734] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 322.451228][T15734] program syz.7.4364 not setting count and/or reply_len properly [ 322.596544][ T28] audit: type=1400 audit(1782704246.656:1150): avc: denied { write } for pid=15724 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.631670][ T28] audit: type=1400 audit(1782704246.946:1151): avc: denied { write } for pid=15729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.680134][ T28] audit: type=1400 audit(1782704246.976:1152): avc: denied { write } for pid=15745 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 322.737285][ T28] audit: type=1400 audit(1782704247.106:1153): avc: denied { create } for pid=15748 comm="syz.0.4366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 322.833963][T15753] loop0: detected capacity change from 0 to 1024 [ 322.853283][T15753] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 322.863704][T15753] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 322.873382][T15753] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.096405][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.114598][T15768] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 323.114598][T15768] program syz.1.4369 not setting count and/or reply_len properly [ 323.254072][T15779] loop8: detected capacity change from 0 to 512 [ 323.272866][T15779] EXT4-fs (loop8): orphan cleanup on readonly fs [ 323.281901][T15779] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.4374: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 323.305593][T15779] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 323.307306][T15779] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.4374: Bad quota inode: 4, type: 1 [ 323.311222][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 323.323415][T15779] loop8: lost filesystem error report for type 5 error -117 [ 323.330927][ C1] EXT4-fs (loop8): last error at time 1782704247: ext4_ext_check_inode:521 [ 323.340114][T15779] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 323.347369][ C1] [ 323.379029][T15779] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 323.388019][T15779] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.519936][T15793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1573 sclass=netlink_route_socket pid=15793 comm=syz.8.4374 [ 323.905213][ T28] audit: type=1400 audit(1782704248.306:1154): avc: denied { read } for pid=15794 comm="syz.1.4378" path="socket:[43413]" dev="sockfs" ino=43413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 324.218633][T15808] sctp: [Deprecated]: syz.7.4383 (pid 15808) Use of struct sctp_assoc_value in delayed_ack socket option. [ 324.218633][T15808] Use struct sctp_sack_info instead [ 324.251201][T15808] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 324.251201][T15808] program syz.7.4383 not setting count and/or reply_len properly [ 325.401242][T15824] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 325.401242][T15824] program syz.7.4390 not setting count and/or reply_len properly [ 326.061979][T15762] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 326.119938][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.136631][ T28] audit: type=1400 audit(1782704250.536:1155): avc: denied { write } for pid=15827 comm="syz.0.4391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 326.149083][T15830] syzkaller1: entered promiscuous mode [ 326.173907][T15830] syzkaller1: entered allmulticast mode [ 326.175299][T15837] loop9: detected capacity change from 0 to 512 [ 326.196041][ T28] audit: type=1400 audit(1782704250.546:1156): avc: denied { setopt } for pid=15827 comm="syz.0.4391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 326.220840][T15837] EXT4-fs: Ignoring removed bh option [ 326.230826][T15837] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 326.283917][T15837] EXT4-fs (loop9): 1 truncate cleaned up [ 326.298171][T15837] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.413738][T15849] sctp: [Deprecated]: syz.1.4396 (pid 15849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 326.413738][T15849] Use struct sctp_sack_info instead [ 326.440129][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.505004][T15849] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 326.505004][T15849] program syz.1.4396 not setting count and/or reply_len properly [ 326.714140][T15872] loop7: detected capacity change from 0 to 512 [ 326.733237][T15872] EXT4-fs (loop7): orphan cleanup on readonly fs [ 326.740296][T15872] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.4406: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 326.775648][T15872] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 326.775879][T15872] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.4406: Bad quota inode: 4, type: 1 [ 326.787083][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 326.787109][ C0] EXT4-fs (loop7): last error at time 1782704251: ext4_ext_check_inode:521: inode 4 [ 326.842399][T15872] loop7: lost filesystem error report for type 5 error -117 [ 326.842630][T15872] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 326.886229][T15876] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 326.886229][T15876] program syz.8.4407 not setting count and/or reply_len properly [ 326.890057][T15872] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 326.948832][T15872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.087658][T15883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1573 sclass=netlink_route_socket pid=15883 comm=syz.7.4406 [ 327.322229][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.667956][T15871] loop9: detected capacity change from 0 to 1024 [ 327.789837][T15916] loop7: detected capacity change from 0 to 164 [ 327.837632][T15916] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 328.097051][ T28] audit: type=1400 audit(1782704252.486:1157): avc: denied { append } for pid=15928 comm="syz.0.4417" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 328.460134][ T28] audit: type=1400 audit(1782704252.856:1158): avc: denied { write } for pid=15955 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.532564][ T28] audit: type=1400 audit(1782704252.916:1159): avc: denied { write } for pid=15970 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.898570][T15981] sctp: [Deprecated]: syz.7.4420 (pid 15981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.898570][T15981] Use struct sctp_sack_info instead [ 328.926426][T15981] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 328.926426][T15981] program syz.7.4420 not setting count and/or reply_len properly [ 328.953493][T15982] syzkaller1: entered promiscuous mode [ 328.961452][T15982] syzkaller1: entered allmulticast mode [ 329.138007][T15984] loop8: detected capacity change from 0 to 512 [ 329.147130][T15984] EXT4-fs (loop8): orphan cleanup on readonly fs [ 329.153902][T15984] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.4422: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 329.172497][T15984] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 329.172714][T15984] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.4422: Bad quota inode: 4, type: 1 [ 329.181233][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 329.185201][T15984] loop8: lost filesystem error report for type 5 error -117 [ 329.196090][ C0] EXT4-fs (loop8): last error at time 1782704253: ext4_ext_check_inode:521: inode 4 [ 329.225064][T15984] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 329.241971][T15984] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 329.249915][T15984] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 329.328379][T15991] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 329.328379][T15991] program syz.9.4424 not setting count and/or reply_len properly [ 329.340213][T15984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1573 sclass=netlink_route_socket pid=15984 comm=syz.8.4422 [ 329.378903][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.549760][T16000] -1: renamed from syzkaller0 [ 330.314545][ T28] audit: type=1400 audit(1782704254.706:1160): avc: denied { read } for pid=16005 comm="syz.0.4430" path="socket:[44055]" dev="sockfs" ino=44055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 330.694244][ T28] audit: type=1400 audit(1782704255.096:1161): avc: denied { bind } for pid=16015 comm="syz.1.4434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 330.904903][T16028] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4439'. [ 331.107745][T16043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4444'. [ 331.244542][ T28] audit: type=1400 audit(1782704255.646:1162): avc: denied { write } for pid=16038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.305063][ T28] audit: type=1400 audit(1782704255.706:1163): avc: denied { write } for pid=16055 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.432453][ T28] audit: type=1400 audit(1782704255.836:1164): avc: denied { write } for pid=16058 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.497742][ T28] audit: type=1400 audit(1782704255.896:1165): avc: denied { write } for pid=16071 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.557721][T16078] syz_tun: entered allmulticast mode [ 331.562440][T16079] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 331.562440][T16079] program syz.8.4446 not setting count and/or reply_len properly [ 331.564126][T16075] syz_tun: left allmulticast mode [ 331.615705][ T28] audit: type=1400 audit(1782704256.016:1166): avc: denied { name_bind 0x1000000 } for pid=16081 comm="syz.9.4450" path="socket:[43666]" dev="sockfs" ino=43666 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 331.745413][T16094] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 331.746759][T16092] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4456'. [ 332.100432][T16115] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4460'. [ 332.376066][ T3709] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 332.639305][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4475'. [ 332.857698][ T28] audit: type=1400 audit(1782704257.256:1167): avc: denied { write } for pid=16150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.907307][ T28] audit: type=1400 audit(1782704257.256:1168): avc: denied { write } for pid=16174 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.939414][T16178] sctp: [Deprecated]: syz.1.4481 (pid 16178) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.939414][T16178] Use struct sctp_sack_info instead [ 333.018040][T16178] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 333.018040][T16178] program syz.1.4481 not setting count and/or reply_len properly [ 333.064481][T16190] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 333.064481][T16190] program syz.9.4483 not setting count and/or reply_len properly [ 333.088534][T16128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.768816][T16203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1573 sclass=netlink_route_socket pid=16203 comm=syz.0.4496 [ 333.865907][T16207] loop1: detected capacity change from 0 to 512 [ 333.926622][T16207] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.099236][T16216] syzkaller0: entered promiscuous mode [ 334.120570][T16216] syzkaller0: entered allmulticast mode [ 334.141327][T16222] netlink: 64 bytes leftover after parsing attributes in process `syz.7.4492'. [ 334.177265][T15057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.267871][T16234] sctp: [Deprecated]: syz.8.4497 (pid 16234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 334.267871][T16234] Use struct sctp_sack_info instead [ 334.323093][T16235] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 334.323093][T16235] program syz.8.4497 not setting count and/or reply_len properly [ 334.431577][T16241] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 334.431577][T16241] program syz.0.4500 not setting count and/or reply_len properly [ 334.538494][T16245] loop7: detected capacity change from 0 to 512 [ 334.548586][T16245] EXT4-fs (loop7): orphan cleanup on readonly fs [ 334.556818][T16245] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.4502: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 334.642949][T16245] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 334.661186][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 334.684933][ C0] EXT4-fs (loop7): last error at time 1782704259: ext4_ext_check_inode:521: inode 4 [ 334.713737][T16245] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.4502: Bad quota inode: 4, type: 1 [ 334.738470][T16245] loop7: lost filesystem error report for type 5 error -117 [ 334.738638][T16245] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 335.009699][T16245] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 335.064049][T16245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 336.235229][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.204668][T16325] loop8: detected capacity change from 0 to 512 [ 337.224283][T16325] EXT4-fs (loop8): orphan cleanup on readonly fs [ 337.259648][T16325] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.4515: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 337.296745][T16325] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 337.300521][T16325] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.4515: Bad quota inode: 4, type: 1 [ 337.311743][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 337.311766][ C1] EXT4-fs (loop8): last error at time 1782704261: ext4_ext_check_inode:521: inode 4 [ 337.345408][T16325] loop8: lost filesystem error report for type 5 error -117 [ 337.347338][T16325] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 337.374975][T16325] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 337.383821][T16325] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 337.469306][T16350] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 337.469306][T16350] program syz.7.4521 not setting count and/or reply_len properly [ 337.532667][T16353] netlink: 180 bytes leftover after parsing attributes in process `syz.8.4515'. [ 337.625003][T13183] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.731625][T16452] loop9: detected capacity change from 0 to 128 [ 339.806562][T16452] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 339.820127][T16452] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.867590][T16463] loop8: detected capacity change from 0 to 128 [ 339.883215][T16463] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 339.902719][T16463] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.887810][T14568] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 340.985404][T13183] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 341.054826][T16470] loop1: detected capacity change from 0 to 512 [ 341.123126][T16470] EXT4-fs (loop1): orphan cleanup on readonly fs [ 341.146798][T16470] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.4535: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 341.179251][T16470] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 341.179732][T16470] EXT4-fs error (device loop1): ext4_quota_enable:7235: comm syz.1.4535: Bad quota inode: 4, type: 1 [ 341.189939][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 341.189964][ C1] EXT4-fs (loop1): last error at time 1782704265: ext4_ext_check_inode:521: inode 4 [ 341.229555][T16470] loop1: lost filesystem error report for type 5 error -117 [ 341.230086][T16470] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 341.256280][T16470] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 341.265305][T16470] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 341.351436][T16472] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4535'. [ 341.503517][T15057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.917092][T16487] sctp: [Deprecated]: syz.8.4534 (pid 16487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 341.917092][T16487] Use struct sctp_sack_info instead [ 341.953101][T16487] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 341.953101][T16487] program syz.8.4534 not setting count and/or reply_len properly [ 342.359315][T16522] loop7: detected capacity change from 0 to 512 [ 342.383569][T16522] EXT4-fs (loop7): orphan cleanup on readonly fs [ 342.419622][T16522] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.4546: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 342.447926][T16522] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 342.451183][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 342.473578][ C0] EXT4-fs (loop7): last error at time 1782704266: ext4_ext_check_inode:521: inode 4 [ 342.486351][T16522] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.4546: Bad quota inode: 4, type: 1 [ 342.498621][T16522] loop7: lost filesystem error report for type 5 error -117 [ 342.498865][T16522] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 342.532303][T16522] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 342.548903][T16522] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 342.754570][T16545] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4547'. [ 342.847611][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.018430][T16599] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 344.018430][T16599] program syz.7.4558 not setting count and/or reply_len properly [ 344.119634][T16601] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4559'. [ 344.244057][T16605] loop9: detected capacity change from 0 to 512 [ 344.265197][T16605] EXT4-fs (loop9): orphan cleanup on readonly fs [ 344.283041][T16605] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.4561: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 344.304974][T16605] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 344.305158][T16605] EXT4-fs error (device loop9): ext4_quota_enable:7235: comm syz.9.4561: Bad quota inode: 4, type: 1 [ 344.315057][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 344.315081][ C1] EXT4-fs (loop9): last error at time 1782704268: ext4_ext_check_inode:521: inode 4 [ 344.345256][T16609] sctp: [Deprecated]: syz.0.4562 (pid 16609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.345256][T16609] Use struct sctp_sack_info instead [ 344.345777][T16605] loop9: lost filesystem error report for type 5 error -117 [ 344.366479][T16609] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 344.366479][T16609] program syz.0.4562 not setting count and/or reply_len properly [ 344.398623][T16605] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 344.419205][T16605] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 344.430199][T16605] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 344.555809][T14568] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.758526][T16615] syzkaller0: entered promiscuous mode [ 344.766080][T16615] syzkaller0: entered allmulticast mode [ 344.988477][T16628] loop7: detected capacity change from 0 to 4096 [ 345.008334][T16628] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.041756][ T28] audit: type=1400 audit(1782704269.436:1169): avc: denied { write } for pid=16627 comm="syz.7.4568" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.157156][T13132] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.240260][T16645] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4575'. [ 345.251447][T16647] sg_write: data in/out 3227/14 bytes for SCSI command 0x0-- guessing data in; [ 345.251447][T16647] program syz.0.4583 not setting count and/or reply_len properly [ 345.809449][ T2979] ================================================================== [ 345.822218][ T2979] BUG: KCSAN: data-race in d_make_discardable / lookup_fast [ 345.831909][ T2979] [ 345.834776][ T2979] write to 0xffff888106f1a840 of 4 bytes by task 3288 on cpu 0: [ 345.842656][ T2979] d_make_discardable+0x4f/0x90 [ 345.847968][ T2979] simple_unlink+0x68/0x80 [ 345.852491][ T2979] shmem_unlink+0x12d/0x140 [ 345.857180][ T2979] vfs_unlink+0x1c3/0x490 [ 345.861797][ T2979] filename_unlinkat+0x1dc/0x410 [ 345.867010][ T2979] __se_sys_unlink+0x2b/0xe0 [ 345.872209][ T2979] __x64_sys_unlink+0x1f/0x30 [ 345.877867][ T2979] x64_sys_call+0x2eb6/0x3020 [ 345.883300][ T2979] do_syscall_64+0x136/0x3c0 [ 345.888178][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.897475][ T2979] [ 345.900082][ T2979] read to 0xffff888106f1a840 of 4 bytes by task 2979 on cpu 1: [ 345.908394][ T2979] lookup_fast+0xf1/0x320 [ 345.914070][ T2979] path_lookupat+0x120/0x4c0 [ 345.920186][ T2979] filename_lookup+0x18f/0x390 [ 345.926565][ T2979] do_readlinkat+0x74/0x2f0 [ 345.931528][ T2979] __x64_sys_readlink+0x47/0x60 [ 345.936778][ T2979] x64_sys_call+0x2b51/0x3020 [ 345.943396][ T2979] do_syscall_64+0x136/0x3c0 [ 345.950131][ T2979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.957407][ T2979] [ 345.960591][ T2979] value changed: 0x08300080 -> 0x00004080 [ 345.967888][ T2979] [ 345.971209][ T2979] Reported by Kernel Concurrency Sanitizer on: [ 345.978070][ T2979] CPU: 1 UID: 0 PID: 2979 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 345.988489][ T2979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 346.000611][ T2979] ==================================================================