last executing test programs: 5m10.614930308s ago: executing program 4 (id=2946): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e23, 0xff, 0x4e23, 0x0, 0x2, 0x20, 0xa0, 0x0, 0x0, 0xee01}, {0x6, 0x1c, 0x8000, 0xa01, 0xffffffffffffffff, 0xf9d, 0x4}, {0xfffffffffffffffb, 0x3, 0x2, 0x40}, 0x3, 0x800, 0x1, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x4d4, 0xff}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x0, 0x0, 0x6, 0x7, 0x6, 0x9}}, 0xe8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r2, 0x4bfb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x400, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x5, &(0x7f0000000040)=0x2000006, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xf8}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 5m4.93792189s ago: executing program 4 (id=2980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000000001f8ffffffffffffff797a3000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003e69151dc28ed49a9f4800800014000000000180003801400010077657468315f746f5f626f6c14b58ffc61bcff40000000001400000010000100000000"], 0xa0}}, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, 0x0, 0xfffffffff7ffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x8000d, @local, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x25}, 0x10) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x8) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2000000484002ffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @private}, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@deltaction={0x2d8, 0x31, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x65aeb8c6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x248}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x9c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x52}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x24}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x2d8}}, 0x800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f0000000040)=0x9) write$binfmt_aout(r7, &(0x7f0000000500)=ANY=[], 0xff2e) read(r7, &(0x7f0000000100), 0x0) 5m4.025937289s ago: executing program 4 (id=2984): perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x58248, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp, 0x0, 0x4, 0x800000, 0x7, 0x2, 0x42, 0x0, 0x0, 0x0, 0x0, 0xbb}, 0x0, 0x9, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6d, 0x1, @perf_config_ext={0x8, 0x60}, 0x11c4a8, 0x9, 0x5, 0x3, 0x9, 0x4, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, 0x0) r1 = socket(0x2, 0x80805, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000001040)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000010c0)={r2, &(0x7f0000001080)="f0eb8cee11be6ef587d1baf780c101"}, 0x20) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000012c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3c4, &(0x7f0000000a80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001100)=ANY=[@ANYBLOB="149da24e565484484c6d0054b26dc097ff", @ANYRES16=r7, @ANYBLOB="000100000000fedbdf2501000000"], 0x14}, 0x1, 0x620b}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x15) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2) sendfile(r3, r3, 0x0, 0xe3aa6ea) 5m2.865958961s ago: executing program 4 (id=2991): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xf3, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x200000c0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) syz_clone(0x4000, &(0x7f0000000300)="9482460d1ac39debba2c7886be8b43b77795af92da781ec9cf975f64bcbe0b3f879625c58f73a0ccbcb218829f8ef153fd4b0875da44edae235c65b2fe17252acc69e596cd35931ed4e796427e198665ea28bb61ac14aa9350640baf5bd169a2576f8ca83c7f1df25cdfec2d53485e41de9d7ea4a3697c8d5524d6fb9b056d", 0x7f, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="885beab1e485bec57bc047a10006ba4fb1d6c22c221eae5d237a2a6c32046ec2312eb3b54610f711d6d9503be00a2252841f6c5ab12d097a75e9d84456ac206b18dbca78155a970f241a4d81424780b371a1ade98da205d9e01887992c4a4478239d53c4e0494b46cbb9eb7deff5c4f3a24fab7c7bd58eb12ff1da1b3e6503e42f") getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 5m0.858022651s ago: executing program 4 (id=2997): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000200)="80", 0x1) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x80000000, 0x10000000, 0x0, 0x2, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2b}, 0x0, 0xffffffffffffffff, r1, 0x18) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, 0x0) r5 = syz_open_pts(r4, 0x2800) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00\x00\x00'], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000300)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r4, @ANYBLOB="48c63ba4faaa91b042065e2e97508a302d065c3ccbfa69fd", @ANYRESOCT=r7, @ANYRES64=r3, @ANYRESHEX=r6, @ANYRESDEC, @ANYBLOB="48a40bba8e7678a5096569068bf084b0cef4a74c9d279d79b62a3e28a8f4d6a2c509afd260ca96e0e8846b7d46cbeaaa453d93061057a01a213189b7a2ede552ebb4f6cd1b55d1feb6b217"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0xffffffffffff0000}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f0000000000)={0x12, 0x10, 0xfa00, {0x0, r9, r8}}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 4m59.297965372s ago: executing program 4 (id=3007): syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x40000, 0x0, 0x5, 0xfffffffffffffffd, 0x20001, 0x40, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) fsetxattr(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='user.\b'], 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040016004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40040c0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x80c0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) listen(r5, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000000240)='.', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x27) close_range(r4, 0xffffffffffffffff, 0x0) 4m59.276884923s ago: executing program 32 (id=3007): syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x100, 0x40000, 0x0, 0x5, 0xfffffffffffffffd, 0x20001, 0x40, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) fsetxattr(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='user.\b'], 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b9040a1d080006007c09e8fe55a10a0015400100142603600e1208001e0000000401040016004000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$FOU_CMD_GET(0xffffffffffffffff, 0x0, 0x40040c0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x80c0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) listen(r5, 0x5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r6, &(0x7f0000000240)='.', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[], 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x27) close_range(r4, 0xffffffffffffffff, 0x0) 10.70431287s ago: executing program 5 (id=4312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.30160993s ago: executing program 5 (id=4314): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x7182, 0x1, 0x1, 0x1, 0x3, 0x1ff}, 0x20) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) preadv(0xffffffffffffffff, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) socket(0xa, 0x3, 0x7) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001d00070f000000000000080007000000", @ANYRES32=r6, @ANYBLOB="800532"], 0x1c}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0x1, 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x5c831, 0xffffffffffffffff, 0x0) 6.516595778s ago: executing program 1 (id=4321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x820, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r2, &(0x7f0000010440)=[{&(0x7f0000029480)=""/167, 0xa7}], 0x1, 0xc03, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x1, 0x4, 0x8004, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0xc080}, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000340)={{r3}, 0x0, 0x2, @inherit={0x60, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000003000000000000000b00000000000000ff03000000000000000000000000000064000000000000000e"]}, @subvolid=0xffffffffffffff78}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) r5 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x13, 0x14, 0x67, 0x0, 0x2, 0x16, 0x0, @empty, @broadcast}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x13, 0x1, 0x70bd27, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) unshare(0x6020400) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) getdents(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) 6.236366055s ago: executing program 1 (id=4323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0xa0}}, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xfffffffff7ffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x8000d, @local, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r1], 0x25}, 0x10) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x8) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2000000484002ffe) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x0, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000400)={0x2, 0x0, @private}, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)=0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@deltaction={0x2d8, 0x31, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x84, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x65aeb8c6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x248}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x9c, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x52}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x84, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x24}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x2d8}}, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r7) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TIOCPKT(r8, 0x5420, &(0x7f0000000040)=0x9) write$binfmt_aout(r8, &(0x7f0000000500)=ANY=[], 0xff2e) read(r8, &(0x7f0000000100), 0x0) 5.791784025s ago: executing program 5 (id=4326): creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x20000008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x0, 0x0, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) 4.973514984s ago: executing program 5 (id=4328): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.908439246s ago: executing program 1 (id=4329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="a360daab14e829458ee22839b22621030ce4f3553ca143fb01bb0f5e33b9ac86257467c1a3bfd8ad9da1875783201e0a5a8fd0b2c64e4120a3b806f443940243389a2546a512995142d4bf2162ae44ce4a96caa6ed6bdf0b4d6a6c6b40d72fed7530d9bca31a125c63f74dd5d5652ab65129b510f226c93e1b0d599c72980c1a4583c23d78a3ef05ce4977b4d2fe8d856d1c17df5102fe450786043c7062b201670dd742161c13e72c8b9fce5e6ca0e3ac10d48b5199c269ef921f0f2840c030cba5aa9575e354c73efdb95bd326663e615f3f3f8a8828", @ANYRESDEC=r2], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) move_pages(0x0, 0xa, &(0x7f0000000480)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000500)=[0xfffffff7, 0x1], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x6) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000001400)=""/4076, 0xfffffeea) capset(&(0x7f0000000000)={0x20080522}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf2530000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg(r4, &(0x7f0000006a80)=[{{&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000001200)=[{0x10, 0x10e, 0x180}, {0x10, 0x0, 0x2}], 0x20}}], 0x1, 0x4044000) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) socket(0x2, 0x2, 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r9, &(0x7f0000000700)=[{&(0x7f0000000300)=""/178, 0xb2}], 0x1, 0x17c, 0x9) bpf$MAP_CREATE(0x20000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="000000000004d3a8790c85607ea8b7d162fb4f88ba193c64fd721ddc0e85934b49d40d6a9f50431a600eef5d6dd7e8b6998fa6281eab95d5d2a491f08d4de3aea58ebd57b68e7289dcb6132aeec1fa9b3e5ab707ef3fbefd4650c7382215ed879df471a13991ce90a82eb896db7051c0abccdae2d8c5a5496d4499", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x42, &(0x7f0000000280)={@empty, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0xfe, 0x0}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x4, 0x0, 0x0, {[@fastopen={0x22, 0x5, "506aa3"}, @mss={0x2, 0x4, 0x9}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 4.898294165s ago: executing program 2 (id=4330): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRESHEX=r0, @ANYRES32, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x6}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000380), &(0x7f00000000c0)=r5}, 0x20) r6 = gettid() perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x80, 0x0, 0x2, 0xf4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7fffffffe, 0xffffffffffffffff, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000040)={[{@jqfmt_vfsold}, {@noauto_da_alloc}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$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") r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r9 = fspick(r8, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r9, 0x7, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000861119a00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r10, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r11, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0x400000000008}) sendto$inet6(r7, 0x0, 0x0, 0x8910, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r12, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r12, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r12, &(0x7f0000000240)="63c6f90987f5226a96c524b88ffca8750f4acc51f9e778b285c897654e2cbb7dd9b52f24a59d05bc5af0f3c77e6a107760670ac4e2e4b17ffa02aa75dcb156e6e98aacda4c48e56ee672a3105a4c4d462c8f39428e8dcac4ec7b9924beb01c2aa8", 0x61, 0x4004884, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) 4.764406339s ago: executing program 0 (id=4333): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 4.599264483s ago: executing program 1 (id=4334): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001810000000000000000000000c"], 0x0, 0x26, 0x0, 0x4}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, 0x0, 0x0, 0x2}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000294c0100001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000200103801c010080180101802d0001"], 0x1d0}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b4, &(0x7f0000000280)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) setsockopt$inet_int(r2, 0x0, 0x16, &(0x7f00000005c0)=0x8ef, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, r3, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r6 = accept4$nfc_llcp(r5, &(0x7f0000000600), &(0x7f0000000680)=0x60, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r6, 0x118, 0x1, &(0x7f00000006c0)=0x15f, 0x4) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x445) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRESHEX=r4, @ANYRESOCT=r4, @ANYRES32=r5], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg=0x7}, 0x94) 4.207006042s ago: executing program 1 (id=4335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d6574610000000014000280080001400000001008"], 0xf8}}, 0x0) 3.811596261s ago: executing program 0 (id=4337): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="a360daab14e829458ee22839b22621030ce4f3553ca143fb01bb0f5e33b9ac86257467c1a3bfd8ad9da1875783201e0a5a8fd0b2c64e4120a3b806f443940243389a2546a512995142d4bf2162ae44ce4a96caa6ed6bdf0b4d6a6c6b40d72fed7530d9bca31a125c63f74dd5d5652ab65129b510f226c93e1b0d599c72980c1a4583c23d78a3ef05ce4977b4d2fe8d856d1c17df5102fe450786043c7062b201670dd742161c13e72c8b9fce5e6ca0e3ac10d48b5199c269ef921f0f2840c030cba5aa9575e354c73efdb95bd326663e615f3f3f8a8828", @ANYRESDEC=r2], &(0x7f00000002c0)='GPL\x00', 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r3 = syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x20402) move_pages(0x0, 0xa, &(0x7f0000000480)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil], &(0x7f0000000500)=[0xfffffff7, 0x1], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x6) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000001400)=""/4076, 0xfffffeea) capset(&(0x7f0000000000)={0x20080522}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r5) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000ffdbdf2530000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmmsg(r4, &(0x7f0000006a80)=[{{&(0x7f0000000380)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000001200)=[{0x10, 0x10e, 0x180}, {0x10, 0x0, 0x2}], 0x20}}], 0x1, 0x4044000) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) r8 = socket(0x2, 0x2, 0x1) bind$unix(r8, &(0x7f0000000000)=@abs, 0x6e) socket(0x2, 0x2, 0x1) sendmsg$IPVS_CMD_GET_CONFIG(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') listen(r0, 0x0) bpf$MAP_CREATE(0x20000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="000000000004d3a8790c85607ea8b7d162fb4f88ba193c64fd721ddc0e85934b49d40d6a9f50431a600eef5d6dd7e8b6998fa6281eab95d5d2a491f08d4de3aea58ebd57b68e7289dcb6132aeec1fa9b3e5ab707ef3fbefd4650c7382215ed879df471a13991ce90a82eb896db7051c0abccdae2d8c5a5496d4499", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x42, &(0x7f0000000280)={@empty, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0xfe, 0x0}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x4, 0x0, 0x0, {[@fastopen={0x22, 0x5, "506aa3"}, @mss={0x2, 0x4, 0x9}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 3.686165564s ago: executing program 1 (id=4338): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 3.656589905s ago: executing program 33 (id=4338): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 3.598452516s ago: executing program 0 (id=4340): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xf4}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bf2a, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x44}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) 3.211100055s ago: executing program 2 (id=4341): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) (fail_nth: 4) 2.749848996s ago: executing program 0 (id=4342): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f0000000a00)=""/242, 0xf2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee0, 0x9, 0x7ffd, 0x90, "99000100000000060000000000008000"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x200081, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000380)=0x3) ioctl$TIOCSLCKTRMIOS(r8, 0x5457, &(0x7f00000000c0)) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') ioctl$EVIOCGBITSW(r9, 0x80404525, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x7, &(0x7f00000004c0)=[{0x3, 0x10, 0x0, 0xfffffffa}, {0x8, 0x26, 0x2, 0x7}, {0x9, 0x4, 0xfd, 0x7}, {0x0, 0x96, 0x3, 0x3}, {0x38, 0x3, 0x3, 0x7}, {0x7, 0x3, 0x0, 0xffff}, {0x0, 0x5, 0x0, 0x2}]}) r10 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0x743e, 0x80, 0x2, 0x3e4}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) 2.513970752s ago: executing program 3 (id=4343): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x78}}, 0x0) (fail_nth: 4) 2.105288091s ago: executing program 2 (id=4344): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) socket(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[], 0x0}, 0x94) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7fffff}}, {{0xa, 0x4e08, 0x8001, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r0, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESDEC=r0], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r5 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x6a4fbca0687807bb, &(0x7f00000000c0), 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) listen(r3, 0x802) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x7, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x8000, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r7, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 1.646195342s ago: executing program 3 (id=4345): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000000080"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) writev(r0, &(0x7f0000002840)=[{&(0x7f0000000180)="b47b693fb8be1e", 0x7}], 0x1) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040), 0x10, &(0x7f0000000480)=""/230}, 0x10000000}], 0x2, 0x0, 0x0) 1.642409612s ago: executing program 5 (id=4346): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000cc0)=[{{&(0x7f0000000800)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, &(0x7f00000000c0)=ANY=[]) accept$unix(r2, &(0x7f0000001340), &(0x7f0000000340)=0xffffffbe) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x4, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x12022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendto$inet(r4, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x8000, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 916.433589ms ago: executing program 0 (id=4347): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 868.35802ms ago: executing program 2 (id=4348): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048020000180070001007274000014000280080001400000000d080002400000000124000180090001006d657461000000001400028008000140000000100800024000000005"], 0xf8}}, 0x0) 772.398302ms ago: executing program 3 (id=4349): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000900020073797a320000000005000400010000001400078005001500000000000800114000000046050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x84000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10008007}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1}, 0x7}], 0x1, 0x40010140, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 771.409272ms ago: executing program 2 (id=4350): renameat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbc, 0x44, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x100000000000006]}, 0x8) move_mount(r3, 0x0, r3, 0x0, 0x76) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000003780)={r2, &(0x7f0000002740)="b26b", &(0x7f0000000080)=@udp6}, 0x20) (async) r4 = dup(r0) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000200)=""/122) (async) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r0, r5, 0x0, 0x8000fffffffe) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r4, r4}) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0xee01, r6, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$nl_xfrm(r4, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)=ANY=[@ANYBLOB="d80200001d0000032abd7000fcdbdf25d400120063636d2d6165732d636500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040040000a0000000160ec1802ac2582d1332a3b3a0a2dca28db7227971da226fe60c0493d24158b7ed970a9c6499d8b5edd78ca4a6bc288a6c140313fbc14a37cc5fb6e2195d2ed9fdc854b2d1221829cd11ea2d4d9a1e2245dedd6211aa7502422c6b61551ed05594ff209f7bb0478ccf2c3f1e7e1de1eefe37e6ca2307daccf6ebc98229aca74128c64702f4b02098e40006000a010101000000000000000000000000ac1414bb00000000000000000000921d9f3800ff4e214006020000a007000000", @ANYRES32=r1, @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="0000000000000000010000000000000040000000000000000700000000000000ce6e0000000000000500000000000000a8040000000000000500000000000000000000000000008008000000000000000c00000000000000040000000000000001000000000000000000020200000000"], 0x2d8}, 0x1, 0x0, 0x0, 0x4}, 0x4040) (async) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 697.468754ms ago: executing program 5 (id=4351): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) (fail_nth: 4) 605.952896ms ago: executing program 3 (id=4352): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r0 = getpid() (async, rerun: 64) syz_open_dev$ptys(0xc, 0x3, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) syz_init_net_socket$llc(0x1a, 0x6, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e) (async) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x1000000, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) (async) r3 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0x10, 0x40, 0xcd7, 0x1, 0x6, 0x0, 0x80000000, 0x7, 0xc, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf0, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xffff, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x40000006, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xff, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1004, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x806, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x0, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x81, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x0, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x3, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0xc, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x3, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x4001, 0xf9, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x558, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000005, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0x1, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x40, 0x6, 0x792a3cec, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0xffffffc, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf4, 0x0, 0xfffff53d, 0xb, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x10000, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x20, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x2, 0x7, 0x1, 0x5, 0x9, 0xfffffff7, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x80, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0xc, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0xd, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6aed74d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x0, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0xff, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x71a, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x2, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x0, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0x0, 0x7, 0x5, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfefffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x8000004, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x8000, 0x7, 0x4, 0x7330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x0, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x402, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x8, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c1000003d0007010000000005000000017c00000400fc80041001"], 0x101c}}, 0x4010) (async) utime(&(0x7f0000000000)='.\x00', 0x0) 605.746216ms ago: executing program 2 (id=4353): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e23, 0xff, 0x4e23, 0x0, 0x2, 0x20, 0xa0, 0x0, 0x0, 0xee01}, {0x6, 0x1c, 0x8000, 0xa01, 0xffffffffffffffff, 0xf9d, 0x4}, {0xfffffffffffffffb, 0x3, 0x2, 0x40}, 0x3, 0x800, 0x1, 0x0, 0x0, 0x3}, {{@in6=@mcast1, 0x4d4, 0xff}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x0, 0x0, 0x6, 0x7, 0x6, 0x9}}, 0xe8) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCOUTQ(r2, 0x4bfb, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x400, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0x5, &(0x7f0000000040)=0x2000006, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}}, 0xf8}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 574.097697ms ago: executing program 3 (id=4354): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000ffffffff0000000003800000850000007b000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 375.597281ms ago: executing program 3 (id=4355): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0x9, 0x10000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 0 (id=4356): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000980), 0x0, &(0x7f0000000a00)=""/242, 0xf2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82000, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee0, 0x9, 0x7ffd, 0x90, "99000100000000060000000000008000"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x200081, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_connect) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000380)=0x3) ioctl$TIOCSLCKTRMIOS(r8, 0x5457, &(0x7f00000000c0)) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') ioctl$EVIOCGBITSW(r9, 0x80404525, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x7, &(0x7f00000004c0)=[{0x3, 0x10, 0x0, 0xfffffffa}, {0x8, 0x26, 0x2, 0x7}, {0x9, 0x4, 0xfd, 0x7}, {0x0, 0x96, 0x3, 0x3}, {0x38, 0x3, 0x3, 0x7}, {0x7, 0x3, 0x0, 0xffff}, {0x0, 0x5, 0x0, 0x2}]}) r10 = io_uring_setup(0x7a58, &(0x7f0000000080)={0x0, 0x743e, 0x80, 0x2, 0x3e4}) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x1ef6e3}], 0x100000000000011a) kernel console output (not intermixed with test programs): 0.3578'. [ 642.623571][T15401] tun0: tun_chr_ioctl cmd 2147767506 [ 643.892485][T15415] loop0: detected capacity change from 0 to 512 [ 644.134642][T15415] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 644.171316][T15415] rdma_rxe: rxe_newlink: failed to add lo [ 644.180741][T15415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.200307][T15415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.231347][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 644.319093][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 644.354682][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 644.390753][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 644.419043][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 644.451578][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 644.476773][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 644.502343][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 644.520895][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 644.552277][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 644.579523][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 644.606249][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 644.633764][T15415] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 644.662086][T15415] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 645.381776][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3592'. [ 645.409263][T15445] tun0: tun_chr_ioctl cmd 2147767506 [ 645.610133][T15456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3597'. [ 645.661127][T15456] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 646.201686][T15470] hub 8-0:1.0: USB hub found [ 646.206717][T15470] hub 8-0:1.0: 8 ports detected [ 646.823671][T15478] loop3: detected capacity change from 0 to 512 [ 646.874056][T15478] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 646.889785][T15478] rdma_rxe: rxe_newlink: failed to add lo [ 646.925941][T15478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.965265][T15478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.977769][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 646.987538][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 647.017209][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 647.039155][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 647.064397][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 647.090445][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 647.115366][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 647.135500][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 647.154783][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 647.197181][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 647.223707][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 647.251325][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 647.277371][T15478] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 647.303190][T15478] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 647.451985][T15488] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3606'. [ 648.266849][T15500] tun0: tun_chr_ioctl cmd 2147767506 [ 648.518770][T15508] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3611'. [ 648.528672][T15511] loop9: detected capacity change from 0 to 7 [ 648.548081][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.557728][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.572877][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.576588][T15508] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 648.582518][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.599926][T15511] loop9: unable to read partition table [ 648.612647][T15511] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 648.728760][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 648.738812][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.748410][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.760969][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.770574][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.779047][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.788680][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.796956][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.806535][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 648.911244][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 648.920865][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 649.030249][T15519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3614'. [ 649.052640][T15519] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 649.053585][T15521] syzkaller0: entered promiscuous mode [ 649.082790][T15521] syzkaller0: entered allmulticast mode [ 649.284730][T15525] loop1: detected capacity change from 0 to 1024 [ 649.300641][T15525] EXT4-fs: Ignoring removed orlov option [ 649.342737][T15525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.502356][ T28] audit: type=1400 audit(1784510506.632:2075): avc: denied { write } for pid=15524 comm="syz.1.3616" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 649.568998][T13516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.590019][ T28] audit: type=1400 audit(1784510506.632:2076): avc: denied { write } for pid=15524 comm="syz.1.3616" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 649.620131][T15539] loop1: detected capacity change from 0 to 512 [ 649.650549][T15540] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3617'. [ 649.661025][T15539] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 649.675748][T15538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3619'. [ 649.790312][T15543] sz1: rxe_newlink: already configured on lo [ 649.811048][T15543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 649.820060][T15543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 649.835191][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 649.844230][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 649.865179][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 649.879930][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 649.922900][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 649.990055][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 650.040189][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 650.089955][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 650.100295][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 650.109341][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 650.118413][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 650.127129][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 650.135937][T15539] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 650.145440][T15539] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 650.895274][T15564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3627'. [ 650.944882][T15564] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 650.958819][T15567] loop1: detected capacity change from 0 to 1024 [ 650.985352][T15567] EXT4-fs: Ignoring removed orlov option [ 651.028749][T15567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.204676][ T28] audit: type=1400 audit(1784510508.352:2077): avc: denied { write } for pid=15566 comm="syz.1.3628" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 651.237321][ T28] audit: type=1400 audit(1784510508.352:2078): avc: denied { write } for pid=15566 comm="syz.1.3628" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 651.299009][T13516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.378173][T15579] loop1: detected capacity change from 0 to 1024 [ 651.391917][T15579] EXT4-fs: Ignoring removed orlov option [ 651.443605][T15579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 651.494167][ T28] audit: type=1400 audit(1784510508.642:2079): avc: denied { write } for pid=15578 comm="syz.1.3631" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 651.582874][T13516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.614199][ T28] audit: type=1400 audit(1784510508.642:2080): avc: denied { write } for pid=15578 comm="syz.1.3631" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 651.794428][T15591] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3634'. [ 653.557918][T15617] loop5: detected capacity change from 0 to 1024 [ 653.624022][T15617] EXT4-fs: Ignoring removed orlov option [ 653.697800][T15617] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 653.777066][ T28] audit: type=1400 audit(1784510510.922:2081): avc: denied { write } for pid=15614 comm="syz.5.3641" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 653.862540][ T28] audit: type=1400 audit(1784510510.922:2082): avc: denied { write } for pid=15614 comm="syz.5.3641" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 653.887013][T13179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.994136][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3645'. [ 654.099703][T15633] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 654.738052][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3651'. [ 655.055318][T15656] loop3: detected capacity change from 0 to 1024 [ 655.087169][T15656] EXT4-fs: Ignoring removed orlov option [ 655.139058][T15656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.202009][ T28] audit: type=1400 audit(1784510512.342:2083): avc: denied { write } for pid=15655 comm="syz.3.3655" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 655.236938][ T28] audit: type=1400 audit(1784510512.342:2084): avc: denied { write } for pid=15655 comm="syz.3.3655" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 655.266908][T12451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.488489][T15666] loop9: detected capacity change from 0 to 7 [ 655.543212][T15664] hub 8-0:1.0: USB hub found [ 655.543210][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.547903][T15664] hub 8-0:1.0: 8 ports detected [ 655.557424][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.606329][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.616077][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.634749][T15666] loop9: unable to read partition table [ 655.640482][T15666] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 655.644534][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.658255][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.721526][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.731171][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.739440][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.749073][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.760449][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.770081][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 655.778180][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 655.787823][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 657.225449][T15686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3662'. [ 658.330725][T15696] loop5: detected capacity change from 0 to 1024 [ 658.375970][T15696] EXT4-fs: Ignoring removed orlov option [ 658.383522][T15693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3664'. [ 658.420415][T15702] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 658.473575][T15701] syzkaller0: entered promiscuous mode [ 658.496468][T15696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 658.522609][T15701] syzkaller0: entered allmulticast mode [ 658.741084][ T28] audit: type=1400 audit(1784510515.882:2085): avc: denied { write } for pid=15695 comm="syz.5.3666" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 658.925756][T13179] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.961515][ T28] audit: type=1400 audit(1784510515.882:2086): avc: denied { write } for pid=15695 comm="syz.5.3666" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 660.194194][T15739] hub 8-0:1.0: USB hub found [ 660.230105][T15739] hub 8-0:1.0: 8 ports detected [ 661.067465][T15751] loop2: detected capacity change from 0 to 1024 [ 661.118598][T15751] EXT4-fs: Ignoring removed orlov option [ 661.238158][T15751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.316963][T15757] loop3: detected capacity change from 0 to 1024 [ 661.373784][T15757] EXT4-fs: Ignoring removed orlov option [ 661.471006][ T28] audit: type=1400 audit(1784510518.582:2087): avc: denied { write } for pid=15750 comm="syz.2.3681" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 661.492762][ T28] audit: type=1400 audit(1784510518.582:2088): avc: denied { write } for pid=15750 comm="syz.2.3681" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 661.548237][T12732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.567314][T15757] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.736462][T15764] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3684'. [ 661.737615][ T28] audit: type=1400 audit(1784510518.882:2089): avc: denied { write } for pid=15756 comm="syz.3.3682" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 661.764369][T15764] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 661.787159][T15766] xt_hashlimit: size too large, truncated to 1048576 [ 661.817702][T12451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.880643][ T28] audit: type=1400 audit(1784510518.882:2090): avc: denied { write } for pid=15756 comm="syz.3.3682" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 665.074070][T15810] loop1: detected capacity change from 0 to 1024 [ 665.109929][T15810] EXT4-fs: Ignoring removed orlov option [ 665.156728][T15810] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 665.218368][ T28] audit: type=1400 audit(1784510522.362:2091): avc: denied { write } for pid=15809 comm="syz.1.3696" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 665.272759][ T28] audit: type=1400 audit(1784510522.362:2092): avc: denied { write } for pid=15809 comm="syz.1.3696" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 665.382884][T13516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 665.547104][T15819] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3700'. [ 665.593244][T15819] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 666.403326][T15835] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3702'. [ 666.432127][T15837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3704'. [ 666.464957][T15837] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 666.528986][T15839] hub 8-0:1.0: USB hub found [ 666.533650][T15839] hub 8-0:1.0: 8 ports detected [ 667.888069][T15859] loop1: detected capacity change from 0 to 1024 [ 667.934416][T15859] EXT4-fs: Ignoring removed orlov option [ 668.232787][T15859] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.310619][T13516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.367001][T15870] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3712'. [ 668.402431][T15870] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 669.772850][T15886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3717'. [ 670.212976][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3722'. [ 671.533684][T15922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3727'. [ 671.581697][T15922] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 672.665337][T15921] hub 8-0:1.0: USB hub found [ 672.670326][T15921] hub 8-0:1.0: 8 ports detected [ 673.030343][T15942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3735'. [ 673.068747][T15944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3734'. [ 673.836030][T15947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3736'. [ 674.794941][T15960] xt_hashlimit: size too large, truncated to 1048576 [ 675.962083][T15973] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3744'. [ 676.017737][T15973] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 676.385961][T15983] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3747'. [ 677.066349][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3749'. [ 677.207483][T15990] tun0: tun_chr_ioctl cmd 2147767506 [ 678.367354][T16006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3753'. [ 679.771439][T16010] loop9: detected capacity change from 0 to 7 [ 679.796067][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.805699][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 679.815943][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 679.825564][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 679.843140][T16010] loop9: unable to read partition table [ 679.857723][T16010] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 680.274216][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 680.292938][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.302566][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.323079][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.332702][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.345780][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.355421][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.363768][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.373386][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.382072][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 680.391701][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 680.422242][T16028] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3761'. [ 680.435166][T16028] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 681.437037][T16029] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3760'. [ 681.496266][T16038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3762'. [ 681.664843][T16042] tun0: tun_chr_ioctl cmd 2147767506 [ 684.156350][T16062] loop9: detected capacity change from 0 to 7 [ 684.191552][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 684.201245][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 684.288873][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 684.298547][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 684.308155][T16062] loop9: unable to read partition table [ 684.330386][T16062] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 684.338911][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 684.677175][T16078] hub 8-0:1.0: USB hub found [ 684.682793][T16078] hub 8-0:1.0: 8 ports detected [ 686.128408][T16084] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3776'. [ 686.215997][T16084] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 686.308477][T16087] tun0: tun_chr_ioctl cmd 2147767506 [ 686.317180][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3778'. [ 686.852592][T16101] hub 8-0:1.0: USB hub found [ 686.857615][T16101] hub 8-0:1.0: 8 ports detected [ 688.581881][T16113] loop9: detected capacity change from 0 to 7 [ 688.596028][ C0] blk_print_req_error: 5 callbacks suppressed [ 688.596049][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 688.611752][ C0] buffer_io_error: 4 callbacks suppressed [ 688.611772][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 689.583884][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.593506][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 689.601982][T16113] loop9: unable to read partition table [ 689.611299][T16113] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 689.855939][T16121] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 689.907307][ T28] audit: type=1400 audit(1784510547.042:2093): avc: denied { create } for pid=16122 comm="syz.0.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 689.966047][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 689.976886][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 689.986519][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 689.996568][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 690.006196][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 690.018784][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 690.028405][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 690.036839][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 690.046452][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 690.054586][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 690.064175][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 690.170763][T16132] syzkaller1: entered promiscuous mode [ 690.192476][T16132] syzkaller1: entered allmulticast mode [ 690.214818][T16132] FAULT_INJECTION: forcing a failure. [ 690.214818][T16132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.290297][T16132] CPU: 0 UID: 0 PID: 16132 Comm: syz.5.3788 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 690.290329][T16132] Tainted: [W]=WARN [ 690.290377][T16132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.290390][T16132] Call Trace: [ 690.290396][T16132] [ 690.290406][T16132] __dump_stack+0x1d/0x30 [ 690.290438][T16132] dump_stack_lvl+0x95/0xd0 [ 690.290458][T16132] dump_stack+0x15/0x1b [ 690.290542][T16132] should_fail_ex+0x25e/0x270 [ 690.290574][T16132] should_fail+0xb/0x20 [ 690.290602][T16132] should_fail_usercopy+0x1a/0x20 [ 690.290706][T16132] _copy_from_iter+0xcc/0xe70 [ 690.290741][T16132] ? lockref_put_return+0xf7/0x130 [ 690.290764][T16132] ? __rcu_read_unlock+0x4e/0x70 [ 690.290843][T16132] ? __rcu_read_unlock+0x4e/0x70 [ 690.290870][T16132] tun_get_user+0x371/0x2820 [ 690.290895][T16132] ? _parse_integer_limit+0x177/0x1a0 [ 690.290980][T16132] ? _parse_integer+0x27/0x40 [ 690.291010][T16132] ? ref_tracker_alloc+0x1eb/0x2f0 [ 690.291045][T16132] tun_chr_write_iter+0x15a/0x210 [ 690.291148][T16132] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 690.291176][T16132] vfs_write+0x57d/0x990 [ 690.291198][T16132] ksys_write+0xdc/0x1a0 [ 690.291218][T16132] __x64_sys_write+0x40/0x50 [ 690.291333][T16132] x64_sys_call+0x27e1/0x3020 [ 690.291358][T16132] do_syscall_64+0x136/0x3c0 [ 690.291399][T16132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.291431][T16132] RIP: 0033:0x7efdfd4cde99 [ 690.291487][T16132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.291508][T16132] RSP: 002b:00007efdfbf27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 690.291529][T16132] RAX: ffffffffffffffda RBX: 00007efdfd755fa0 RCX: 00007efdfd4cde99 [ 690.291556][T16132] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000003 [ 690.291569][T16132] RBP: 00007efdfbf27090 R08: 0000000000000000 R09: 0000000000000000 [ 690.291581][T16132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.291627][T16132] R13: 00007efdfd756038 R14: 00007efdfd755fa0 R15: 00007fff3e86d8a8 [ 690.291647][T16132] [ 690.531269][ T28] audit: type=1400 audit(1784510547.492:2094): avc: denied { write } for pid=16122 comm="syz.0.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 690.549719][T16123] FAULT_INJECTION: forcing a failure. [ 690.549719][T16123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.592633][T16123] CPU: 0 UID: 0 PID: 16123 Comm: syz.0.3784 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 690.592672][T16123] Tainted: [W]=WARN [ 690.592680][T16123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 690.592694][T16123] Call Trace: [ 690.592769][T16123] [ 690.592777][T16123] __dump_stack+0x1d/0x30 [ 690.592804][T16123] dump_stack_lvl+0x95/0xd0 [ 690.592824][T16123] dump_stack+0x15/0x1b [ 690.592846][T16123] should_fail_ex+0x25e/0x270 [ 690.592951][T16123] should_fail+0xb/0x20 [ 690.592974][T16123] should_fail_usercopy+0x1a/0x20 [ 690.593065][T16123] _copy_from_user+0x1c/0xb0 [ 690.593089][T16123] user_termios_to_kernel_termios_1+0x22/0x30 [ 690.593125][T16123] set_termios+0x125/0x4f0 [ 690.593170][T16123] ? irqentry_exit+0x58f/0x610 [ 690.593279][T16123] tty_mode_ioctl+0x37f/0x5b0 [ 690.593305][T16123] ? n_tty_ioctl_helper+0x7a/0x370 [ 690.593413][T16123] n_tty_ioctl_helper+0x87/0x370 [ 690.593453][T16123] n_tty_ioctl+0x101/0x200 [ 690.593526][T16123] ? __pfx_n_tty_ioctl+0x10/0x10 [ 690.593550][T16123] tty_ioctl+0x83e/0xb80 [ 690.593648][T16123] ? __pfx_tty_ioctl+0x10/0x10 [ 690.593754][T16123] __se_sys_ioctl+0xce/0x140 [ 690.593773][T16123] __x64_sys_ioctl+0x43/0x50 [ 690.593793][T16123] x64_sys_call+0x1563/0x3020 [ 690.593821][T16123] do_syscall_64+0x136/0x3c0 [ 690.593910][T16123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.593935][T16123] RIP: 0033:0x7f49cb5fde99 [ 690.593959][T16123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.593980][T16123] RSP: 002b:00007f49ca057028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 690.594004][T16123] RAX: ffffffffffffffda RBX: 00007f49cb885fa0 RCX: 00007f49cb5fde99 [ 690.594021][T16123] RDX: 0000000000000000 RSI: 0000000000005404 RDI: 0000000000000006 [ 690.594036][T16123] RBP: 00007f49ca057090 R08: 0000000000000000 R09: 0000000000000000 [ 690.594052][T16123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.594143][T16123] R13: 00007f49cb886038 R14: 00007f49cb885fa0 R15: 00007ffc8ff13cc8 [ 690.594165][T16123] [ 691.291469][ T28] audit: type=1400 audit(1784510548.242:2095): avc: denied { getopt } for pid=16131 comm="syz.3.3787" lport=52550 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 691.902273][T16156] hub 8-0:1.0: USB hub found [ 691.907475][T16156] hub 8-0:1.0: 8 ports detected [ 692.040383][T16150] syz.0.3792 (16150) used greatest stack depth: 9344 bytes left [ 692.454919][T16161] hub 8-0:1.0: USB hub found [ 692.459839][T16161] hub 8-0:1.0: 8 ports detected [ 692.574863][T16163] loop9: detected capacity change from 0 to 7 [ 692.595421][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 692.605079][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 692.618039][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 692.627655][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 692.635754][T16163] loop9: unable to read partition table [ 692.641556][T16163] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 692.650711][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 694.039845][T16182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3801'. [ 695.419604][T16201] loop9: detected capacity change from 0 to 7 [ 695.498192][ C0] blk_print_req_error: 5 callbacks suppressed [ 695.498209][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 695.513913][ C0] buffer_io_error: 4 callbacks suppressed [ 695.513938][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 695.528066][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 695.537846][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 695.561433][T16201] loop9: unable to read partition table [ 695.615748][T16201] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 695.625490][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 695.635121][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 695.645747][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 695.655398][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 695.663868][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 695.663903][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 695.664699][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 695.664732][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 695.665975][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 695.666021][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 695.902848][T16218] tipc: Started in network mode [ 695.912365][T16218] tipc: Node identity 16837162df29, cluster identity 4711 [ 695.928325][T16218] tipc: Enabled bearer , priority 0 [ 695.961685][T16216] tipc: Enabling of bearer rejected, failed to enable media [ 695.981323][T16225] syzkaller0: entered promiscuous mode [ 695.995514][T16224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3816'. [ 696.001356][T16225] syzkaller0: entered allmulticast mode [ 696.271185][T16218] tipc: Resetting bearer [ 696.350042][T16217] tipc: Resetting bearer [ 696.467029][T16217] tipc: Disabling bearer [ 697.032158][T16249] hub 8-0:1.0: USB hub found [ 697.037098][T16249] hub 8-0:1.0: 8 ports detected [ 697.091245][T16247] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3821'. [ 697.162038][T16247] veth0_to_team: entered promiscuous mode [ 697.261151][T16255] pimreg: entered allmulticast mode [ 697.358152][T16247] pimreg: left allmulticast mode [ 697.482202][T16257] loop9: detected capacity change from 0 to 7 [ 697.515547][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.525191][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 697.698655][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 697.708277][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 697.717873][T16257] loop9: unable to read partition table [ 697.732356][T16257] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 697.876725][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 697.886610][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 697.913120][T16269] tipc: Enabling of bearer rejected, failed to enable media [ 698.110205][T16279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3830'. [ 698.187395][T16283] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3831'. [ 699.285348][T16308] loop9: detected capacity change from 0 to 7 [ 699.293157][T16308] loop9: unable to read partition table [ 699.298879][T16308] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 699.424486][T16315] tipc: Enabling of bearer rejected, failed to enable media [ 699.736420][T16326] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3843'. [ 700.637527][T16346] hub 8-0:1.0: USB hub found [ 700.642607][T16346] hub 8-0:1.0: 8 ports detected [ 701.429386][T16349] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3850'. [ 701.499906][T16351] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 701.628369][T16354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3852'. [ 701.673319][T16356] tipc: Enabling of bearer rejected, failed to enable media [ 704.214145][T16386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3859'. [ 704.939637][T16400] tipc: Enabling of bearer rejected, failed to enable media [ 704.999421][T16406] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3866'. [ 705.323089][T16426] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3870'. [ 706.107021][T16434] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3874'. [ 706.192722][T16434] veth0_to_team: entered promiscuous mode [ 706.249845][T16444] tipc: Enabling of bearer rejected, failed to enable media [ 706.581689][T16456] hub 8-0:1.0: USB hub found [ 706.587137][T16456] hub 8-0:1.0: 8 ports detected [ 708.791605][T16479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3885'. [ 709.894666][T16505] tipc: Enabling of bearer rejected, failed to enable media [ 711.300474][T16531] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 711.721317][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3902'. [ 713.305358][T16563] hub 8-0:1.0: USB hub found [ 713.310382][T16563] hub 8-0:1.0: 8 ports detected [ 715.325045][T16582] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 715.794222][T16591] tun0: tun_chr_ioctl cmd 2147767506 [ 716.346276][T16599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3914'. [ 716.648586][T16613] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3918'. [ 716.657967][T16613] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 717.643125][T16629] hub 8-0:1.0: USB hub found [ 717.647990][T16629] hub 8-0:1.0: 8 ports detected [ 719.905601][T16639] loop9: detected capacity change from 0 to 7 [ 719.930870][ C0] blk_print_req_error: 13 callbacks suppressed [ 719.930891][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 719.946714][ C0] buffer_io_error: 11 callbacks suppressed [ 719.946733][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 719.966198][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 719.975857][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 719.985452][T16639] loop9: unable to read partition table [ 720.009225][T16639] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 720.095169][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 720.104977][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 720.114577][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.123830][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 720.133460][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.142553][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 720.143566][T16651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3929'. [ 720.152156][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.202112][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 720.211723][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.219728][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 720.229304][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 720.427590][T16655] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3930'. [ 721.622764][T16673] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3934'. [ 721.643008][T16675] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 721.698675][T16678] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3936'. [ 721.862686][T16688] loop9: detected capacity change from 0 to 7 [ 721.932197][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 721.941845][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 721.958164][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 721.967848][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 721.977621][T16688] loop9: unable to read partition table [ 721.985575][T16688] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 722.171623][T16693] hub 8-0:1.0: USB hub found [ 722.176908][T16693] hub 8-0:1.0: 8 ports detected [ 722.985855][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 725.658721][T16729] loop3: detected capacity change from 0 to 512 [ 725.672039][T16729] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 725.779775][T16729] rdma_rxe: rxe_newlink: failed to add lo [ 725.798698][T16729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.827649][T16729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.866443][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 725.891395][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 725.920894][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 726.091393][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 726.149117][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 726.182277][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 726.254048][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 726.378421][T16736] hub 8-0:1.0: USB hub found [ 726.384853][T16736] hub 8-0:1.0: 8 ports detected [ 726.517130][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 726.624163][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 726.723484][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 726.979784][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 727.033191][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 727.078469][T16729] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 727.127242][T16729] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 727.298819][T16742] loop9: detected capacity change from 0 to 7 [ 727.305260][ C1] blk_print_req_error: 6 callbacks suppressed [ 727.305276][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.320940][ C1] buffer_io_error: 4 callbacks suppressed [ 727.320955][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.334637][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.344257][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.353602][T16742] loop9: unable to read partition table [ 727.364454][T16742] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 727.397724][T16745] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3953'. [ 727.414384][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 727.424172][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.433795][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.453443][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.463064][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.472599][T16745] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 727.473415][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.491550][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.500439][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.510091][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.518449][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 727.528034][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 727.587138][T16747] syzkaller0: entered promiscuous mode [ 727.600276][T16747] syzkaller0: entered allmulticast mode [ 727.870086][T16752] hub 8-0:1.0: USB hub found [ 727.875067][T16752] hub 8-0:1.0: 8 ports detected [ 728.161287][T16754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3956'. [ 728.178321][T16756] pimreg: entered allmulticast mode [ 728.236146][T16756] pimreg: left allmulticast mode [ 729.662086][T16785] syzkaller0: entered promiscuous mode [ 729.692661][T16785] syzkaller0: entered allmulticast mode [ 729.910328][T16790] loop0: detected capacity change from 0 to 512 [ 729.916991][T16790] EXT4-fs: Ignoring removed mblk_io_submit option [ 729.927581][T16790] EXT4-fs (loop0): orphan cleanup on readonly fs [ 729.934076][T16790] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 729.944819][T16790] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.3967: attempt to clear invalid blocks 2 len 1 [ 729.957724][T16790] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 729.958403][T16790] EXT4-fs (loop0): Remounting filesystem read-only [ 729.967568][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 729.967592][ C1] EXT4-fs (loop0): initial error at time 1784510587: ext4_clear_blocks:876: inode 13 [ 729.967619][ C1] EXT4-fs (loop0): last error at time 1784510587: ext4_clear_blocks:876: inode 13 [ 729.999498][T16790] EXT4-fs (loop0): 1 truncate cleaned up [ 730.005897][T16790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 730.046255][T16793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3968'. [ 730.155720][T13683] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.328887][T16796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3969'. [ 731.339411][T16813] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3974'. [ 731.644633][T16813] veth0_to_team: entered promiscuous mode [ 731.916240][T16817] pimreg: entered allmulticast mode [ 732.021963][T16812] pimreg: left allmulticast mode [ 732.704120][T16831] pimreg: entered allmulticast mode [ 732.731373][T16831] pimreg: left allmulticast mode [ 732.972394][T16836] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3982'. [ 733.292036][T16848] loop2: detected capacity change from 0 to 512 [ 733.313291][T16848] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 733.370815][T16848] rdma_rxe: rxe_newlink: failed to add lo [ 733.426225][T16848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.457880][T16848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.490587][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 733.542047][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 733.576936][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 733.613920][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 733.647513][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 733.678279][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 733.705352][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 733.734907][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 733.758909][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 733.788058][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 733.810854][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 733.831070][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 733.866898][T16848] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 733.904841][T16848] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 734.093083][T16863] pimreg: entered allmulticast mode [ 734.103191][T16863] pimreg: left allmulticast mode [ 734.391343][T16866] hub 8-0:1.0: USB hub found [ 734.396596][T16866] hub 8-0:1.0: 8 ports detected [ 736.175216][T16889] hub 8-0:1.0: USB hub found [ 736.180199][T16889] hub 8-0:1.0: 8 ports detected [ 737.445472][T16899] hub 8-0:1.0: USB hub found [ 737.450460][T16899] hub 8-0:1.0: 8 ports detected [ 738.405894][T16906] loop3: detected capacity change from 0 to 512 [ 738.435482][T16906] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 738.636096][T16906] rdma_rxe: rxe_newlink: failed to add lo [ 738.653876][T16906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 738.662510][T16906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 738.747259][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 738.791256][T16912] hub 8-0:1.0: USB hub found [ 738.796116][T16912] hub 8-0:1.0: 8 ports detected [ 738.861187][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 738.871378][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 738.881346][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 738.952106][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 739.016531][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 739.086659][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 739.158993][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 739.224890][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 739.294733][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 739.493715][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 739.533756][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 739.569595][T16906] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 739.588452][T16916] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4005'. [ 739.611024][T16906] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 739.687510][T16916] veth0_to_team: entered promiscuous mode [ 739.739640][T16916] pimreg: entered allmulticast mode [ 739.769807][T16915] pimreg: left allmulticast mode [ 739.810408][T16921] FAULT_INJECTION: forcing a failure. [ 739.810408][T16921] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 739.861675][T16921] CPU: 0 UID: 0 PID: 16921 Comm: syz.2.4008 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 739.861710][T16921] Tainted: [W]=WARN [ 739.861717][T16921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 739.861729][T16921] Call Trace: [ 739.861736][T16921] [ 739.861744][T16921] __dump_stack+0x1d/0x30 [ 739.861874][T16921] dump_stack_lvl+0x95/0xd0 [ 739.861898][T16921] dump_stack+0x15/0x1b [ 739.861917][T16921] should_fail_ex+0x25e/0x270 [ 739.861979][T16921] should_fail_alloc_page+0xf2/0x100 [ 739.862009][T16921] __alloc_frozen_pages_noprof+0x108/0x350 [ 739.862092][T16921] alloc_pages_mpol+0xa9/0x1d0 [ 739.862119][T16921] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 739.862150][T16921] handle_mm_fault+0x1020/0x2da0 [ 739.862249][T16921] do_user_addr_fault+0x634/0x1060 [ 739.862283][T16921] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 739.862445][T16921] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 739.862506][T16921] ? trace_page_fault_user+0x1f/0xa0 [ 739.862556][T16921] exc_page_fault+0x62/0xa0 [ 739.862584][T16921] asm_exc_page_fault+0x26/0x30 [ 739.862608][T16921] RIP: 0033:0x7f36a670f60b [ 739.862627][T16921] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 739.862649][T16921] RSP: 002b:00007f36a52a5fa0 EFLAGS: 00010206 [ 739.862709][T16921] RAX: 0000000000000000 RBX: 00007f36a6ad5fa0 RCX: 0000000000000000 [ 739.862725][T16921] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000180 [ 739.862740][T16921] RBP: 00007f36a52a7090 R08: 0000000000000000 R09: 0000000000000000 [ 739.862756][T16921] R10: 0000200000000180 R11: 0000000000000000 R12: 0000000000000001 [ 739.862771][T16921] R13: 00007f36a6ad6038 R14: 00007f36a6ad5fa0 R15: 00007fff1b2d2f78 [ 739.862789][T16921] [ 739.862812][T16921] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 740.613700][T16935] hub 8-0:1.0: USB hub found [ 740.618730][T16935] hub 8-0:1.0: 8 ports detected [ 741.912137][T16945] hub 8-0:1.0: USB hub found [ 741.919073][T16945] hub 8-0:1.0: 8 ports detected [ 744.457584][T16966] loop3: detected capacity change from 0 to 512 [ 744.481817][T16966] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 744.485135][T16968] loop2: detected capacity change from 0 to 512 [ 744.511856][T16968] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 744.558904][T16966] rdma_rxe: rxe_newlink: failed to add lo [ 744.579171][T16966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.603587][T16966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.612571][T16968] rdma_rxe: rxe_newlink: failed to add lo [ 744.637912][T16968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 744.651196][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 744.672271][T16968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 744.680589][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 744.710191][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 744.724456][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 744.743247][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 744.755060][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 744.780184][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 744.788675][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 744.810863][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 744.829916][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 744.839989][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 744.864019][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 744.872719][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 744.899937][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 744.910693][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 744.932461][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 744.945391][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 744.966233][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 744.982347][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 745.003459][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 745.015473][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 745.037093][T16966] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 745.050258][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 745.071309][T16966] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 745.081740][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 745.121311][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 745.147164][T16968] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 745.173409][T16968] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 745.186597][T16981] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4027'. [ 745.737776][T16992] loop1: detected capacity change from 0 to 128 [ 745.771713][T16992] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 745.806264][T16992] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 745.964408][T17001] netlink: 'syz.1.4031': attribute type 2 has an invalid length. [ 746.364404][ T30] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 746.677038][T17013] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4036'. [ 747.003541][T17013] veth0_to_team: entered promiscuous mode [ 747.019043][T17019] pimreg: entered allmulticast mode [ 747.132562][T17020] pimreg: left allmulticast mode [ 747.327467][T17024] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4038'. [ 747.872751][T17030] loop0: detected capacity change from 0 to 512 [ 747.901941][T17030] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 747.967447][T17030] rdma_rxe: rxe_newlink: failed to add lo [ 747.986052][T17030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.012694][T17030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.041893][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 748.062926][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 748.086197][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 748.121737][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 748.153337][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 748.191252][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 748.219535][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 748.258645][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 748.290292][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 748.322913][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 748.346824][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 748.373208][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 748.404279][T17030] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 748.442420][T17030] FAT-fs (loop0): error, fat_free: invalid cluster chain (i_pos 548) [ 749.118226][T17047] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4045'. [ 749.324120][T17047] pimreg: entered allmulticast mode [ 749.344802][T17059] pimreg: left allmulticast mode [ 749.625476][T17062] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4048'. [ 749.677039][T17062] pimreg: entered allmulticast mode [ 749.721181][T17062] pimreg: left allmulticast mode [ 750.301251][T17070] hub 8-0:1.0: USB hub found [ 750.309742][T17070] hub 8-0:1.0: 8 ports detected [ 752.068554][T17079] loop9: detected capacity change from 0 to 7 [ 752.221748][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 752.231373][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 752.239446][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 752.249073][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 752.256964][T17079] loop9: unable to read partition table [ 753.056121][T17079] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 753.555911][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 753.573335][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 753.582960][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 753.591142][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 753.600702][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 753.617641][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 753.627297][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 753.655897][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 753.665544][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 753.682925][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 753.692544][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 753.798572][T17087] loop2: detected capacity change from 0 to 512 [ 753.839811][T17087] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 753.911275][T17087] rdma_rxe: rxe_newlink: failed to add lo [ 753.921853][T17087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.959168][T17087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.024280][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.051648][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.083218][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.119447][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.159253][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.200988][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.243080][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.286907][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.328292][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.367982][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.416353][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.459912][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.469319][T17103] loop0: detected capacity change from 0 to 164 [ 754.503809][T17087] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 754.552318][T17087] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 754.815161][T17107] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4061'. [ 755.011784][T17111] pimreg: entered allmulticast mode [ 755.032727][T17106] pimreg: left allmulticast mode [ 755.157400][T17113] hub 8-0:1.0: USB hub found [ 755.162847][T17113] hub 8-0:1.0: 8 ports detected [ 758.835544][T17139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4070'. [ 759.104178][T17146] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4073'. [ 759.192905][T17147] hub 8-0:1.0: USB hub found [ 759.197696][T17147] hub 8-0:1.0: 8 ports detected [ 759.519232][T17150] loop5: detected capacity change from 0 to 512 [ 759.584091][T17150] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 759.858138][T17150] rdma_rxe: rxe_newlink: failed to add lo [ 759.885095][T17150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 760.201999][T17150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 760.248717][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4071'. [ 760.467217][T17163] loop0: detected capacity change from 0 to 512 [ 760.522522][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.542889][T17163] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 760.580719][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.592626][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.600859][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.611207][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.619554][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.628496][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.636910][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.645277][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.653556][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.661958][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.670265][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.679189][T17150] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 760.708018][T17150] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 760.754219][T17162] netlink: 'syz.0.4075': attribute type 10 has an invalid length. [ 760.838448][T17162] team0: Port device dummy0 added [ 761.076269][T17162] syz.0.4075 (17162) used greatest stack depth: 8832 bytes left [ 762.236419][T17174] tun0: tun_chr_ioctl cmd 2147767506 [ 763.264558][T17183] FAULT_INJECTION: forcing a failure. [ 763.264558][T17183] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.277804][T17183] CPU: 1 UID: 0 PID: 17183 Comm: syz.5.4081 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 763.277843][T17183] Tainted: [W]=WARN [ 763.277849][T17183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 763.277862][T17183] Call Trace: [ 763.277868][T17183] [ 763.277876][T17183] __dump_stack+0x1d/0x30 [ 763.277899][T17183] dump_stack_lvl+0x95/0xd0 [ 763.277930][T17183] dump_stack+0x15/0x1b [ 763.277948][T17183] should_fail_ex+0x25e/0x270 [ 763.278126][T17183] should_fail+0xb/0x20 [ 763.278154][T17183] should_fail_usercopy+0x1a/0x20 [ 763.278186][T17183] _copy_to_user+0x20/0xa0 [ 763.278210][T17183] simple_read_from_buffer+0xb5/0x130 [ 763.278269][T17183] proc_fail_nth_read+0x10e/0x150 [ 763.278290][T17183] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.278397][T17183] vfs_read+0x18e/0x7c0 [ 763.278414][T17183] ? __rcu_read_unlock+0x4e/0x70 [ 763.278499][T17183] ? __fget_files+0x184/0x1c0 [ 763.278599][T17183] ? mutex_lock+0x57/0x90 [ 763.278631][T17183] ksys_read+0xdc/0x1a0 [ 763.278718][T17183] __x64_sys_read+0x40/0x50 [ 763.278736][T17183] x64_sys_call+0x2886/0x3020 [ 763.278758][T17183] do_syscall_64+0x136/0x3c0 [ 763.278785][T17183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.278874][T17183] RIP: 0033:0x7efdfd48e6ce [ 763.278894][T17183] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 763.278916][T17183] RSP: 002b:00007efdfbf26fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 763.278937][T17183] RAX: ffffffffffffffda RBX: 00007efdfbf276c0 RCX: 00007efdfd48e6ce [ 763.278950][T17183] RDX: 000000000000000f RSI: 00007efdfbf270a0 RDI: 0000000000000005 [ 763.278966][T17183] RBP: 00007efdfbf27090 R08: 0000000000000000 R09: 0000000000000000 [ 763.279029][T17183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.279044][T17183] R13: 00007efdfd756038 R14: 00007efdfd755fa0 R15: 00007fff3e86d8a8 [ 763.279062][T17183] [ 763.285819][T17185] loop1: detected capacity change from 0 to 512 [ 763.557155][T17191] loop5: detected capacity change from 0 to 128 [ 763.565901][T17191] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 763.676694][T17185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.102114][T17185] EXT4-fs warning (device loop1): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 764.112665][T17191] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 764.122240][T17185] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4082'. [ 764.195860][T17203] loop2: detected capacity change from 0 to 128 [ 764.207173][T13516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.222611][T17203] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 764.280861][T17203] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 765.209645][T17214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4092'. [ 765.222687][T17214] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4092'. [ 765.243481][T17214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4092'. [ 765.270741][ T28] audit: type=1400 audit(1784510622.412:2096): avc: denied { append } for pid=17213 comm="syz.3.4092" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 765.348207][ T9760] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 765.374142][ T28] audit: type=1400 audit(1784510622.512:2097): avc: denied { listen } for pid=17213 comm="syz.3.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 765.505078][ T358] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 765.688511][T17229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4091'. [ 765.798559][T17230] hub 8-0:1.0: USB hub found [ 765.803915][T17230] hub 8-0:1.0: 8 ports detected [ 765.912606][T17229] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 766.445903][T17233] loop0: detected capacity change from 0 to 512 [ 767.111238][T17233] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 767.155136][T17233] System zones: 0-2, 18-18, 34-34 [ 767.226926][T17233] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4095: bg 0: block 248: padding at end of block bitmap is not set [ 767.414813][T17233] loop0: lost filesystem error report for type 5 error -117 [ 767.417009][T17233] Quota error (device loop0): write_blk: dquota write failed [ 767.424455][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 767.424476][ C1] EXT4-fs (loop0): last error at time 1784510624: ext4_validate_block_bitmap:441 [ 767.498937][T17246] pimreg: entered allmulticast mode [ 767.541930][T17245] pimreg: left allmulticast mode [ 767.721667][T17233] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 767.823826][T17233] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.4095: Failed to acquire dquot type 1 [ 767.927924][T17233] loop0: lost filesystem error report for type 5 error -117 [ 767.976246][T17233] EXT4-fs (loop0): 1 truncate cleaned up [ 768.005323][T17233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.083819][T17233] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 768.162067][T17250] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4098'. [ 768.236375][T17233] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.460463][T17250] pimreg: entered allmulticast mode [ 768.576256][T17233] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4095'. [ 768.634143][T17253] pimreg: left allmulticast mode [ 768.676708][T17261] FAULT_INJECTION: forcing a failure. [ 768.676708][T17261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.690243][T17261] CPU: 0 UID: 0 PID: 17261 Comm: syz.1.4102 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 768.690317][T17261] Tainted: [W]=WARN [ 768.690326][T17261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 768.690339][T17261] Call Trace: [ 768.690347][T17261] [ 768.690356][T17261] __dump_stack+0x1d/0x30 [ 768.690381][T17261] dump_stack_lvl+0x95/0xd0 [ 768.690404][T17261] dump_stack+0x15/0x1b [ 768.690504][T17261] should_fail_ex+0x25e/0x270 [ 768.690537][T17261] should_fail+0xb/0x20 [ 768.690564][T17261] should_fail_usercopy+0x1a/0x20 [ 768.690596][T17261] _copy_from_user+0x1c/0xb0 [ 768.690644][T17261] __sys_bpf+0x1e2/0xc30 [ 768.690674][T17261] ? ktime_get+0x190/0x240 [ 768.690701][T17261] __x64_sys_bpf+0x69/0x80 [ 768.690731][T17261] x64_sys_call+0x10cb/0x3020 [ 768.690816][T17261] do_syscall_64+0x136/0x3c0 [ 768.690841][T17261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.690867][T17261] RIP: 0033:0x7f08ae7cde99 [ 768.690885][T17261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.690914][T17261] RSP: 002b:00007f08ad227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 768.690938][T17261] RAX: ffffffffffffffda RBX: 00007f08aea55fa0 RCX: 00007f08ae7cde99 [ 768.690955][T17261] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 768.690968][T17261] RBP: 00007f08ad227090 R08: 0000000000000000 R09: 0000000000000000 [ 768.690981][T17261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.690999][T17261] R13: 00007f08aea56038 R14: 00007f08aea55fa0 R15: 00007ffc7f7e8cd8 [ 768.691019][T17261] [ 768.850862][T17264] loop3: detected capacity change from 0 to 512 [ 768.890898][T17264] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 769.029430][T17264] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 769.047554][T17269] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4105'. [ 769.051095][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 769.057879][T17269] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 769.062990][ C1] EXT4-fs (loop3): initial error at time 1784510626: ext4_mb_generate_buddy:1317 [ 769.081390][ C1] EXT4-fs (loop3): last error at time 1784510626: ext4_mb_generate_buddy:1317 [ 769.117089][T17264] Quota error (device loop3): write_blk: dquota write failed [ 769.137823][T17264] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 769.169862][T17264] Quota error (device loop3): write_blk: dquota write failed [ 769.193874][T17264] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 769.212110][T17264] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.4101: Failed to acquire dquot type 1 [ 769.223492][T17264] loop3: lost filesystem error report for type 5 error -28 [ 769.261236][T17264] EXT4-fs (loop3): 1 truncate cleaned up [ 769.274670][T17264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 769.473901][T17262] EXT4-fs error (device loop3): __ext4_remount:6844: comm syz.3.4101: Abort forced by user [ 769.484919][T17262] EXT4-fs (loop3): Remounting filesystem read-only [ 769.501455][T17262] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 770.990603][T17288] loop9: detected capacity change from 0 to 7 [ 771.500910][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 771.510557][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 771.522600][T12451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 771.581413][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 771.591048][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 771.703651][T17288] loop9: unable to read partition table [ 771.725638][T17288] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 771.735108][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 771.744720][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 771.793982][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 771.803640][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 771.847031][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 771.856642][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 771.868108][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 771.877696][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 771.896356][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 771.905964][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 772.773270][ T28] audit: type=1400 audit(1784510629.922:2098): avc: denied { cpu } for pid=17306 comm="syz.2.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 773.317770][T17315] netlink: 'syz.2.4113': attribute type 5 has an invalid length. [ 773.634368][T17312] loop0: detected capacity change from 0 to 8192 [ 773.918390][T17324] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4119'. [ 774.023741][T17324] pimreg: entered allmulticast mode [ 774.556273][T17343] hub 8-0:1.0: USB hub found [ 774.561257][T17343] hub 8-0:1.0: 8 ports detected [ 777.030182][T17351] hub 8-0:1.0: USB hub found [ 777.035251][T17351] hub 8-0:1.0: 8 ports detected [ 777.165358][T17355] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 777.486426][T17360] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4125'. [ 777.683871][ T28] audit: type=1400 audit(1784510634.832:2099): avc: denied { relabelto } for pid=17353 comm="syz.1.4125" name="bus" dev="tmpfs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 777.709951][ T28] audit: type=1400 audit(1784510634.832:2100): avc: denied { associate } for pid=17353 comm="syz.1.4125" name="bus" dev="tmpfs" ino=1062 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 778.251129][T17359] tun0: tun_chr_ioctl cmd 2147767506 [ 778.331221][T17355] loop1: detected capacity change from 0 to 512 [ 778.386990][T17355] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 778.460092][T17355] EXT4-fs (loop1): 1 truncate cleaned up [ 778.495811][T17355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.569261][T17355] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.723814][T17355] loop1: detected capacity change from 0 to 512 [ 778.786522][T17355] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 778.862237][T17355] EXT4-fs error (device loop1): xattr_find_entry:337: inode #15: comm syz.1.4125: corrupted xattr entries [ 778.929342][T17355] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 778.931086][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 778.946716][ C1] EXT4-fs (loop1): initial error at time 1784510636: xattr_find_entry:337: inode 15 [ 778.956163][ C1] EXT4-fs (loop1): last error at time 1784510636: xattr_find_entry:337: inode 15 [ 778.965698][T17355] EXT4-fs (loop1): Remounting filesystem read-only [ 778.992448][T17355] EXT4-fs (loop1): 1 truncate cleaned up [ 779.020842][T17355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.154897][T13516] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.186962][ T28] audit: type=1400 audit(1784510636.332:2101): avc: denied { bind } for pid=17362 comm="syz.2.4128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 779.363720][T17381] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4132'. [ 779.491712][T17375] pimreg: entered allmulticast mode [ 779.529576][T17378] pimreg: left allmulticast mode [ 781.184936][T17404] loop3: detected capacity change from 0 to 512 [ 781.225047][T17404] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 781.316635][T17401] loop5: detected capacity change from 0 to 8192 [ 781.819383][T17400] FAT-fs (loop5): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 781.839644][T17404] rdma_rxe: rxe_newlink: failed to add lo [ 781.841432][T17400] FAT-fs (loop5): Filesystem has been set read-only [ 781.861000][T17404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 781.875412][T17404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 781.906841][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 781.945190][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 781.959605][T17414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4141'. [ 781.978475][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 782.004148][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 782.030127][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 782.050237][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 782.075574][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 782.091306][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 782.108716][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 782.128295][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 782.154749][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 782.179162][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 782.204140][T17404] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 782.230440][T17404] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 782.333636][T17419] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4143'. [ 782.364525][T17419] pimreg: entered allmulticast mode [ 782.586795][T17428] loop9: detected capacity change from 0 to 7 [ 782.598822][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.608459][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 782.617179][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.626814][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 782.635448][T17428] loop9: unable to read partition table [ 782.641128][T17428] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 782.697915][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 782.708969][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.718602][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 782.727007][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.736605][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 782.744707][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.754324][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 782.762530][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.772109][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 782.780213][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 782.789831][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 782.853777][T17432] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4148'. [ 782.983799][T17432] pimreg: entered allmulticast mode [ 783.002564][T17438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4150'. [ 783.006779][T17437] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4149'. [ 783.074139][T17438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4150'. [ 783.132589][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4150'. [ 783.200407][T17441] pimreg: left allmulticast mode [ 783.313054][T17453] loop2: detected capacity change from 0 to 512 [ 783.355175][T17453] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 783.426031][T17453] rdma_rxe: rxe_newlink: failed to add lo [ 783.449871][T17453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.477997][T17453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.510926][T17456] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4152'. [ 783.510939][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 783.535436][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 783.558649][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 783.581749][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 783.605235][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 783.631264][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 783.631565][T17460] syzkaller0: entered promiscuous mode [ 783.650432][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 783.658292][T17460] syzkaller0: entered allmulticast mode [ 783.671860][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 783.685382][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 783.697973][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 783.778655][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 783.831723][T17464] syzkaller0: entered promiscuous mode [ 783.837234][T17464] syzkaller0: entered allmulticast mode [ 783.913843][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 783.922330][T17453] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 783.931485][T17453] FAT-fs (loop2): error, fat_free: invalid cluster chain (i_pos 548) [ 784.071137][ T28] audit: type=1400 audit(1784510641.192:2102): avc: denied { create } for pid=17465 comm="syz.3.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 784.114320][T17473] hub 8-0:1.0: USB hub found [ 784.119260][T17473] hub 8-0:1.0: 8 ports detected [ 784.249144][T17475] loop9: detected capacity change from 0 to 7 [ 784.306935][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 784.316568][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 784.330559][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 784.340179][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 784.448751][T17475] loop9: unable to read partition table [ 784.456163][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 784.464524][T17475] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 784.474504][T17479] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4161'. [ 786.334674][T17484] hub 8-0:1.0: USB hub found [ 786.339489][T17484] hub 8-0:1.0: 8 ports detected [ 786.448900][T17479] pimreg: entered allmulticast mode [ 786.619440][T17490] pimreg: left allmulticast mode [ 786.731235][T17492] syzkaller0: entered promiscuous mode [ 786.749915][T17492] syzkaller0: entered allmulticast mode [ 786.818994][T17494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4166'. [ 786.858835][T17494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4166'. [ 786.906225][T17494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4166'. [ 786.921510][T17496] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4167'. [ 786.972720][T17502] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 788.403049][T17533] loop9: detected capacity change from 0 to 7 [ 788.441739][ C1] blk_print_req_error: 6 callbacks suppressed [ 788.441760][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 788.457474][ C1] buffer_io_error: 4 callbacks suppressed [ 788.457491][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 788.484353][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 788.493993][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 788.504533][T17533] loop9: unable to read partition table [ 788.523730][T17533] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 788.582780][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 788.592597][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 788.602229][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 788.610396][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 788.620022][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 788.628764][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 788.638366][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 788.653296][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 788.662931][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 788.672361][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 788.682014][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 789.286813][T17544] loop1: detected capacity change from 0 to 512 [ 789.315129][T17544] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 789.369582][T17544] sz1: rxe_newlink: already configured on lo [ 789.383905][T17544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.409250][T17544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.440549][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 789.463113][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 789.488860][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 789.514150][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 789.541511][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 789.586160][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 789.622932][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 789.647404][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 789.668357][T17547] syzkaller0: entered promiscuous mode [ 789.681343][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 789.701014][T17547] syzkaller0: entered allmulticast mode [ 789.714012][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 789.743321][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 789.774646][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 789.803562][T17544] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 789.826378][T17544] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 790.274083][T17559] hub 8-0:1.0: USB hub found [ 790.278967][T17559] hub 8-0:1.0: 8 ports detected [ 791.422697][ T28] audit: type=1400 audit(1784510648.572:2103): avc: denied { accept } for pid=17561 comm="syz.1.4182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 792.397596][ T28] audit: type=1400 audit(1784510648.592:2104): avc: denied { write } for pid=17561 comm="syz.1.4182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 792.461363][ T28] audit: type=1400 audit(1784510649.602:2105): avc: denied { append } for pid=17561 comm="syz.1.4182" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 792.486767][T17564] xt_CT: You must specify a L4 protocol and not use inversions on it [ 792.621399][T17573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4185'. [ 793.087182][T17580] loop3: detected capacity change from 0 to 128 [ 793.131856][T17580] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 793.149346][T17582] syzkaller0: entered promiscuous mode [ 793.178386][T17582] syzkaller0: entered allmulticast mode [ 793.215572][T17580] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 793.473382][T17586] netlink: 'syz.3.4188': attribute type 2 has an invalid length. [ 793.729715][ T358] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 793.951883][T17602] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4193'. [ 794.494823][T17606] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4195'. [ 794.639418][T17606] pimreg: entered allmulticast mode [ 794.679058][T17606] pimreg: left allmulticast mode [ 794.941116][T17623] syzkaller0: entered promiscuous mode [ 794.946642][T17623] syzkaller0: entered allmulticast mode [ 795.458462][T17635] loop0: detected capacity change from 0 to 128 [ 795.479128][T17635] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 795.593566][T17635] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 795.956818][ T9747] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 796.378480][T17648] hub 8-0:1.0: USB hub found [ 796.383694][T17648] hub 8-0:1.0: 8 ports detected [ 797.049678][T17652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4208'. [ 798.576616][T17666] syzkaller0: entered promiscuous mode [ 798.606467][T17666] syzkaller0: entered allmulticast mode [ 799.064009][T17682] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.4216'. [ 799.639517][ T28] audit: type=1400 audit(1784510656.782:2106): avc: denied { read } for pid=17689 comm="syz.3.4218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 799.765839][T17691] hub 8-0:1.0: USB hub found [ 799.770597][T17691] hub 8-0:1.0: 8 ports detected [ 799.837596][T17694] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4219'. [ 800.247251][T17703] hub 8-0:1.0: USB hub found [ 800.252063][T17703] hub 8-0:1.0: 8 ports detected [ 802.127724][T17711] syzkaller0: entered promiscuous mode [ 802.158633][T17711] syzkaller0: entered allmulticast mode [ 802.326220][ T28] audit: type=1400 audit(1784510659.472:2107): avc: denied { name_bind } for pid=17718 comm="syz.0.4228" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 802.490553][T17729] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4230'. [ 803.164551][T17739] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4232'. [ 803.363215][T17739] pimreg: entered allmulticast mode [ 803.399855][T17743] pimreg: left allmulticast mode [ 803.775179][T17750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.882505][T17750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.232388][T17756] loop3: detected capacity change from 0 to 512 [ 804.479183][T17756] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 804.596265][T17756] rdma_rxe: rxe_newlink: failed to add lo [ 804.640356][T17756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.701400][T17756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.735987][T17758] syzkaller0: entered promiscuous mode [ 804.756047][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 804.778034][T17758] syzkaller0: entered allmulticast mode [ 804.801596][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 804.845357][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 804.911630][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 804.922020][ T28] audit: type=1400 audit(1784510662.072:2108): avc: denied { read } for pid=17763 comm="syz.5.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 805.050458][T17766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4242'. [ 805.073176][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 805.103948][T17766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4242'. [ 805.115829][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 805.147340][T17766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4242'. [ 805.158487][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 805.192262][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 805.237401][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 805.276417][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 805.295461][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 805.303787][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 805.312070][T17756] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 805.321009][T17756] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 548) [ 805.556460][T17776] hub 8-0:1.0: USB hub found [ 805.561143][T17776] hub 8-0:1.0: 8 ports detected [ 805.933344][T17786] loop9: detected capacity change from 0 to 7 [ 805.959447][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 805.969101][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 805.978923][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 805.988538][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 806.003746][T17786] loop9: unable to read partition table [ 806.023229][T17786] loop_reread_partitions: partition scan of loop9 (ъщ) failed (rc=-5) [ 806.295736][T17795] hub 8-0:1.0: USB hub found [ 806.300688][T17795] hub 8-0:1.0: 8 ports detected [ 806.386656][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 806.414851][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.424507][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 806.433456][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.443060][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 806.452768][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.462362][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 806.478021][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.487742][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 806.496671][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 806.506262][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 806.941619][T17799] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4250'. [ 806.957017][T17803] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4249'. [ 807.164448][T17799] pimreg: entered allmulticast mode [ 807.196606][T17808] tipc: Enabling of bearer rejected, failed to enable media [ 807.209036][T17807] pimreg: left allmulticast mode [ 807.299614][T17808] syzkaller0: entered promiscuous mode [ 807.411658][T17808] syzkaller0: entered allmulticast mode [ 807.593292][T17819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.697577][T17819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.173989][T17827] loop1: detected capacity change from 0 to 512 [ 808.193116][T17827] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 808.249324][T17827] sz1: rxe_newlink: already configured on lo [ 808.270354][T17827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 808.289507][T17827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.323707][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.332318][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.368658][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.418618][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.451686][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.468487][T17832] loop2: detected capacity change from 0 to 128 [ 808.476886][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.501494][T17832] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 808.510910][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.551409][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.562816][T17832] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 808.576622][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.605071][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.633637][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.662807][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.686879][T17827] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 808.714466][T17827] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 808.942181][ T9760] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 809.159833][T17848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4263'. [ 809.477873][T17850] FAULT_INJECTION: forcing a failure. [ 809.477873][T17850] name failslab, interval 1, probability 0, space 0, times 0 [ 809.490600][T17850] CPU: 1 UID: 0 PID: 17850 Comm: syz.0.4264 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 809.490631][T17850] Tainted: [W]=WARN [ 809.490637][T17850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 809.490663][T17850] Call Trace: [ 809.490672][T17850] [ 809.490681][T17850] __dump_stack+0x1d/0x30 [ 809.490733][T17850] dump_stack_lvl+0x95/0xd0 [ 809.490758][T17850] dump_stack+0x15/0x1b [ 809.490776][T17850] should_fail_ex+0x25e/0x270 [ 809.490802][T17850] should_failslab+0x8c/0xb0 [ 809.490824][T17850] kmem_cache_alloc_node_noprof+0x85/0x3d0 [ 809.490892][T17850] ? __alloc_skb+0x2db/0x6f0 [ 809.490920][T17850] ? __alloc_skb+0x2db/0x6f0 [ 809.490956][T17850] __alloc_skb+0x2db/0x6f0 [ 809.490982][T17850] ? __alloc_skb+0x205/0x6f0 [ 809.491065][T17850] netlink_alloc_large_skb+0xbf/0xf0 [ 809.491086][T17850] netlink_sendmsg+0x40c/0x6f0 [ 809.491112][T17850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 809.491154][T17850] ____sys_sendmsg+0x532/0x580 [ 809.491187][T17850] ___sys_sendmsg+0x195/0x1e0 [ 809.491230][T17850] __x64_sys_sendmsg+0xd4/0x160 [ 809.491262][T17850] x64_sys_call+0x194c/0x3020 [ 809.491342][T17850] do_syscall_64+0x136/0x3c0 [ 809.491450][T17850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.491477][T17850] RIP: 0033:0x7f49cb5fde99 [ 809.491539][T17850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.491633][T17850] RSP: 002b:00007f49ca057028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.491656][T17850] RAX: ffffffffffffffda RBX: 00007f49cb885fa0 RCX: 00007f49cb5fde99 [ 809.491673][T17850] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000003 [ 809.491688][T17850] RBP: 00007f49ca057090 R08: 0000000000000000 R09: 0000000000000000 [ 809.491742][T17850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.491756][T17850] R13: 00007f49cb886038 R14: 00007f49cb885fa0 R15: 00007ffc8ff13cc8 [ 809.491776][T17850] [ 809.973155][T17856] tipc: Enabling of bearer rejected, failed to enable media [ 810.019886][T17856] syzkaller0: entered promiscuous mode [ 810.142554][T17856] syzkaller0: entered allmulticast mode [ 810.995867][T17872] loop0: detected capacity change from 0 to 128 [ 811.017245][T17872] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 811.051988][T17872] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 811.495265][T17820] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 811.787353][T17890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4274'. [ 812.639953][T17894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4275'. [ 813.628239][T17905] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4276'. [ 813.744557][T17905] pimreg: entered allmulticast mode [ 813.796448][T17909] pimreg: left allmulticast mode [ 814.576638][T17919] loop1: detected capacity change from 0 to 128 [ 814.591792][T17919] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 814.639611][T17919] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 814.976803][ T4928] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 815.218516][T17932] hub 8-0:1.0: USB hub found [ 815.223298][T17932] hub 8-0:1.0: 8 ports detected [ 816.344039][ T28] audit: type=1400 audit(1784510673.472:2109): avc: denied { bind } for pid=17942 comm="syz.3.4290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 816.440647][ T28] audit: type=1400 audit(1784510673.472:2110): avc: denied { setopt } for pid=17942 comm="syz.3.4290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 816.592535][ T28] audit: type=1400 audit(1784510673.472:2111): avc: denied { write } for pid=17942 comm="syz.3.4290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 818.274799][T17965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4295'. [ 818.312748][T17965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4295'. [ 818.418454][T17967] loop3: detected capacity change from 0 to 128 [ 818.441892][T17967] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 818.478086][T17967] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 818.871703][ T4928] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 822.130051][T17990] hub 8-0:1.0: USB hub found [ 822.134907][T17990] hub 8-0:1.0: 8 ports detected [ 823.626754][T18003] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4305'. [ 824.084534][T18007] loop0: detected capacity change from 0 to 128 [ 824.789927][T18007] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 824.838921][T18007] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 824.940167][T18012] loop5: detected capacity change from 0 to 512 [ 824.966839][T18012] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 825.041260][T18012] rdma_rxe: rxe_newlink: failed to add lo [ 825.061951][T18012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.095604][T18012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.127446][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 825.156555][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 825.184544][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 825.218930][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 825.244724][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 825.278484][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 825.302299][ T4928] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 825.317445][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 825.359451][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 825.398600][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 825.432660][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 825.472015][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 825.508306][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 825.534198][T18012] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 825.563350][T18012] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 548) [ 826.333376][T18029] tipc: Enabling of bearer rejected, failed to enable media [ 826.346246][T18029] syzkaller0: entered promiscuous mode [ 826.352105][T18029] syzkaller0: entered allmulticast mode [ 828.967780][ T28] audit: type=1400 audit(1784510686.112:2112): avc: denied { name_bind } for pid=18044 comm="syz.2.4318" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 830.252861][T18062] hub 8-0:1.0: USB hub found [ 830.258073][T18062] hub 8-0:1.0: 8 ports detected [ 830.754487][ T28] audit: type=1400 audit(1784510687.902:2113): avc: denied { write } for pid=18069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.893540][ T28] audit: type=1400 audit(1784510687.902:2114): avc: denied { write } for pid=18083 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.017047][T18091] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4325'. [ 831.227958][T18102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4326'. [ 831.613137][T18091] pimreg: entered allmulticast mode [ 831.691310][T18103] pimreg: left allmulticast mode [ 831.887507][ T28] audit: type=1400 audit(1784510689.022:2115): avc: denied { write } for pid=18092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.946543][ T28] audit: type=1400 audit(1784510689.082:2116): avc: denied { write } for pid=18110 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.064851][T18119] loop2: detected capacity change from 0 to 512 [ 832.098833][T18119] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 832.223585][T18119] EXT4-fs (loop2): orphan cleanup on readonly fs [ 832.229993][T18119] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 832.244543][T18119] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 832.251126][T18119] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.4330: bad orphan inode 768 [ 832.261264][T18119] loop2: lost filesystem error report for type 5 error -117 [ 832.265769][T18119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 832.335005][T18131] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4334'. [ 832.403405][T18131] loop1: detected capacity change from 0 to 256 [ 832.527524][T18119] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 832.647969][T18119] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 832.680096][T13516] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 832.808160][T13516] FAT-fs (loop1): Filesystem has been set read-only [ 832.832660][T13516] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 833.052190][T18143] batadv_slave_0: entered promiscuous mode [ 833.113462][ T28] audit: type=1400 audit(1784510690.262:2117): avc: denied { getopt } for pid=18142 comm="syz.3.4336" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 833.160336][ T310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.251633][T18143] loop3: detected capacity change from 0 to 512 [ 833.279678][T18143] EXT4-fs: Ignoring removed nobh option [ 833.303591][T18143] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 833.312018][T18143] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4336: invalid indirect mapped block 256 (level 1) [ 833.325353][T18143] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 833.325645][T18143] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4336: invalid indirect mapped block 2683928664 (level 1) [ 833.335270][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 833.335407][ C0] EXT4-fs (loop3): initial error at time 1784510690: ext4_free_branches:1023: inode 13 [ 833.335517][ C0] EXT4-fs (loop3): last error at time 1784510690: ext4_free_branches:1023: inode 13 [ 833.385479][T18143] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 833.388797][T18143] EXT4-fs (loop3): 1 truncate cleaned up [ 833.412502][ T310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.443658][T18155] netlink: 'syz.0.4340': attribute type 3 has an invalid length. [ 833.540056][T18143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 833.664039][ T310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.675141][T12732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.756962][ T310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.784011][T18163] FAULT_INJECTION: forcing a failure. [ 833.784011][T18163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.798737][T18142] batadv_slave_0: left promiscuous mode [ 833.835494][T18163] CPU: 0 UID: 0 PID: 18163 Comm: syz.2.4341 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 833.835663][T18163] Tainted: [W]=WARN [ 833.835670][T18163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 833.835685][T18163] Call Trace: [ 833.835692][T18163] [ 833.835702][T18163] __dump_stack+0x1d/0x30 [ 833.835729][T18163] dump_stack_lvl+0x95/0xd0 [ 833.835753][T18163] dump_stack+0x15/0x1b [ 833.835820][T18163] should_fail_ex+0x25e/0x270 [ 833.835848][T18163] should_fail+0xb/0x20 [ 833.835917][T18163] should_fail_usercopy+0x1a/0x20 [ 833.836016][T18163] _copy_from_iter+0xcc/0xe70 [ 833.836097][T18163] ? __alloc_skb+0x511/0x6f0 [ 833.836124][T18163] ? __alloc_skb+0x205/0x6f0 [ 833.836179][T18163] netlink_sendmsg+0x4a4/0x6f0 [ 833.836206][T18163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.836269][T18163] ____sys_sendmsg+0x532/0x580 [ 833.836306][T18163] ___sys_sendmsg+0x195/0x1e0 [ 833.836407][T18163] __x64_sys_sendmsg+0xd4/0x160 [ 833.836438][T18163] x64_sys_call+0x194c/0x3020 [ 833.836510][T18163] do_syscall_64+0x136/0x3c0 [ 833.836533][T18163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.836600][T18163] RIP: 0033:0x7f36a684de99 [ 833.836620][T18163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.836641][T18163] RSP: 002b:00007f36a5286028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.836665][T18163] RAX: ffffffffffffffda RBX: 00007f36a6ad6090 RCX: 00007f36a684de99 [ 833.836681][T18163] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 833.836697][T18163] RBP: 00007f36a5286090 R08: 0000000000000000 R09: 0000000000000000 [ 833.836755][T18163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.836767][T18163] R13: 00007f36a6ad6128 R14: 00007f36a6ad6090 R15: 00007fff1b2d2f78 [ 833.836786][T18163] [ 833.876987][T18151] gre0 speed is unknown, defaulting to 1000 [ 834.060094][ T310] bridge_slave_1: left allmulticast mode [ 834.070496][ T310] bridge_slave_1: left promiscuous mode [ 834.091566][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.124579][ T310] bridge_slave_0: left allmulticast mode [ 834.139177][ T310] bridge_slave_0: left promiscuous mode [ 834.157885][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.195208][ T310] pimreg: left allmulticast mode [ 834.242367][ T28] audit: type=1400 audit(1784510691.382:2118): avc: denied { write } for pid=18167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.322614][ T28] audit: type=1400 audit(1784510691.462:2119): avc: denied { write } for pid=18178 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 834.376426][T12451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.583381][T18184] FAULT_INJECTION: forcing a failure. [ 834.583381][T18184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 834.653314][T18186] hub 8-0:1.0: USB hub found [ 834.659883][T18186] hub 8-0:1.0: 8 ports detected [ 834.844979][T18184] CPU: 1 UID: 0 PID: 18184 Comm: syz.3.4343 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 834.845035][T18184] Tainted: [W]=WARN [ 834.845042][T18184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 834.845134][T18184] Call Trace: [ 834.845142][T18184] [ 834.845151][T18184] __dump_stack+0x1d/0x30 [ 834.845182][T18184] dump_stack_lvl+0x95/0xd0 [ 834.845207][T18184] dump_stack+0x15/0x1b [ 834.845231][T18184] should_fail_ex+0x25e/0x270 [ 834.845319][T18184] should_fail+0xb/0x20 [ 834.845348][T18184] should_fail_usercopy+0x1a/0x20 [ 834.845381][T18184] _copy_from_iter+0xcc/0xe70 [ 834.845442][T18184] ? __alloc_skb+0x511/0x6f0 [ 834.845468][T18184] ? __alloc_skb+0x205/0x6f0 [ 834.845492][T18184] netlink_sendmsg+0x4a4/0x6f0 [ 834.845529][T18184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 834.845556][T18184] ____sys_sendmsg+0x532/0x580 [ 834.845588][T18184] ___sys_sendmsg+0x195/0x1e0 [ 834.845670][T18184] __x64_sys_sendmsg+0xd4/0x160 [ 834.845703][T18184] x64_sys_call+0x194c/0x3020 [ 834.845725][T18184] do_syscall_64+0x136/0x3c0 [ 834.845770][T18184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.845819][T18184] RIP: 0033:0x7f26b827de99 [ 834.845839][T18184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.845856][T18184] RSP: 002b:00007f26b6cd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.845908][T18184] RAX: ffffffffffffffda RBX: 00007f26b8505fa0 RCX: 00007f26b827de99 [ 834.845926][T18184] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 834.845978][T18184] RBP: 00007f26b6cd7090 R08: 0000000000000000 R09: 0000000000000000 [ 834.846003][T18184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 834.846018][T18184] R13: 00007f26b8506038 R14: 00007f26b8505fa0 R15: 00007ffc93723ce8 [ 834.846037][T18184] [ 835.096420][T18188] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4344'. [ 835.348273][ T28] audit: type=1400 audit(1784510692.352:2120): avc: denied { ioctl } for pid=18189 comm="syz.3.4345" path="socket:[59314]" dev="sockfs" ino=59314 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 835.377325][ T28] audit: type=1400 audit(1784510692.352:2121): avc: denied { connect } for pid=18189 comm="syz.3.4345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 835.417217][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.427238][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.436688][ T310] bond0 (unregistering): Released all slaves [ 835.451292][T18151] lo speed is unknown, defaulting to 1000 [ 835.457512][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 836.227778][T18220] syz_tun: entered allmulticast mode [ 836.298197][ T310] hsr_slave_0: left promiscuous mode [ 836.336633][ T310] hsr_slave_1: left promiscuous mode [ 836.347208][ T28] audit: type=1400 audit(1784510693.492:2122): avc: denied { write } for pid=18206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 836.373597][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 836.398707][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 836.431317][ T28] audit: type=1400 audit(1784510693.572:2123): avc: denied { write } for pid=18241 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 836.456623][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 836.486729][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 836.525898][ T310] veth1_macvtap: left promiscuous mode [ 836.631537][ T310] veth0_macvtap: left promiscuous mode [ 836.637105][ T310] veth1_vlan: left promiscuous mode [ 836.642614][ T310] veth0_vlan: left promiscuous mode [ 836.748633][ T310] team0 (unregistering): Port device team_slave_1 removed [ 836.780572][ T310] team0 (unregistering): Port device team_slave_0 removed [ 836.911334][ T9742] smc: removing ib device sz1 [ 836.940413][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 836.955570][ T7639] lo speed is unknown, defaulting to 1000 [ 836.961735][T18151] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.971391][ T7639] sz1: Port: 1 Link DOWN [ 836.991591][T18151] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.031336][T18151] bridge_slave_0: entered allmulticast mode [ 837.081978][T18151] bridge_slave_0: entered promiscuous mode [ 837.088779][T18151] bridge0: port 2(bridge_slave_1) entered blocking state [ 837.107244][T18151] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.132330][T18151] bridge_slave_1: entered allmulticast mode [ 837.151347][T18151] bridge_slave_1: entered promiscuous mode [ 837.301118][T18256] hub 8-0:1.0: USB hub found [ 837.306258][T18256] hub 8-0:1.0: 8 ports detected [ 837.382399][T18151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.421608][T18151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.456277][T18219] syz_tun: left allmulticast mode [ 837.492581][ T7639] ================================================================== [ 837.500686][ T7639] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 837.507702][ T7639] [ 837.510006][ T7639] read-write to 0xffff888237d2a8e4 of 4 bytes by task 8087 on cpu 1: [ 837.518064][ T7639] wq_worker_running+0x9b/0x120 [ 837.522909][ T7639] schedule_timeout+0xca/0x180 [ 837.527655][ T7639] wait_for_common+0xef/0x1d0 [ 837.532313][ T7639] usb_start_wait_urb+0x12c/0x220 [ 837.537319][ T7639] usb_control_msg+0x182/0x240 [ 837.542081][ T7639] hub_ext_port_status+0xc2/0x470 [ 837.547088][ T7639] hub_event+0x47e/0x2aa0 [ 837.551400][ T7639] process_scheduled_works+0x4d4/0x9a0 [ 837.556842][ T7639] worker_thread+0x569/0x750 [ 837.561415][ T7639] kthread+0x221/0x270 [ 837.565460][ T7639] ret_from_fork+0x146/0x330 [ 837.570033][ T7639] ret_from_fork_asm+0x1a/0x30 [ 837.574776][ T7639] [ 837.577078][ T7639] read to 0xffff888237d2a8e4 of 4 bytes by task 7639 on cpu 0: [ 837.584595][ T7639] kick_pool+0x49/0x2d0 [ 837.588734][ T7639] __queue_work+0x8e9/0xb90 [ 837.593220][ T7639] queue_work_on+0xa9/0x140 [ 837.597705][ T7639] wg_packet_encrypt_worker+0xcff/0xe90 [ 837.603246][ T7639] process_scheduled_works+0x4d4/0x9a0 [ 837.608685][ T7639] worker_thread+0x569/0x750 [ 837.613257][ T7639] kthread+0x221/0x270 [ 837.617301][ T7639] ret_from_fork+0x146/0x330 [ 837.621893][ T7639] ret_from_fork_asm+0x1a/0x30 [ 837.626636][ T7639] [ 837.628952][ T7639] value changed: 0x00000000 -> 0x00000001 [ 837.634643][ T7639] [ 837.636941][ T7639] Reported by Kernel Concurrency Sanitizer on: [ 837.643070][ T7639] CPU: 0 UID: 0 PID: 7639 Comm: kworker/0:5 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 837.653996][ T7639] Tainted: [W]=WARN [ 837.657782][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 837.667815][ T7639] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 837.674307][ T7639] ================================================================== [ 837.703710][T18151] team0: Port device team_slave_0 added [ 837.711684][T18151] team0: Port device team_slave_1 added [ 837.735011][T18151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.742067][T18151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.796671][T18151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 837.809616][T18151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 837.911092][T18151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 837.957386][T18151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 838.087562][T18151] hsr_slave_0: entered promiscuous mode [ 838.119345][T18151] hsr_slave_1: entered promiscuous mode [ 838.209646][ T28] audit: type=1400 audit(1784510695.352:2124): avc: denied { write } for pid=18258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.333701][ T28] audit: type=1400 audit(1784510695.442:2125): avc: denied { write } for pid=18270 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.415531][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 838.515520][T18151] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 838.533774][T18151] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 838.553200][T18151] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 838.574731][T18151] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 838.582828][T18151] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 838.599330][T18151] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 838.617276][T18151] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 838.632547][ T28] audit: type=1400 audit(1784510695.772:2126): avc: denied { write } for pid=18274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.672163][T18151] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 838.721165][ T28] audit: type=1400 audit(1784510695.862:2127): avc: denied { write } for pid=18285 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.780817][T18151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 838.816522][T18151] 8021q: adding VLAN 0 to HW filter on device team0 [ 838.844367][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.851522][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.912233][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.919347][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 838.966585][T18151] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 838.998149][T18151] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 839.301347][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 839.301364][ T28] audit: type=1400 audit(1784510696.442:2130): avc: denied { write } for pid=18312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 839.302114][T18151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 839.354915][ T28] audit: type=1400 audit(1784510696.502:2131): avc: denied { write } for pid=18328 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 839.425616][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 839.619576][T18151] veth0_vlan: entered promiscuous mode [ 839.634169][ T28] audit: type=1400 audit(1784510696.782:2132): avc: denied { write } for pid=18334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 839.660532][T18151] veth1_vlan: entered promiscuous mode [ 839.698982][T18151] veth0_macvtap: entered promiscuous mode [ 839.710582][ T28] audit: type=1400 audit(1784510696.852:2133): avc: denied { write } for pid=18353 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 839.728035][T18151] veth1_macvtap: entered promiscuous mode [ 839.784631][T18151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.817886][T18151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.851295][ T9760] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.873983][ T9760] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.895713][ T9760] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.910587][ T9760] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 839.936805][ T28] audit: type=1400 audit(1784510697.082:2134): avc: denied { write } for pid=18355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.007766][ T28] audit: type=1400 audit(1784510697.142:2135): avc: denied { write } for pid=18366 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.165692][ T28] audit: type=1400 audit(1784510697.312:2136): avc: denied { write } for pid=18369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.223579][ T28] audit: type=1400 audit(1784510697.312:2137): avc: denied { write } for pid=18380 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.299284][ T28] audit: type=1400 audit(1784510697.442:2138): avc: denied { write } for pid=18382 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 840.347066][ T28] audit: type=1400 audit(1784510697.472:2139): avc: denied { write } for pid=18393 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1