last executing test programs: 26.111399014s ago: executing program 4 (id=759): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x1207, &(0x7f0000001840)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) r2 = signalfd(r0, &(0x7f0000000000)={[0xb3f]}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x3, 0x0, 0x0, 0x0, 0x9, 0x510, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffb}, 0x0, 0x1, 0x0, 0x5, 0x8, 0x20007, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_io_uring_setup(0xe42, &(0x7f00000005c0)={0x0, 0x2119, 0x10, 0x0, 0x15b}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x2a0080, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r3, 0x6f58, 0x0, 0x7e, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f00000001c0)=@phonet={0x23, 0x4, 0x9, 0x9}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x230}, 0x2400c050) ftruncate(r1, 0x100c17a) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x33, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5871, 0x1, @perf_config_ext={0x6, 0x400000008}, 0x4c58, 0x6, 0x0, 0x1, 0xe, 0x20005, 0x10, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x0, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x0, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r7, 0x3, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x1, {'\x00\x00\x00\x00\x00\a\x00p8\x00'}, 0x8, 0xfffffffffffffffc, 0x6}}}, 0x118) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r8, &(0x7f0000000540), 0xfffffdd8) 24.489294568s ago: executing program 4 (id=773): getsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 24.26671678s ago: executing program 4 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x32749e6b75c1a25, 0x12, 0xffffffffffffffff, 0x0) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x13, 0xffffffffffffffff, 0x10000000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) read(r3, &(0x7f0000000300)=""/85, 0x55) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r4) r5 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SYMLINKAT={0x26, 0x29, 0x0, r4, &(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1}) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="20000000380007052cbd7000fedbdf25047c00000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x4008011}, 0x8010) 24.227645702s ago: executing program 4 (id=778): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0x0, 0x9}, {0xfff3, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xf0000003}]}, 0x2c}}, 0x0) socketpair(0x3, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000101010100000000000000000a000000300001802c00018014000300fc02000000000000000000000000000814000400ff020000000000000000000000000001d33430207a09afd2071f81ebcf68512a1199079f0149f09e270edeb3edb80a9d8e31642d9c7942f75d80ca54d3bc3baaca65bca443458bc2de94b727fc2d2e2ebc6fafb08162fd"], 0x44}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000a80)=ANY=[@ANYRESDEC=r2, @ANYRES8=r0, @ANYRESOCT=r2, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRESDEC=r1, @ANYRES32=r1, @ANYRESHEX=0x0, @ANYBLOB="e61772e7f781e418706a161bf30b6179205f226fb938a1e0863e4fb28b2bab6dc556a0b857f9622aa118ef41e05ed7876c61557b6c8979cf09b92899f29afc41e551b37a762aae4e2678818e03e8a047bf7bff7aea5cd4dc759d4a192e9d6fabae3f8c3e7685d500ded1d239b3", @ANYRESDEC=r4], 0xfe33) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000c40), 0x2, 0x4a7, &(0x7f0000001140)="$eJzs3EtvG0UcAPD/bl59hZhSXm2hhoKIeCRNWqAHJB4CqRckJDiUY0jTqjRtUBMkWkU0IFSOqJ+gcETiE3CCCwIkJBBXuCOkCuXS0gNatLY3dRI7OGkc0+T3k1zPeGZ3ZnY969mZbgLYssr5P0nEroj4LSIGqtHFGcrVtxvzs+N/z8+OJ5Flb/6VVPJdn58dL7IW2+2sRQbTiPSTJPY1KHf6wsUzY5OTE+dr8eGZs+8NT1+4+Mzps2OnJk5NnBs9evTI4ZHnnxt9dl3a2Z/Xde+HU/sfPPb2ldfHj19554ev8vruqqVfn5/tXbxFqQjsjYhs6f5eaqHMcpQXH8s6j6+u+v97/XXhpLuDFWFVuiIiP109lf4/EF1x6+QNxGsfR6QdrR/QPlmWZX3LPs2vCtvzwFwGbGJJdLoGQGcUv/j5fXzx2uAhSEdde7l6A5S3+0btVU3prtz5lEvVe6P+NpVfjgMRcfPq8bmbV2PJfAoAQDt8k49/nm40/kvjvrp8d9XWhkoRcXdE7I6IeyJiT0TcG1HJe39EPNBqwUnjpZHl459ftq+xaS3Jx38v1Na2Fo//Fua9S121WH+l/T3JydOTE4dqx2Qwevry+MgKZXz76q+fNUsrR0Q+9iteefnFWLBWjz+7l0zQnRibGbudNte7diBib3ej9icLKwFJbFvz/vNjdvrJL/c3S//v9q9gHdaZsi8inqie/7lY0v5CsvL65PC2mJw4NFx8K5b78efLbzQr/7bavw6ufRSxo+H3f6H9paR+vXZ61UV0X/7906b3NGv9/vcmb1XCxaLtB2MzM+dHInqTueWfj97atogX+fP2Dx5s3P93R/zzeW27fRGRf4kfioiHIyp3bXndH4mIRyPi4AoH4PtXHns3f/9pTe1vr7z9J1Z1/usDPbH0k0aBrjPffd2s/NbO/5FKaLD2SSvXv2rhxXWreQXXetwAAADgTpJW/g98kkRU50121aXtiR3p5NT0zFMnp94/d6KaVoqetJjpGqibDx2pzQ0X8dEl8cOVeeMsy7LtlfjQ+NRku9bUgdbsrPb/dGjhWpCmQ0PVtD+6Fud9sSM1BNpqVetozZ5oA+5IrfV/HR82o4X+v/xJwILOD5tUtf93DXS6HsDG8/daYOtq1P8vRdzoQFWADeb3H7Yu/R+2rtX2/1Kb6gFsPL//sCUtfiS+N1p4nL+lwO5j67OfzR/o6nQ1+ta2eaQdP3TLA0mDpLRB5rTlPfeuS8VipTx9EdHqDi/FRh3MTl+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1se/AQAA//++KOKq") r5 = io_uring_setup(0x5860, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x2, 0x10000000}) io_uring_register$IORING_REGISTER_CLOCK(r5, 0x1d, &(0x7f0000000040)={0x8}, 0x0) io_uring_enter(r5, 0x0, 0x2, 0xf, &(0x7f0000000000), 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1000400, &(0x7f00000000c0), 0x6, 0x588, &(0x7f0000000300)="$eJzs3U1sHFcdAPD/TOzsOnGaFHooCGgohYCirmOnjapeWi5IUFUgFU49pNZ6Y0VeZyPvutTGB+fEgSsSlTjBhQsnDpU4IPWEuHKDG5dyQCooAtVICE01491kd7ObbOOPie3fTxrte/P1f2/kfeN5szMvgBPrYkRsR8TpiHgnIs5HUsxPulO8vjvl631yd6u+c3ernkSWvfWvqe4etuq99XvORsRPR8Sq9KXbG5sri81mY62bn+us3p5rb2y+eHN1cbmx3Li1sHBt/tqVV66+vLBvdX1u9Xcff+fmGz/6w++//NGft7/1k7zMr3WX5XXrWzXJsmzvAV/rHZfpmO3OSiMiP3Jv7H3vT4RT3fqcLrsgPJb87/FzEfF8N31PtbwyAQAHK8vOR3a+P39fOpDLsmTEOgDA0ZNf889Gkta61/+zkaa1WtGHV30mzqTNVrtz+UZr/VbS6+KbTm/cbDauFH2FEZWYTvL8fERcKKbd/MJQ/mpEPB0RP6/MFPlavdVcKuU/HgDg7ND5/z+V/PxfmWRTdwgA4ChzJgeAk+fB8/90KeUAAA6P638AOHn6zv8T3fkHAI6+6tCz/yNlyaGUBQA4HCP7/98+dz/9bDL0ii8A4Khz/x8ATpQfvPlmPmU7WVK8/3rp3Y31lda7Ly412iu11fV6rd5au11bbrWWi3f2rI7YxZ3+TLPVuj3/Uqy/N9dptDtz7Y3N66ut9Vud68V7va83PFgAAOV7+rkP/5pExParM8UUvbEcHv2DAOCISyNmyi4DUI5TZRcAKM1U2QUASqM/HnjUj3tH/kRoJiLeH7+NjgV4sl36wpj+/+H/DQbvB/x/H0bHBkrW/VrrBoATaG/9/3oP4Ch7+Infg0FwnGVZYjx/ADhhJriC9xNBOOYe6/4/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnHCzxZSkte5Y4LORprVaxLmIuBDTyY2bzcaViHgqIv5Sma7k+fmyCw0A7FH6j6Q7/tel8y/MDi89nfy3UnxGxI9/+dYv3lvs9IYOvDe/834xv7O2MDJA5eDrAAD0mRqe0TtPF599F/Kf3N2q96bDLODH394dXDSPu3N3q35/POKpbuGrkc878+9koDLJPg1MvH0nIp4drn96b/mF7sinw/Hz2OcOLH4UNZwdiD/4b1RaLNv9zI/F52cmjLcPZYbj4sO8/Xl91PcvjYvFZ/f7NzXYmFbjZw82ro+h1/7tZLvt305f/Hz/3z9XLdqaUe3fxUljvPTH745ddudU9sWpiF7snb72Z1e1SI2K/8KE8f/2pa88P+5gZb+KuBQPi7+bmuus3p5rb2z+9nsf/Gm5sdy4tbBwbf7alVeuvrwwV/RRz/V6qh/0z1cvPzW+/hFnxsSvPqL+X5+w/r/+3ztvf/Uh8b/5tVHx03jmIfHzc+I3Ym2i+ItnPhg7fHcef2lM/acG4p8e2C6fd3l4Z2P+ID/6++bSRAUFAA5Fe2NzZbHZbKxNkkhjc2Wxd6E58VYDiZnH2mrCRBzYnkcnpgcOQvWgYp0ds+g3n3mH03Gox2ffEnc+w8qVcop6Kpq9/qhHrtxdb3svQbNsD2W+OME6JTVIwKG5/6UvuyQAAAAAAAAAAAAAAMA47R92X/m3zw9F9T8MV3YdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL4+DQAA//+T6cce") r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r6, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0xfffd, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2c0000) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r8, 0x89f9, &(0x7f00000006c0)={'sit0\x00', &(0x7f0000000680)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x33}, 0x5, 0x15}}) r9 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x1, @perf_config_ext={0x2, 0x3}, 0x0, 0xa88, 0x8409, 0x5, 0x0, 0x3c, 0xfffe, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000009c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000121400022bfbdbdf25080015000500000008004f000000000008001500050000000800030004000000080003000400220008000300000000000800150003000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40000801) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, 0x0) 23.937121809s ago: executing program 4 (id=779): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xfd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x42c0, 0x0, 0x400000, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x141, 0x8400) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000140)={0x8001, 0x3, 0x3, 0x7, 0xfffffff8, 0xc}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback={0xffffffffffffff8d}, 0xffffffff}, 0x1c) r2 = gettid() fcntl$setown(r0, 0x8, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xff}}, [@migrate={0x50, 0x11, [{@in6=@private1, @in=@private=0xa010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000040)={&(0x7f00000000c0)={0xa, 0x4ea1, 0x1, @loopback, 0x400022}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}], 0x28}, 0x810) 23.611807098s ago: executing program 4 (id=785): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3cc}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x35c}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x52}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x700000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x39c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xd, 0x101, 0x3, 0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8000000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x555}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xe, 0x9]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x12000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@noxattr}, {@cachetag={'cachetag', 0x3d, '/selinux/status\x00'}}], [{@measure}, {@fsname={'fsname', 0x3d, 'wlan0\x00'}}, {@uid_gt={'uid>', r3}}, {@dont_measure}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_role={'obj_role', 0x3d, '/-'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, r4}}]}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x4, 0xfc, 0x4, 0x9b4b, 0x20, @dev={0xfe, 0x80, '\x00', 0x32}, @private2, 0x8, 0x700, 0x7, 0x12}}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1020044}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000002) mkdirat(r0, &(0x7f0000000780)='./file0\x00', 0x4) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7f}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x49, 0xc5, "94715d938282052af88163010150c9c442fa90312526b15137a46ac93aecd76f5c55557207fa6d50459be7c0b39406f91b985352d42f8da947c794ec5f7f539c23a6c16843"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffff7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4000840) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x52}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x278c95b8628106db}, 0x4000000) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000b80)) ioctl$SNAPSHOT_FREE(r0, 0x3305) mount$9p_virtio(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x2090, &(0x7f0000000c80)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x3}}, {@cache_none}], [{@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@appraise}, {@smackfshat={'smackfshat', 0x3d, '}u){$]{c'}}, {@fowner_lt={'fowner<', r4}}, {@audit}, {@audit}]}}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x5c, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x80) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000f80)=0x0) perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0x4, 0x3, 0xa4, 0x5, 0x0, 0x1, 0x90, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff8001, 0x0, @perf_bp={&(0x7f0000000ec0)}, 0x10, 0x7, 0x4, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x0, 0x4}, r9, 0x10, r0, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002100)={r0, 0x0, 0x2d, 0x1000, &(0x7f0000000fc0)="8b80549811e5f70dcdefa518a994a78760d848afc69d6c9f9a137b5fb344722148e4cbde615e245e9d2dd3fd6c", &(0x7f0000001000)=""/4096, 0x7fff, 0x0, 0xbf, 0x40, &(0x7f0000002000)="6aac311b6dc89d0dcb91c9710d21d6e78e1f985563c901848df85be24179beccd465877d6bc2fd29be1c05d8c7e35ed909bbc3b40181fe6b3b1466540ecb80e157192c9ea4aa66729a8c98ee14a8753d7c92965e2ffffe157f2576030afb22590d05e519bc84aae8cc7a683269cb1f2ef394da4bea10b07c55c20a4a1b30a4b234755145c12a0d6152297d3d00035569e5f13bbb423d33111348844ee02e7a31a1e05e4735ea0958f575b9244ac0b00d5a5e3da034b38d042ff28deb73cce3", &(0x7f00000020c0)="826322abfde56d61ac2d8820505d257b93390fcf96d6df4383d4b39336f80ca219d9ce7812b120a3d7fb055cd2ee74ac0d68b714cb1607ef6fbe7f89b290a0d5", 0x7, 0x0, 0x8}, 0x50) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002340)={0x0}, &(0x7f0000002380)=0xc) r11 = openat$cgroup(r0, &(0x7f0000002400)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000002440)={0x1000000, &(0x7f0000002180), &(0x7f00000021c0), &(0x7f0000002200), {0x3a}, &(0x7f0000002240)=""/164, 0xa4, &(0x7f0000002300)=""/42, &(0x7f00000023c0)=[r10], 0x1, {r11}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000024c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002540), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x60, r13, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) getsockname$unix(r12, &(0x7f0000002680), &(0x7f0000002700)=0x6e) 23.611146438s ago: executing program 32 (id=785): r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xf0, r1, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3cc}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x35c}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x80000000}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x40}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x4e}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x52}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x700000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x39c}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xd, 0x101, 0x3, 0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x4}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x20}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8000000}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x555}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xe, 0x9]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x12000, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}, {@noxattr}, {@cachetag={'cachetag', 0x3d, '/selinux/status\x00'}}], [{@measure}, {@fsname={'fsname', 0x3d, 'wlan0\x00'}}, {@uid_gt={'uid>', r3}}, {@dont_measure}, {@func={'func', 0x3d, 'BPRM_CHECK'}}, {@obj_role={'obj_role', 0x3d, '/-'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@seclabel}, {@fowner_eq={'fowner', 0x3d, r4}}]}}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x4, 0xfc, 0x4, 0x9b4b, 0x20, @dev={0xfe, 0x80, '\x00', 0x32}, @private2, 0x8, 0x700, 0x7, 0x12}}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1020044}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, r5, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x20000002) mkdirat(r0, &(0x7f0000000780)='./file0\x00', 0x4) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x80, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7f}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}]}, 0x80}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)={0x88, r1, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x49, 0xc5, "94715d938282052af88163010150c9c442fa90312526b15137a46ac93aecd76f5c55557207fa6d50459be7c0b39406f91b985352d42f8da947c794ec5f7f539c23a6c16843"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffff7}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x10001}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x4000840) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_INTERFACE(r7, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x20, r1, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x52}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x278c95b8628106db}, 0x4000000) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000b80)) ioctl$SNAPSHOT_FREE(r0, 0x3305) mount$9p_virtio(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40), 0x2090, &(0x7f0000000c80)={'trans=virtio,', {[{@debug={'debug', 0x3d, 0x3}}, {@cache_none}], [{@context={'context', 0x3d, 'system_u'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@appraise}, {@smackfshat={'smackfshat', 0x3d, '}u){$]{c'}}, {@fowner_lt={'fowner<', r4}}, {@audit}, {@audit}]}}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x5c, r8, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x80) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000f80)=0x0) perf_event_open(&(0x7f0000000f00)={0x1, 0x80, 0x4, 0x3, 0xa4, 0x5, 0x0, 0x1, 0x90, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffff8001, 0x0, @perf_bp={&(0x7f0000000ec0)}, 0x10, 0x7, 0x4, 0x4, 0x9, 0x5, 0x7, 0x0, 0x9, 0x0, 0x4}, r9, 0x10, r0, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002100)={r0, 0x0, 0x2d, 0x1000, &(0x7f0000000fc0)="8b80549811e5f70dcdefa518a994a78760d848afc69d6c9f9a137b5fb344722148e4cbde615e245e9d2dd3fd6c", &(0x7f0000001000)=""/4096, 0x7fff, 0x0, 0xbf, 0x40, &(0x7f0000002000)="6aac311b6dc89d0dcb91c9710d21d6e78e1f985563c901848df85be24179beccd465877d6bc2fd29be1c05d8c7e35ed909bbc3b40181fe6b3b1466540ecb80e157192c9ea4aa66729a8c98ee14a8753d7c92965e2ffffe157f2576030afb22590d05e519bc84aae8cc7a683269cb1f2ef394da4bea10b07c55c20a4a1b30a4b234755145c12a0d6152297d3d00035569e5f13bbb423d33111348844ee02e7a31a1e05e4735ea0958f575b9244ac0b00d5a5e3da034b38d042ff28deb73cce3", &(0x7f00000020c0)="826322abfde56d61ac2d8820505d257b93390fcf96d6df4383d4b39336f80ca219d9ce7812b120a3d7fb055cd2ee74ac0d68b714cb1607ef6fbe7f89b290a0d5", 0x7, 0x0, 0x8}, 0x50) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000002340)={0x0}, &(0x7f0000002380)=0xc) r11 = openat$cgroup(r0, &(0x7f0000002400)='syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f0000002440)={0x1000000, &(0x7f0000002180), &(0x7f00000021c0), &(0x7f0000002200), {0x3a}, &(0x7f0000002240)=""/164, 0xa4, &(0x7f0000002300)=""/42, &(0x7f00000023c0)=[r10], 0x1, {r11}}, 0x58) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f00000024c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002540), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r12, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x60, r13, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9c}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) getsockname$unix(r12, &(0x7f0000002680), &(0x7f0000002700)=0x6e) 3.456053061s ago: executing program 1 (id=1045): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xa2) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$BLKTRACESTART(r1, 0x80081270, 0x0) 3.269277202s ago: executing program 1 (id=1052): io_setup(0x7, &(0x7f0000000280)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="e50002000000004071113d00000000008510000002000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r1 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x42, 0x80) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) 3.144073959s ago: executing program 1 (id=1055): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x28}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0xfeffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x7045, &(0x7f0000000100)={0x0, 0x2b13, 0x10100, 0x0, 0x25b, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000300)=0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x11, 0x2007, @fd_index=0x3, 0x7, 0x0, 0x0, 0x1, 0x0, {0x1}}) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x49, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x7330, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_async', 0x410500, 0x1) 2.224306752s ago: executing program 3 (id=1070): accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) socket(0x1e, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x8010, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x10) 2.130983107s ago: executing program 3 (id=1073): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syncfs(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000b80)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="405cf8d098f68efd9f85db1af1ec3626f6dcd5a18d0c7afdae5bd696611d416ace7d9a072780d8723e8ef367e28304387b988acb3406e634dcc7920d967a0279d25f8eb2ff415b7ebf4ac419637553fb9b77f915f9780e874bc2e5e8c25a48f7c0368f23a48a53cd972b6384734e229d8469e533dc64f7078d4375", @ANYRES64=r0, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESDEC=r3, @ANYRESDEC, @ANYRESOCT=r0], 0x200002e6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x26e1, 0x0) syz_open_dev$hidraw(&(0x7f0000000140), 0x4c, 0x141003) syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9o02kYB/AnahAUzsXJ4bAOTi6KoxmsJFFRCNEu4qCgiJgpghAhINihzdDSDKVjl1LI0j9T0wwdjpYWOpfSoUehQ6ejXQpdmuOu7+3t9Q8Inw/8ePK+7zd58gy/8Q1+aZfir263m4mI7tWTf7uvlS88u116XH4dkYm3EdHzx28z/5xkUuK/X72T1ptpPTF+rTO49zTb2ni1f/fdYuNSOv+RnuuT7b5TD8e5m8ot3fjZXy0O1XKf14v17YG11ZfTu/ly+0WjOfM8++RDyi2neiXVr1GL7/El3kclKvExqmfUf6y1df/wVrE19+nRQaEzvPAg5UqnnPO4/b/1jLxp1nvvzd4cfVibXynvXD7KVf7H2wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMWbyi3d+NlfLQ7Vcp/Xi/XtgbXVl9O7+XL7RaM58zz75EPKLad6JdWvUYvv8SXeRyUq8TGqZ9R/rLV1//BWsTX36dFBoTO88CDlSqec87j9v/WMvGnWe+/N3hx9WJtfKe9cPspVrp7THwAAAAAAAAAAAAAAAAAAAICIyBee3S49Lr+OyMTbiGj/3vvvVf9uuu+eSbk76cNm2p8Yv9YZ3HuabW282r/7brHxZ9r/kZ7rk+2+i5+Gk/o7AAD//5Yblcc=") syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f00000002c0)=0x8, 0x0, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x408c4) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r2, 0x0, 0xd, &(0x7f0000000000)='/dev/hidraw#\x00'}, 0x30) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000072292a9923e06680294f0f08eec16e25b60eb86f7d5970248c55861121afd5f751df69e07bea63773e50", @ANYRES16=r7, @ANYBLOB="00032cbd7000fddbdf256a0000000a000600ffffffffffff00000500d200080000000a000600ffffffffffff00000a000600ffffffffffff00000500d200040000000500d20006000000"], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='system.sockprotoname\x00') 2.129420127s ago: executing program 1 (id=1074): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syncfs(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r3, &(0x7f0000000b80)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="405cf8d098f68efd9f85db1af1ec3626f6dcd5a18d0c7afdae5bd696611d416ace7d9a072780d8723e8ef367e28304387b988acb3406e634dcc7920d967a0279d25f8eb2ff415b7ebf4ac419637553fb9b77f915f9780e874bc2e5e8c25a48f7c0368f23a48a53cd972b6384734e229d8469e533dc64f7078d4375", @ANYRES64=r0, @ANYRES32=r2, @ANYRESHEX=r1, @ANYRES64=r0, @ANYRESDEC=r3, @ANYRESDEC, @ANYRESOCT=r0], 0x200002e6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x26e1, 0x0) syz_open_dev$hidraw(&(0x7f0000000140), 0x4c, 0x141003) syz_read_part_table(0x5be, &(0x7f00000005c0)="$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") syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x10c, &(0x7f00000002c0)=0x8, 0x0, 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x408c4) ioctl$SIOCX25CALLACCPTAPPRV(r4, 0x89e8) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000400)="a5d0", 0x1b8a}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r2, 0x0, 0xd, &(0x7f0000000000)='/dev/hidraw#\x00'}, 0x30) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000072292a9923e06680294f0f08eec16e25b60eb86f7d5970248c55861121afd5f751df69e07bea63773e50", @ANYRES16=r7, @ANYBLOB="00032cbd7000fddbdf256a0000000a000600ffffffffffff00000500d200080000000a000600ffffffffffff00000a000600ffffffffffff00000500d200040000000500d20006000000"], 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='system.sockprotoname\x00') 1.725961631s ago: executing program 0 (id=1081): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="94010000100001002bbd700000000000fc0100000000000000000000000000000a0101000000000000000000000000ecdf00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000084000000000000000000000000000000000000000000000100000000000000000000000000000000000000a0004002c00000000000000580002006362632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fad3f10cd3a506627800000000074f4c001400686d61632873686132353629"], 0x194}}, 0x4050) syz_io_uring_setup(0x3bbc, &(0x7f0000000580)={0x0, 0x5ed0, 0x2, 0x2, 0x243}, &(0x7f0000000300), &(0x7f0000000780)) 1.725418571s ago: executing program 5 (id=1082): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x4}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x780, 0x10, 0x0, 0x9, {{0x1d, 0x4, 0x0, 0x10, 0x74, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast2, @broadcast, {[@noop, @cipso={0x86, 0x26, 0x4, [{0x2, 0x8, "be031fe07402"}, {0x7, 0x11, "d5e56cf01559625cdc658232f87096"}, {0x5, 0x7, "89e81f31f1"}]}, @timestamp_prespec={0x44, 0x1c, 0xc4, 0x3, 0x1, [{@local, 0x6}, {@local, 0x9}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x1b, 0x4e, [@dev={0xac, 0x14, 0x14, 0x19}, @broadcast, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) 1.694269372s ago: executing program 2 (id=1084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000300)={&(0x7f0000000000)="47a703", 0x0, 0x0, 0x0, 0x6, r1}, 0x38) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e22, @loopback}}, 0x0, 0x0, 0x1, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) r2 = socket(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd700002dcdf2507000000", @ANYRES32=r4, @ANYBLOB="2e164c070a00020001"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000004a000100000000000000ee494cbe6fcc6c9a4effb83a314aa6da55971e55210100027b099db6519b0a7a64e6d9770e87c82c7ffc305479dc6abdaf7727056a6dbd6a000000000000000000008e08c50000a9d18d7959643828713e354d41067553dd6f0a5ed5e70f5172b42c058c9bc0d98fcea3970c0545eab5c824823e0000", @ANYRES8=r2, @ANYRES32=r5, @ANYRES32=r4], 0x30}}, 0x0) 1.635523386s ago: executing program 2 (id=1085): perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6b0bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x65bb1d1b44201a3, @perf_bp={0x0, 0x8}, 0x100d00, 0x32, 0x43a1bd76, 0x7, 0x2000000000006, 0xffffffff, 0x2, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c65) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x82) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000002, 0x11, r1, 0x0) read(r1, &(0x7f0000001400)=""/4096, 0x1000) r2 = syz_io_uring_setup(0x49a9, &(0x7f00000007c0)={0x0, 0xad2a, 0x10000, 0x0, 0x33a}, &(0x7f0000000840), &(0x7f0000000880)) syz_io_uring_setup(0x62ea, &(0x7f00000008c0)={0x0, 0xa16b, 0x20, 0x3, 0x129, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000980)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24008818, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044) socketpair(0x27, 0x1, 0xfffffffe, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0xad, 0x29, 0x1, 0xfc, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x1, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0xa000, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x7}, 0x24002040) 1.56943153s ago: executing program 2 (id=1086): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0xff, 0x4b4, &(0x7f0000000c80)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x50, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xe8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}]}}]}, 0x50}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x8c, r7, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43da}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004010}, 0x80) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, 0x0, &(0x7f0000000300)) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r9, &(0x7f0000000540)="86271bba8dc420f5807fb84e60d09b01", 0x10, 0x48800, &(0x7f0000000380)={0x11, 0xf5, r10, 0x1, 0x5, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc, 0xd}, {0x5, 0x8}, {0xb, 0x1}}}, 0x24}}, 0x20040000) 1.424110448s ago: executing program 0 (id=1087): socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1ff, 0x80000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x0, 0x5002) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(0xffffffffffffffff, r2, 0x0) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) 1.3867956s ago: executing program 2 (id=1088): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0xff, 0x4b4, &(0x7f0000000c80)="$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") perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="020000000400000008"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x50, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xe8}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3}]}}]}, 0x50}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r4) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)={0x8c, r7, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x43da}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004010}, 0x80) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, 0x0, &(0x7f0000000300)) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendto$packet(r9, &(0x7f0000000540)="86271bba8dc420f5807fb84e60d09b01", 0x10, 0x48800, &(0x7f0000000380)={0x11, 0xf5, r10, 0x1, 0x5, 0x6, @broadcast}, 0x14) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xc, 0xd}, {0x5, 0x8}, {0xb, 0x1}}}, 0x24}}, 0x20040000) 1.331538914s ago: executing program 0 (id=1089): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) unshare(0x22020600) r4 = pidfd_getfd(r3, r3, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000140)='sync\x00', 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) statfs(&(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000780)=""/171) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000002780)={0x1ff, 0x7f, 0x0, 0x1}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000380)={0x0, 0x1, [@broadcast]}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r7 = socket(0x2, 0x80805, 0x0) setsockopt(r7, 0x84, 0x82, &(0x7f00000031c0)="1a00000002000000b1c30cdd883bf449ee661c9bdc8c10f32e2d67444b61cab2ca46973eabe01bdc09c896991684aa729712a6ca31e755daf253055a0f9063971057c172cacb9221cc65e6d83a6d7bef8d848906eda01e98988f8d6ab6981d9fd15b8a2226784f8374a19a1ff61b3ddb8a262d78c0b43aefdf6442e566aab1e8af5bacc6c7f80928df2b4af1eccc0fca851b64156b1cd933acc1b25fe78c439657883c57c620b9d3609442ddad2109c2fd8ad79403", 0xb5) setsockopt$inet6_tcp_int(r7, 0x6, 0x3, &(0x7f0000000180)=0xfffffffd, 0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x2, [{0x6, 0x3}, {0x7, 0xffffffff}, {0xa, 0x5}, {0x0, 0x3}]}]}}, &(0x7f0000000600)=""/4090, 0x46, 0xffa, 0xa, 0x1}, 0x28) getsockopt$inet6_tcp_buf(r8, 0x29, 0x3, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffd96) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @empty, @local}, &(0x7f0000000380)=0xc) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='syscall\x00') pread64(r10, &(0x7f0000002180)=""/4105, 0x137, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x2, &(0x7f00000016c0)=ANY=[@ANYBLOB="00000000bbb37932e4f1bfbefa2a185d518424e73122e578cf95d30946be6e88b15e401353406cad8fa0516644ac58cab14723f6e97fc5131dfd0b28a82c441dd33b8544b9295d212e000000296a5d52200380f5514c1588e654aa4ddb63b3bc319f291c6e6faafae8984257c9b2a2dc129b9dff77264ac7399da20dea4d1cc5f964d2a4956cd8b61856359223c121300200000000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000280)='syzkaller\x00', 0x1, 0xc1, &(0x7f0000000440)=""/193, 0x81e00, 0x21, '\x00', r9, 0x25, r4, 0x8, &(0x7f00000003c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x3, 0x86c, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r10], 0x0, 0x10, 0x2}, 0x94) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 1.273557947s ago: executing program 3 (id=1090): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000001080)) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6}, 0x8) 1.231864249s ago: executing program 1 (id=1091): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.178727722s ago: executing program 5 (id=1092): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/2274], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000}, 0x50) 1.177311192s ago: executing program 2 (id=1093): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "00000200000000000000000000050081"}}}]}, 0x48}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0x100050, 0x10000, 0x80, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f00000002c0)={0x7, 0x7, 0xf78, 0xff, 0x1, 0x3}) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="52f70143617e04ecf20bd1e639b0e7f28a98d7de823349391423ae3de58735091ec791c576304840ad9d5dd927eb2782360c4526824f0fe2bd527cfbbca7ebc09754b8d2e2bb27853d7dec2294ee7d65462d7343d94d0cd7ebaf80ae4ece09a2eb976355ed9d615b53b7ae7c36e3eab40c01ce3279a8691dbefa", 0x7a}, {&(0x7f0000000080)="78f3e8600f9cc07f9fbdc6", 0xb}, {&(0x7f0000000200)="6f3020d2caba5f4d1e2ccbd4cda6c8df511ec68c27d6c8afe9532554cda6e1232dc12c19d5d8023a3702bf80a68809a55f1017b9bd9e5374946777b507156cd8aee235acf3e76234a5d313aad49f048c189c1052ac9a3a3a5ac46e8649b9f6fd60961529baf3b62ceea6e12f46afd30e9fa85c0a2c356e5261325df3ad69b9e8fbcba44ec8500d86ef0f002dc931b347db8d19bc6f0d00c92809c770d05fe02eef68ec3926d8422b8e11ab7e4102489b854791184637345d8d11e9300f4cd7", 0xbf}, {&(0x7f00000002c0)="9c9cd9285dff207c55cc675a61404f8d37e398d723405376271e973490147abbead036653f12ecd806a986539b7b968a96545aa9f6f1c38d3ece14be35a25008d4094d21426e722bdca4f426f8cebcef9b229a33076b48133d91d72e0ebc6cea8fd9c99165c1a8d3e1141b9b75dc284870e7ee051ca4b424130c776bf69c25", 0x7f}], 0x4, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_retopts={{0x70, 0x0, 0x7, {[@generic={0x83, 0x5, "700cc5"}, @timestamp_prespec={0x44, 0x2c, 0xd2, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x27}, 0x9}, {@multicast1, 0x200}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b26}, {@remote, 0x2c000000}]}, @ssrr={0x89, 0xb, 0x11, [@private=0xa010100, @loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x5f, 0x3, 0x0, [{@rand_addr=0x64010101, 0x2}, {@private=0xa010100, 0x9}, {@broadcast, 0xba}]}, @generic={0x89, 0x2}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf6}}, @ip_retopts={{0x64, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xaf, 0x3, 0x7, [{@remote, 0x1}, {@loopback, 0x5}, {@multicast2, 0x7}]}, @timestamp={0x44, 0x4, 0x6, 0x0, 0xf}, @ssrr={0x89, 0x1f, 0xac, [@remote, @private=0xa010100, @multicast2, @local, @broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x2b}]}, @ssrr={0x89, 0x13, 0xc1, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x30}, @remote, @empty]}]}}}, @ip_retopts={{0x84, 0x0, 0x7, {[@generic={0x82, 0x7, "32389c25c8"}, @timestamp={0x44, 0x10, 0x6, 0x0, 0x4, [0x7f, 0x0, 0x0]}, @end, @generic={0x44, 0x7, "8b970b5ca4"}, @rr={0x7, 0xf, 0x8f, [@rand_addr=0x64010100, @local, @dev={0xac, 0x14, 0x14, 0x44}]}, @rr={0x7, 0xf, 0x1e, [@broadcast, @loopback, @empty]}, @rr={0x7, 0x2b, 0xf0, [@multicast1, @loopback, @empty, @broadcast, @rand_addr=0x64010102, @multicast2, @rand_addr=0x64010100, @private=0xa010101, @private=0xa010100, @loopback]}, @ssrr={0x89, 0xb, 0x11, [@dev={0xac, 0x14, 0x14, 0x39}, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}, @ip_tos_u8={{0x11}}], 0x210}, 0x844) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001400010004000000000000002de7"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) r7 = socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8822c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0xfffd, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=@base={0xa, 0x5, 0xb7, 0x7b}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000ff851000000600000018100000", @ANYRES32=r8, @ANYBLOB="00000000000000006600000000000000180000000003000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) setsockopt$MRT6_DEL_MIF(r7, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000140), 0x4) 1.169858883s ago: executing program 0 (id=1094): accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r3, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) socket(0x1e, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x8010, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r4, r5, 0x4, r1}, 0x10) ftruncate(r0, 0x8800000) close(0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) execveat(r0, 0x0, 0x0, 0x0, 0x400) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(0xffffffffffffffff, r0, 0x0, 0x578410ed) 1.111342636s ago: executing program 3 (id=1095): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) listen(r0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="57b0ff000000000095d3e4da1fbcf9ecc910ecd969d480a7d214616edcc3e57cf20df49a01128ab5cd4cf5a25587ad5c5dfa9dc354e7d76ff40ae97593c942c33ecedb5898396f6201009e5759a045632681b98984ef27acbb3e1cdbd4434a084ac415deb62193c4811ca85eb3e57d73779269f104b760b4392c89f106206d633d3dc6d684fa917e1a36e8dff6acdc0fd6d065d57ffd47ee85709cc30dc5fee18152fec81054b00aa2c6da3656cf8b3f48a6731ca1c27811376751109bea3dac06229ddd3a4763523b2f98a484c2bf4249c3b4c9d6e5db"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400060404009b6a4b60284bfbf467b2e54af2bc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8a", 0x89}], 0x1}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='oom_adj\x00') fchdir(r5) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000000)='./file0\x00', 0x219) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80a61, 0x0) write$tun(r7, &(0x7f0000000180)=ANY=[], 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000180)=0x8, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}, 0x6}, 0x1c) fcntl$setstatus(r7, 0x4, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'geneve0\x00', &(0x7f0000000400)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) socket(0x29, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0xf0, 0x4430d6ea2d2b30be}, 0x2}, 0x18) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x20, 0x1, 0x7, 0x10, 0x0, 0x100000006, 0xb049b, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x4, @perf_bp={&(0x7f0000000280), 0x6}, 0xa22b, 0x7ffffd, 0x10bc, 0x4, 0xa, 0x6, 0x3, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x4000000004, 0xffffffffffffffff, 0x8) 1.110695486s ago: executing program 5 (id=1096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000400100004112200a4e2000001"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x8910, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000008c0)={'syztnl2\x00', r2, 0x7, 0x700, 0xfffffff0, 0x6, {{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101}}}}) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0xfffffffffffffe21) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r0}, 0x38) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x3, 0x6}], 0x1, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="950000000000000800000000080000000000000002000000850000000e000000950000003bc201ebf8e0230500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x6}, 0x94) 1.03976695s ago: executing program 2 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x28000600) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r4, 0x0) sendto$packet(r3, &(0x7f0000000180)="d7c3961822fd39f009b1", 0xa, 0x40000, &(0x7f00000020c0)={0x11, 0x15, 0x0, 0x1, 0x3}, 0x14) 989.245953ms ago: executing program 5 (id=1098): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x31000000, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) 974.184694ms ago: executing program 3 (id=1099): r0 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0) fcntl$notify(r0, 0x402, 0x8) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x7, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000780)="f4000900062b3b25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x78) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 942.391646ms ago: executing program 5 (id=1100): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x24}}, 0x0) 819.034733ms ago: executing program 5 (id=1101): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4810}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x8c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x8, 0x896, 0x4, 0xb, 0x3}, &(0x7f0000000280)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x9, 0x3, 0x1f8, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffff00, 'bridge_slave_0\x00', 'dvmrp0\x00', {0xff}, {}, 0x33, 0x7, 0x11}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @empty, 0x0, 0x0, 'netdevsim0\x00', 'geneve0\x00', {}, {0xff}, 0xc, 0x1, 0x9}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x1, 0x1, 0x3, 0x0, 0x2, 0x3], 0x1, 0xc865465fbf172598}, {0x1, [0x2, 0x0, 0x0, 0x0, 0x2, 0x5], 0x0, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000000706010800000000000000000100000305000100070000000500010007000000080006c0"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r7) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000a100}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r6}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x8004080) write(r7, &(0x7f00000001c0)="f1", 0x1) sendfile(r7, r3, 0x0, 0x40001) sendfile(r7, r4, 0x0, 0x7ffff000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newlink={0xbc, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x261}, [@IFLA_VFINFO_LIST={0x94, 0x16, 0x0, 0x1, [{0x90, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}}, @IFLA_VF_RATE={0x10, 0x6, {0x2b30, 0xfff, 0x7}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x1, 0x10001}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffffc, 0x7}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @multicast}}, @IFLA_VF_TRUST={0xc, 0x9, {0x37da8359, 0x1}}]}]}, @IFLA_CARRIER={0x5, 0x21, 0x3}]}, 0xbc}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00\x00\b\x00'}}}]}, 0x48}}, 0x0) 656.696532ms ago: executing program 3 (id=1102): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00'}) socket(0x1e, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000200)=0x8010, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, r4, 0x4, r2}, 0x10) ftruncate(r1, 0x8800000) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) execveat(r1, 0x0, 0x0, 0x0, 0x400) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r6, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) sendfile(r5, r1, 0x0, 0x578410ed) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000100)=0x21a, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x3, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x5f, 0x0]}}, 0x0, 0x28, 0x0, 0x1}, 0x28) 362.511029ms ago: executing program 1 (id=1103): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mprotect(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @mcast2, 0x4}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x780, 0x10, 0x0, 0x9, {{0x1d, 0x4, 0x0, 0x10, 0x74, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast2, @broadcast, {[@noop, @cipso={0x86, 0x26, 0x4, [{0x2, 0x8, "be031fe07402"}, {0x7, 0x11, "d5e56cf01559625cdc658232f87096"}, {0x5, 0x7, "89e81f31f1"}]}, @timestamp_prespec={0x44, 0x1c, 0xc4, 0x3, 0x1, [{@local, 0x6}, {@local, 0x9}, {@private=0xa010101, 0x5}]}, @lsrr={0x83, 0x1b, 0x4e, [@dev={0xac, 0x14, 0x14, 0x19}, @broadcast, @loopback, @remote, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) 110.073044ms ago: executing program 0 (id=1104): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x213a, 0x13580, 0x0, 0x387}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r1, 0x0, 0x0}) io_uring_enter(r1, 0x14, 0xb9c, 0x2b, 0x0, 0x18) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) unlink(&(0x7f0000000000)='./file1\x00') r4 = socket$inet(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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") sendmsg(r4, &(0x7f00000002c0)={&(0x7f0000000340)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000500)="521c6c735b0cce908ca287c060ecb348494b285dbf407ae09e83ffdad9244be043cfea7fd3dfb7f5be0d585886bbeacc8e4efad8cae802d868d848dd368a1e9c2ae3452fb8597231", 0x48}, {&(0x7f0000000580)="7487e3e4c63dc5eb032c62a795637d8d7d80a1af561107c4d5fb2ccdfda7e560ba897e6f9ea658e6c0024b4920317c8e0fdbb558a666bd243febfb5c28c63744ef80b5ea88f229c6935cb8e0da8912d3011bf381e4132e1925a0ddf3560dcd8688787a27d01794", 0x67}], 0x2, &(0x7f0000000c00)=[{0x48, 0x11, 0x1, "5aff69c00793c07b6a46a4ccb412ed57af6eb90a3c1e0a439655511e82655e152f57cd7222630c3d1a7454724a47e7deb7ebc50d54"}], 0x48}, 0x24004980) r5 = socket$nl_generic(0x10, 0x3, 0x10) eventfd(0x2) pselect6(0x40, &(0x7f0000000740)={0x8, 0x100000000, 0x8, 0xb2b6, 0x7fff, 0x9, 0xf676, 0x5}, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1709a70000000000000101000000080009003f00000014001f00000000000000000000100000000000011400200000000000000000000000ffff000000000500070000000000060002000100000008000a"], 0x5c}}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') 0s ago: executing program 0 (id=1105): accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3, 0x14}, &(0x7f0000001fee)='R\t\xff\x7fst\xe3c*sgrVid:\x00e', 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0xc64}, 0x10014, 0x0, 0x800000, 0x0, 0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r2, 0x25, 0x2, @val=@perf_event={0x11}}, 0x18) socket(0x1e, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x8010, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r1}, 0x10) ftruncate(r0, 0x8800000) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r5) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendfile(r5, r0, 0x0, 0x578410ed) kernel console output (not intermixed with test programs): 9][ T5642] netlink: 132 bytes leftover after parsing attributes in process `syz.2.614'. [ 90.941451][ T5645] loop4: detected capacity change from 0 to 512 [ 90.948149][ T5645] EXT4-fs: inline encryption not supported [ 90.989233][ T5645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.008189][ T5645] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.190584][ T3644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.219770][ T5662] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.514027][ T5670] loop0: detected capacity change from 0 to 2048 [ 91.521104][ T5670] ext4: Unknown parameter 'smackfsroot' [ 91.547106][ T5670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5670 comm=syz.0.623 [ 91.562532][ T5670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=5670 comm=syz.0.623 [ 91.863718][ T5676] netlink: 'syz.3.625': attribute type 1 has an invalid length. [ 91.871647][ T5676] netlink: 'syz.3.625': attribute type 2 has an invalid length. [ 91.880043][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.625'. [ 91.923718][ T5678] loop3: detected capacity change from 0 to 512 [ 91.933490][ T5678] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.961149][ T5678] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 91.981537][ T5682] siw: device registration error -23 [ 91.990178][ T5678] EXT4-fs (loop3): Remounting filesystem read-only [ 91.998722][ T5678] EXT4-fs (loop3): 1 truncate cleaned up [ 92.000554][ T5682] netlink: 52 bytes leftover after parsing attributes in process `syz.0.627'. [ 92.005691][ T5678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.027889][ T5678] syz.3.626 (5678) used greatest stack depth: 9152 bytes left [ 92.056973][ T5686] FAULT_INJECTION: forcing a failure. [ 92.056973][ T5686] name failslab, interval 1, probability 0, space 0, times 0 [ 92.069851][ T5686] CPU: 1 UID: 0 PID: 5686 Comm: syz.0.629 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.069891][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.069919][ T5686] Call Trace: [ 92.069928][ T5686] [ 92.069938][ T5686] __dump_stack+0x1d/0x30 [ 92.069992][ T5686] dump_stack_lvl+0x95/0xd0 [ 92.070017][ T5686] dump_stack+0x15/0x1b [ 92.070044][ T5686] should_fail_ex+0x263/0x280 [ 92.070086][ T5686] should_failslab+0x8c/0xb0 [ 92.070117][ T5686] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 92.070166][ T5686] ? __alloc_skb+0x2f0/0x4b0 [ 92.070261][ T5686] __alloc_skb+0x2f0/0x4b0 [ 92.070290][ T5686] ? __alloc_skb+0x219/0x4b0 [ 92.070330][ T5686] netlink_ack+0xfd/0x500 [ 92.070477][ T5686] netlink_rcv_skb+0x192/0x220 [ 92.070520][ T5686] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.070566][ T5686] rtnetlink_rcv+0x1c/0x30 [ 92.070627][ T5686] netlink_unicast+0x5c0/0x690 [ 92.070667][ T5686] netlink_sendmsg+0x5c8/0x6f0 [ 92.070696][ T5686] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.070797][ T5686] ____sys_sendmsg+0x5af/0x600 [ 92.070826][ T5686] ___sys_sendmsg+0x195/0x1e0 [ 92.070857][ T5686] __x64_sys_sendmsg+0xd4/0x160 [ 92.070891][ T5686] x64_sys_call+0x17ba/0x3000 [ 92.070932][ T5686] do_syscall_64+0xc0/0x2a0 [ 92.070992][ T5686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.071070][ T5686] RIP: 0033:0x7fc8400daeb9 [ 92.071091][ T5686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.071117][ T5686] RSP: 002b:00007fc83eb37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.071142][ T5686] RAX: ffffffffffffffda RBX: 00007fc840355fa0 RCX: 00007fc8400daeb9 [ 92.071190][ T5686] RDX: 00000000200000a0 RSI: 0000200000000000 RDI: 0000000000000003 [ 92.071284][ T5686] RBP: 00007fc83eb37090 R08: 0000000000000000 R09: 0000000000000000 [ 92.071297][ T5686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.071312][ T5686] R13: 00007fc840356038 R14: 00007fc840355fa0 R15: 00007fff11288138 [ 92.071338][ T5686] [ 92.330688][ T5684] lo speed is unknown, defaulting to 1000 [ 92.377033][ T5694] siw: device registration error -23 [ 92.383394][ T5694] FAULT_INJECTION: forcing a failure. [ 92.383394][ T5694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 92.383615][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.396558][ T5694] CPU: 1 UID: 0 PID: 5694 Comm: syz.4.632 Not tainted syzkaller #0 PREEMPT(voluntary) [ 92.396639][ T5694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 92.396692][ T5694] Call Trace: [ 92.396727][ T5694] [ 92.396769][ T5694] __dump_stack+0x1d/0x30 [ 92.396855][ T5694] dump_stack_lvl+0x95/0xd0 [ 92.396939][ T5694] dump_stack+0x15/0x1b [ 92.397085][ T5694] should_fail_ex+0x263/0x280 [ 92.397211][ T5694] should_fail+0xb/0x20 [ 92.397306][ T5694] should_fail_usercopy+0x1a/0x20 [ 92.397413][ T5694] _copy_from_iter+0xcf/0xea0 [ 92.397492][ T5694] ? __alloc_skb+0x397/0x4b0 [ 92.397589][ T5694] ? __alloc_skb+0x219/0x4b0 [ 92.397716][ T5694] netlink_sendmsg+0x4ae/0x6f0 [ 92.397793][ T5694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.397855][ T5694] ____sys_sendmsg+0x5af/0x600 [ 92.397982][ T5694] ___sys_sendmsg+0x195/0x1e0 [ 92.398102][ T5694] __x64_sys_sendmsg+0xd4/0x160 [ 92.398194][ T5694] x64_sys_call+0x17ba/0x3000 [ 92.398348][ T5694] do_syscall_64+0xc0/0x2a0 [ 92.398481][ T5694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.398697][ T5694] RIP: 0033:0x7f103823aeb9 [ 92.398751][ T5694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.398815][ T5694] RSP: 002b:00007f1036c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.398918][ T5694] RAX: ffffffffffffffda RBX: 00007f10384b5fa0 RCX: 00007f103823aeb9 [ 92.398965][ T5694] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 92.399018][ T5694] RBP: 00007f1036c97090 R08: 0000000000000000 R09: 0000000000000000 [ 92.399060][ T5694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.399103][ T5694] R13: 00007f10384b6038 R14: 00007f10384b5fa0 R15: 00007ffe4c3c6a28 [ 92.399172][ T5694] [ 92.427455][ T5694] netlink: 52 bytes leftover after parsing attributes in process `syz.4.632'. [ 92.565288][ T5695] netlink: 'syz.1.631': attribute type 10 has an invalid length. [ 92.643368][ T29] kauditd_printk_skb: 675 callbacks suppressed [ 92.643389][ T29] audit: type=1400 audit(1769830056.082:1681): avc: denied { setopt } for pid=5705 comm="syz.3.633" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.671146][ T5706] Dead loop on virtual device ip6_vti0, fix it urgently! [ 92.682150][ T29] audit: type=1400 audit(1769830056.112:1682): avc: denied { write } for pid=5705 comm="syz.3.633" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.766220][ T29] audit: type=1400 audit(1769830056.142:1683): avc: denied { read } for pid=5705 comm="syz.3.633" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.789613][ T29] audit: type=1400 audit(1769830056.142:1684): avc: denied { open } for pid=5705 comm="syz.3.633" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.813310][ T29] audit: type=1400 audit(1769830056.142:1685): avc: denied { map } for pid=5705 comm="syz.3.633" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.861022][ T5708] sctp: [Deprecated]: syz.4.635 (pid 5708) Use of int in max_burst socket option deprecated. [ 92.861022][ T5708] Use struct sctp_assoc_value instead [ 92.996607][ T29] audit: type=1400 audit(1769830056.432:1686): avc: denied { getopt } for pid=5705 comm="syz.3.633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 93.016225][ T29] audit: type=1400 audit(1769830056.432:1687): avc: denied { execute } for pid=5705 comm="syz.3.633" name="file1" dev="tmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 93.133022][ T29] audit: type=1400 audit(1769830056.572:1688): avc: denied { connect } for pid=5718 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.154172][ T5724] ucma_write: process 290 (syz.0.639) changed security contexts after opening file descriptor, this is not allowed. [ 93.187143][ T29] audit: type=1400 audit(1769830056.592:1689): avc: denied { setopt } for pid=5718 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 93.206619][ T29] audit: type=1400 audit(1769830056.592:1690): avc: denied { write } for pid=5718 comm="syz.0.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.239397][ T5727] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=5727 comm=syz.4.642 [ 93.314439][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 93.323443][ T5734] C: renamed from team_slave_0 [ 93.331168][ T5734] netlink: 'syz.1.644': attribute type 3 has an invalid length. [ 93.339078][ T5734] netlink: 152 bytes leftover after parsing attributes in process `syz.1.644'. [ 93.348211][ T5734] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 93.370804][ T5738] FAULT_INJECTION: forcing a failure. [ 93.370804][ T5738] name failslab, interval 1, probability 0, space 0, times 0 [ 93.383669][ T5738] CPU: 1 UID: 0 PID: 5738 Comm: syz.4.645 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.383705][ T5738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.383721][ T5738] Call Trace: [ 93.383728][ T5738] [ 93.383798][ T5738] __dump_stack+0x1d/0x30 [ 93.383826][ T5738] dump_stack_lvl+0x95/0xd0 [ 93.383847][ T5738] dump_stack+0x15/0x1b [ 93.383882][ T5738] should_fail_ex+0x263/0x280 [ 93.383924][ T5738] should_failslab+0x8c/0xb0 [ 93.383955][ T5738] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 93.383983][ T5738] ? __d_alloc+0x37/0x340 [ 93.384024][ T5738] __d_alloc+0x37/0x340 [ 93.384057][ T5738] ? default_pointer+0xf2/0x5e0 [ 93.384091][ T5738] d_alloc+0x2e/0x100 [ 93.384167][ T5738] lookup_one_qstr_excl+0x99/0x250 [ 93.384205][ T5738] start_dirop+0x3e/0x70 [ 93.384239][ T5738] simple_start_creating+0xa2/0xd0 [ 93.384268][ T5738] debugfs_start_creating+0xda/0x150 [ 93.384329][ T5738] __debugfs_create_file+0x70/0x2b0 [ 93.384364][ T5738] debugfs_create_file_full+0x3f/0x60 [ 93.384400][ T5738] ? __pfx_batadv_meshif_init_early+0x10/0x10 [ 93.384498][ T5738] ref_tracker_dir_debugfs+0x10e/0x220 [ 93.384635][ T5738] alloc_netdev_mqs+0x1a7/0xa40 [ 93.384660][ T5738] rtnl_create_link+0x239/0x720 [ 93.384705][ T5738] rtnl_newlink_create+0x174/0x650 [ 93.384742][ T5738] ? security_capable+0x7b/0x90 [ 93.384833][ T5738] ? netlink_ns_capable+0x86/0xa0 [ 93.384873][ T5738] rtnl_newlink+0xf5b/0x1370 [ 93.384905][ T5738] ? __rcu_read_unlock+0x4e/0x70 [ 93.385010][ T5738] ? skb_network_protocol+0x329/0x420 [ 93.385049][ T5738] ? __rcu_read_unlock+0x4e/0x70 [ 93.385162][ T5738] ? avc_has_perm_noaudit+0xab/0x130 [ 93.385252][ T5738] ? cred_has_capability+0x224/0x290 [ 93.385373][ T5738] ? selinux_capable+0x31/0x40 [ 93.385403][ T5738] ? security_capable+0x7b/0x90 [ 93.385441][ T5738] ? ns_capable+0x7c/0xb0 [ 93.385475][ T5738] ? __pfx_rtnl_newlink+0x10/0x10 [ 93.385570][ T5738] rtnetlink_rcv_msg+0x64b/0x720 [ 93.385598][ T5738] netlink_rcv_skb+0x123/0x220 [ 93.385655][ T5738] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 93.385689][ T5738] rtnetlink_rcv+0x1c/0x30 [ 93.385772][ T5738] netlink_unicast+0x5c0/0x690 [ 93.385808][ T5738] netlink_sendmsg+0x5c8/0x6f0 [ 93.385836][ T5738] ? __pfx_netlink_sendmsg+0x10/0x10 [ 93.385862][ T5738] ____sys_sendmsg+0x5af/0x600 [ 93.385892][ T5738] ___sys_sendmsg+0x195/0x1e0 [ 93.386018][ T5738] __x64_sys_sendmsg+0xd4/0x160 [ 93.386047][ T5738] x64_sys_call+0x17ba/0x3000 [ 93.386078][ T5738] do_syscall_64+0xc0/0x2a0 [ 93.386212][ T5738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.386287][ T5738] RIP: 0033:0x7f103823aeb9 [ 93.386312][ T5738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.386357][ T5738] RSP: 002b:00007f1036c97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.386394][ T5738] RAX: ffffffffffffffda RBX: 00007f10384b5fa0 RCX: 00007f103823aeb9 [ 93.386414][ T5738] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 93.386437][ T5738] RBP: 00007f1036c97090 R08: 0000000000000000 R09: 0000000000000000 [ 93.386491][ T5738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.386508][ T5738] R13: 00007f10384b6038 R14: 00007f10384b5fa0 R15: 00007ffe4c3c6a28 [ 93.386534][ T5738] [ 93.757177][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 93.767849][ T5740] C: renamed from team_slave_0 [ 93.774539][ T5740] netlink: 'syz.2.646': attribute type 3 has an invalid length. [ 93.782255][ T5740] netlink: 152 bytes leftover after parsing attributes in process `syz.2.646'. [ 93.791295][ T5740] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 94.041732][ T5757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.652'. [ 94.051922][ T5757] @0Ù: renamed from dummy0 (while UP) [ 94.093060][ T5760] siw: device registration error -23 [ 94.132637][ T5760] netlink: 52 bytes leftover after parsing attributes in process `syz.3.653'. [ 94.145519][ T1037] usb 1-1: enqueue for inactive port 0 [ 94.157431][ T1037] usb 1-1: enqueue for inactive port 0 [ 94.236049][ T1037] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 94.433794][ T5774] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 94.646715][ T5783] netlink: 16 bytes leftover after parsing attributes in process `syz.4.661'. [ 94.877227][ T5787] netlink: 'syz.2.663': attribute type 1 has an invalid length. [ 94.885384][ T5787] netlink: 'syz.2.663': attribute type 2 has an invalid length. [ 94.893702][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.663'. [ 94.918345][ T5787] lo speed is unknown, defaulting to 1000 [ 94.948255][ T5746] loop0: detected capacity change from 0 to 8192 [ 94.962901][ T5746] vfat: Unknown parameter 'cpuset.effective_cpus' [ 95.202087][ T5798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.666'. [ 95.213548][ T5798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 95.874212][ T5802] loop4: detected capacity change from 0 to 2048 [ 95.898835][ T5802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.929253][ T3644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.975404][ T5818] FAULT_INJECTION: forcing a failure. [ 95.975404][ T5818] name failslab, interval 1, probability 0, space 0, times 0 [ 95.988252][ T5818] CPU: 1 UID: 0 PID: 5818 Comm: syz.1.673 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.988288][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.988305][ T5818] Call Trace: [ 95.988314][ T5818] [ 95.988325][ T5818] __dump_stack+0x1d/0x30 [ 95.988356][ T5818] dump_stack_lvl+0x95/0xd0 [ 95.988399][ T5818] dump_stack+0x15/0x1b [ 95.988461][ T5818] should_fail_ex+0x263/0x280 [ 95.988585][ T5818] ? __pfx_sock_alloc_inode+0x10/0x10 [ 95.988619][ T5818] should_failslab+0x8c/0xb0 [ 95.988651][ T5818] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 95.988715][ T5818] ? sock_alloc_inode+0x34/0xa0 [ 95.988744][ T5818] ? __pfx_sock_alloc_inode+0x10/0x10 [ 95.988836][ T5818] sock_alloc_inode+0x34/0xa0 [ 95.988870][ T5818] alloc_inode+0x40/0x170 [ 95.988897][ T5818] __sock_create+0x120/0x580 [ 95.988929][ T5818] __sys_socketpair+0x1bb/0x420 [ 95.988967][ T5818] __x64_sys_socketpair+0x52/0x60 [ 95.989004][ T5818] x64_sys_call+0x2df3/0x3000 [ 95.989084][ T5818] do_syscall_64+0xc0/0x2a0 [ 95.989192][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.989264][ T5818] RIP: 0033:0x7f691b40c77a [ 95.989286][ T5818] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.989312][ T5818] RSP: 002b:00007f6919e66f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 95.989338][ T5818] RAX: ffffffffffffffda RBX: 00007f691b685f00 RCX: 00007f691b40c77a [ 95.989459][ T5818] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 95.989476][ T5818] RBP: 00007f6919e67090 R08: 0000000000000000 R09: 0000000000000000 [ 95.989493][ T5818] R10: 00007f6919e66f88 R11: 0000000000000246 R12: 0000000000000001 [ 95.989511][ T5818] R13: 00007f691b686038 R14: 00007f691b685fa0 R15: 00007ffe69f1eb98 [ 95.989537][ T5818] [ 95.989630][ T5818] socket: no more sockets [ 96.225776][ T5824] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 96.332151][ T5832] lo speed is unknown, defaulting to 1000 [ 96.375829][ T5835] SELinux: Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped). [ 96.853115][ T5848] FAULT_INJECTION: forcing a failure. [ 96.853115][ T5848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.866365][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz.0.683 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.866393][ T5848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.866444][ T5848] Call Trace: [ 96.866454][ T5848] [ 96.866464][ T5848] __dump_stack+0x1d/0x30 [ 96.866527][ T5848] dump_stack_lvl+0x95/0xd0 [ 96.866554][ T5848] dump_stack+0x15/0x1b [ 96.866575][ T5848] should_fail_ex+0x263/0x280 [ 96.866609][ T5848] should_fail+0xb/0x20 [ 96.866637][ T5848] should_fail_usercopy+0x1a/0x20 [ 96.866705][ T5848] _copy_from_user+0x1c/0xb0 [ 96.866784][ T5848] map_update_elem+0x2f3/0x580 [ 96.866826][ T5848] __sys_bpf+0x57b/0x7b0 [ 96.866996][ T5848] __x64_sys_bpf+0x41/0x50 [ 96.867160][ T5848] x64_sys_call+0x28e1/0x3000 [ 96.867189][ T5848] do_syscall_64+0xc0/0x2a0 [ 96.867274][ T5848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.867297][ T5848] RIP: 0033:0x7fc8400daeb9 [ 96.867314][ T5848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.867367][ T5848] RSP: 002b:00007fc83eb37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.867393][ T5848] RAX: ffffffffffffffda RBX: 00007fc840355fa0 RCX: 00007fc8400daeb9 [ 96.867426][ T5848] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000002 [ 96.867441][ T5848] RBP: 00007fc83eb37090 R08: 0000000000000000 R09: 0000000000000000 [ 96.867459][ T5848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.867513][ T5848] R13: 00007fc840356038 R14: 00007fc840355fa0 R15: 00007fff11288138 [ 96.867536][ T5848] [ 97.063720][ T5850] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 97.070396][ T5850] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.078115][ T5850] vhci_hcd vhci_hcd.0: Device attached [ 97.128377][ T5850] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 97.135047][ T5850] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.142649][ T5850] vhci_hcd vhci_hcd.0: Device attached [ 97.179454][ T5850] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 97.186159][ T5850] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.193881][ T5850] vhci_hcd vhci_hcd.0: Device attached [ 97.213075][ T5850] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 97.219873][ T5850] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.227616][ T5850] vhci_hcd vhci_hcd.0: Device attached [ 97.235340][ T5850] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(22) [ 97.241994][ T5850] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.249736][ T5850] vhci_hcd vhci_hcd.0: Device attached [ 97.296237][ T5850] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(24) [ 97.302984][ T5850] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.310638][ T5850] vhci_hcd vhci_hcd.0: Device attached [ 97.312343][ T5872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.326445][ T5872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.335161][ T5872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.336107][ T10] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 97.362096][ T5869] vhci_hcd: connection closed [ 97.363731][ T31] vhci_hcd vhci_hcd.1: stop threads [ 97.366715][ T5862] vhci_hcd: connection closed [ 97.368770][ T31] vhci_hcd vhci_hcd.1: release socket [ 97.374248][ T5859] vhci_hcd: connection closed [ 97.379065][ T31] vhci_hcd vhci_hcd.1: disconnect device [ 97.385308][ T5857] vhci_hcd: connection closed [ 97.394850][ T5851] vhci_hcd: connection closed [ 97.399616][ T5853] vhci_hcd: connection closed [ 97.413111][ T5852] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 97.424540][ T31] vhci_hcd vhci_hcd.1: stop threads [ 97.429916][ T31] vhci_hcd vhci_hcd.1: release socket [ 97.435391][ T31] vhci_hcd vhci_hcd.1: disconnect device [ 97.442653][ T31] vhci_hcd vhci_hcd.1: stop threads [ 97.447945][ T31] vhci_hcd vhci_hcd.1: release socket [ 97.453468][ T31] vhci_hcd vhci_hcd.1: disconnect device [ 97.460373][ T31] vhci_hcd vhci_hcd.1: stop threads [ 97.465735][ T31] vhci_hcd vhci_hcd.1: release socket [ 97.471353][ T31] vhci_hcd vhci_hcd.1: disconnect device [ 97.477379][ T5875] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(14) [ 97.484024][ T5875] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.491602][ T5875] vhci_hcd vhci_hcd.0: Device attached [ 97.499720][ T31] vhci_hcd vhci_hcd.1: stop threads [ 97.505043][ T31] vhci_hcd vhci_hcd.1: release socket [ 97.510561][ T31] vhci_hcd vhci_hcd.1: disconnect device [ 97.522961][ T5882] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(17) [ 97.529612][ T5882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.537306][ T5882] vhci_hcd vhci_hcd.0: Device attached [ 97.549661][ T31] vhci_hcd vhci_hcd.1: stop threads [ 97.554977][ T31] vhci_hcd vhci_hcd.1: release socket [ 97.560624][ T31] vhci_hcd vhci_hcd.1: disconnect device [ 97.570968][ T5875] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16) [ 97.577842][ T5875] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 97.585512][ T5875] vhci_hcd vhci_hcd.0: Device attached [ 97.601273][ T5875] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(20) [ 97.608110][ T5875] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.615946][ T5875] vhci_hcd vhci_hcd.0: Device attached [ 97.639983][ T5875] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(22) [ 97.646686][ T5875] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.654333][ T5875] vhci_hcd vhci_hcd.0: Device attached [ 97.666330][ T5875] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(24) [ 97.672982][ T5875] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 97.681181][ T5875] vhci_hcd vhci_hcd.0: Device attached [ 97.696713][ T5875] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.707794][ T5875] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.724096][ T5875] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.732947][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 97.732973][ T29] audit: type=1326 audit(1769830061.172:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f49ecaeb9 code=0x7ffc0000 [ 97.762766][ T29] audit: type=1326 audit(1769830061.172:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f49ecaeb9 code=0x7ffc0000 [ 97.786643][ T3394] usb 9-1: new low-speed USB device number 4 using vhci_hcd [ 97.817049][ T5875] siw: device registration error -23 [ 97.823058][ T5895] vhci_hcd: connection closed [ 97.823107][ T5892] vhci_hcd: connection closed [ 97.823156][ T5899] vhci_hcd: connection closed [ 97.826238][ T29] audit: type=1326 audit(1769830061.182:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f7f49ecaeb9 code=0x7ffc0000 [ 97.829647][ T5883] vhci_hcd: connection closed [ 97.832804][ T29] audit: type=1326 audit(1769830061.182:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f49ecaeb9 code=0x7ffc0000 [ 97.838141][ T31] vhci_hcd vhci_hcd.4: stop threads [ 97.861361][ T29] audit: type=1326 audit(1769830061.182:1846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f49ecaeb9 code=0x7ffc0000 [ 97.866380][ T31] vhci_hcd vhci_hcd.4: release socket [ 97.889954][ T29] audit: type=1326 audit(1769830061.182:1847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7f49ecaeb9 code=0x7ffc0000 [ 97.895175][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 97.919516][ T29] audit: type=1326 audit(1769830061.182:1848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f49ecaeb9 code=0x7ffc0000 [ 97.978085][ T29] audit: type=1326 audit(1769830061.182:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f49ecaeb9 code=0x7ffc0000 [ 98.001622][ T29] audit: type=1326 audit(1769830061.182:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f49ecaeb9 code=0x7ffc0000 [ 98.002184][ T5878] vhci_hcd: connection reset by peer [ 98.025070][ T29] audit: type=1326 audit(1769830061.182:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5902 comm="syz.2.695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f49ecaeb9 code=0x7ffc0000 [ 98.055255][ T5888] vhci_hcd: connection closed [ 98.065845][ T31] vhci_hcd vhci_hcd.4: stop threads [ 98.075936][ T31] vhci_hcd vhci_hcd.4: release socket [ 98.081422][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 98.114683][ T5886] loop0: detected capacity change from 0 to 512 [ 98.121364][ T31] vhci_hcd vhci_hcd.4: stop threads [ 98.126663][ T31] vhci_hcd vhci_hcd.4: release socket [ 98.132164][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 98.140149][ T31] vhci_hcd vhci_hcd.4: stop threads [ 98.145460][ T31] vhci_hcd vhci_hcd.4: release socket [ 98.150951][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 98.157419][ T31] vhci_hcd vhci_hcd.4: stop threads [ 98.162671][ T31] vhci_hcd vhci_hcd.4: release socket [ 98.168360][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 98.183597][ T5886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.196548][ T31] vhci_hcd vhci_hcd.4: stop threads [ 98.197474][ T5886] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.202276][ T31] vhci_hcd vhci_hcd.4: release socket [ 98.217887][ T31] vhci_hcd vhci_hcd.4: disconnect device [ 98.257352][ T5886] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.692: corrupted xattr block 6: invalid header [ 98.271279][ T5886] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 98.343381][ T5886] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.692: corrupted xattr block 6: invalid header [ 98.359295][ T5886] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 98.369526][ T5886] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.692: corrupted xattr block 6: invalid header [ 98.385306][ T5886] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 98.394931][ T5886] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.692: corrupted xattr block 6: invalid header [ 98.410747][ T5886] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 98.420228][ T5886] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.692: corrupted xattr block 6: invalid header [ 98.433961][ T5886] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=12 [ 98.443993][ T5886] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #12: comm syz.0.692: corrupted xattr block 6: invalid header [ 98.639427][ T5933] netlink: 'syz.3.705': attribute type 10 has an invalid length. [ 98.711941][ T5931] __nla_validate_parse: 5 callbacks suppressed [ 98.711961][ T5931] netlink: 48 bytes leftover after parsing attributes in process `syz.4.706'. [ 98.727749][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.706'. [ 98.736759][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.4.706'. [ 98.763142][ T5931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.706'. [ 98.784066][ T5931] bond0: entered promiscuous mode [ 98.789228][ T5931] bond_slave_0: entered promiscuous mode [ 98.795008][ T5931] bond_slave_1: entered promiscuous mode [ 98.823822][ T5931] gretap0: entered promiscuous mode [ 98.835685][ T5931] hsr1: entered promiscuous mode [ 98.899864][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.972507][ T5944] netlink: 148 bytes leftover after parsing attributes in process `syz.2.709'. [ 99.232763][ T5949] loop4: detected capacity change from 0 to 2048 [ 99.259651][ T5949] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.328758][ T5969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=5969 comm=syz.2.716 [ 99.419815][ T3644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.786341][ T5988] netlink: 148 bytes leftover after parsing attributes in process `syz.4.723'. [ 100.337412][ T6005] loop0: detected capacity change from 0 to 512 [ 100.353378][ T6005] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 100.394262][ T6005] bond2 (unregistering): Released all slaves [ 100.533463][ T6009] netlink: 'syz.0.729': attribute type 10 has an invalid length. [ 100.571333][ T6011] FAULT_INJECTION: forcing a failure. [ 100.571333][ T6011] name failslab, interval 1, probability 0, space 0, times 0 [ 100.584089][ T6011] CPU: 0 UID: 0 PID: 6011 Comm: syz.3.730 Not tainted syzkaller #0 PREEMPT(voluntary) [ 100.584133][ T6011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 100.584151][ T6011] Call Trace: [ 100.584227][ T6011] [ 100.584237][ T6011] __dump_stack+0x1d/0x30 [ 100.584312][ T6011] dump_stack_lvl+0x95/0xd0 [ 100.584343][ T6011] dump_stack+0x15/0x1b [ 100.584370][ T6011] should_fail_ex+0x263/0x280 [ 100.584406][ T6011] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.584474][ T6011] should_failslab+0x8c/0xb0 [ 100.584506][ T6011] kmem_cache_alloc_lru_noprof+0x6c/0x490 [ 100.584540][ T6011] ? sock_alloc_inode+0x34/0xa0 [ 100.584582][ T6011] ? __pfx_sock_alloc_inode+0x10/0x10 [ 100.584617][ T6011] sock_alloc_inode+0x34/0xa0 [ 100.584648][ T6011] alloc_inode+0x40/0x170 [ 100.584721][ T6011] __sock_create+0x120/0x580 [ 100.584758][ T6011] __sys_socketpair+0x1bb/0x420 [ 100.584806][ T6011] __x64_sys_socketpair+0x52/0x60 [ 100.584842][ T6011] x64_sys_call+0x2df3/0x3000 [ 100.584965][ T6011] do_syscall_64+0xc0/0x2a0 [ 100.585033][ T6011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.585122][ T6011] RIP: 0033:0x7f418885c77a [ 100.585153][ T6011] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.585179][ T6011] RSP: 002b:00007f41872b6f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 100.585206][ T6011] RAX: ffffffffffffffda RBX: 00007f4188ad5f00 RCX: 00007f418885c77a [ 100.585226][ T6011] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 100.585262][ T6011] RBP: 00007f41872b7090 R08: 0000000000000000 R09: 0000000000000000 [ 100.585280][ T6011] R10: 00007f41872b6f88 R11: 0000000000000246 R12: 0000000000000001 [ 100.585296][ T6011] R13: 00007f4188ad6038 R14: 00007f4188ad5fa0 R15: 00007ffd0e431688 [ 100.585323][ T6011] [ 100.585334][ T6011] socket: no more sockets [ 101.310097][ T6016] FAULT_INJECTION: forcing a failure. [ 101.310097][ T6016] name failslab, interval 1, probability 0, space 0, times 0 [ 101.324055][ T6016] CPU: 1 UID: 0 PID: 6016 Comm: syz.3.732 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.324111][ T6016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.324123][ T6016] Call Trace: [ 101.324129][ T6016] [ 101.324135][ T6016] __dump_stack+0x1d/0x30 [ 101.324158][ T6016] dump_stack_lvl+0x95/0xd0 [ 101.324217][ T6016] dump_stack+0x15/0x1b [ 101.324296][ T6016] should_fail_ex+0x263/0x280 [ 101.324324][ T6016] should_failslab+0x8c/0xb0 [ 101.324424][ T6016] __kmalloc_cache_noprof+0x64/0x4a0 [ 101.324448][ T6016] ? alloc_tty_struct+0x4c/0x3c0 [ 101.324473][ T6016] alloc_tty_struct+0x4c/0x3c0 [ 101.324499][ T6016] tty_init_dev+0x39/0x320 [ 101.324557][ T6016] ptmx_open+0x10b/0x2b0 [ 101.324576][ T6016] chrdev_open+0x2eb/0x3a0 [ 101.324596][ T6016] ? __pfx_chrdev_open+0x10/0x10 [ 101.324616][ T6016] do_dentry_open+0x54b/0xa60 [ 101.324726][ T6016] vfs_open+0x37/0x1e0 [ 101.324752][ T6016] path_openat+0x1de9/0x23c0 [ 101.324783][ T6016] ? _parse_integer_limit+0x170/0x190 [ 101.324834][ T6016] do_filp_open+0x15d/0x280 [ 101.324955][ T6016] do_sys_openat2+0xa6/0x150 [ 101.324983][ T6016] __x64_sys_openat+0xf2/0x120 [ 101.325011][ T6016] x64_sys_call+0x2b07/0x3000 [ 101.325083][ T6016] do_syscall_64+0xc0/0x2a0 [ 101.325112][ T6016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.325199][ T6016] RIP: 0033:0x7f418885aeb9 [ 101.325213][ T6016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.325230][ T6016] RSP: 002b:00007f41872b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 101.325248][ T6016] RAX: ffffffffffffffda RBX: 00007f4188ad5fa0 RCX: 00007f418885aeb9 [ 101.325260][ T6016] RDX: 0000000000080042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 101.325273][ T6016] RBP: 00007f41872b7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.325310][ T6016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.325322][ T6016] R13: 00007f4188ad6038 R14: 00007f4188ad5fa0 R15: 00007ffd0e431688 [ 101.325342][ T6016] [ 101.598299][ T6019] capability: warning: `syz.0.733' uses 32-bit capabilities (legacy support in use) [ 101.611391][ T6019] loop0: detected capacity change from 0 to 256 [ 101.677906][ T6021] netlink: 148 bytes leftover after parsing attributes in process `syz.3.734'. [ 101.754633][ T6028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.737'. [ 101.768929][ T6028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.779228][ T6028] bond1: entered allmulticast mode [ 102.063943][ T5954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 102.157139][ T6043] loop0: detected capacity change from 0 to 128 [ 102.179804][ T6047] loop1: detected capacity change from 0 to 512 [ 102.189369][ T6043] vfat: Unknown parameter 'fllate' [ 102.198270][ T6050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 102.207473][ T6050] netlink: 'syz.2.744': attribute type 18 has an invalid length. [ 102.215297][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 102.251326][ T6047] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.743: bg 0: block 393: padding at end of block bitmap is not set [ 102.303031][ T6047] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 102.401236][ T6047] EXT4-fs (loop1): 2 truncates cleaned up [ 102.409195][ T6047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.446180][ T10] usb 3-1: enqueue for inactive port 0 [ 102.474562][ T10] usb 3-1: enqueue for inactive port 0 [ 102.677381][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 102.716401][ T6081] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 102.722837][ T6081] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 102.796510][ T6082] hsr_slave_0: left promiscuous mode [ 102.831200][ T6082] hsr_slave_1: left promiscuous mode [ 102.846235][ T3394] usb 9-1: enqueue for inactive port 0 [ 102.852086][ T3394] usb 9-1: enqueue for inactive port 0 [ 102.926290][ T3394] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 103.320202][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 103.320218][ T29] audit: type=1400 audit(1769830066.762:1990): avc: denied { name_bind 0x1000000 } for pid=6083 comm="syz.3.754" path="socket:[13909]" dev="sockfs" ino=13909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 105.380964][ T6068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 105.465002][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.493952][ T6111] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 105.536617][ T6107] loop0: detected capacity change from 0 to 8192 [ 105.553491][ T6111] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.573851][ T6111] __nla_validate_parse: 3 callbacks suppressed [ 105.573867][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 105.575360][ T6107] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.580189][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.761'. [ 105.612105][ T6111] macsec1: entered promiscuous mode [ 105.617435][ T6111] bond2: entered promiscuous mode [ 105.621958][ T6109] loop4: detected capacity change from 0 to 8192 [ 105.622724][ T6111] macsec1: entered allmulticast mode [ 105.634225][ T6111] bond2: entered allmulticast mode [ 105.670188][ T6109] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.705830][ T6125] loop3: detected capacity change from 0 to 512 [ 105.717935][ T6125] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 105.749160][ T6125] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.759030][ T6125] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.764: Allocating blocks 41-42 which overlap fs metadata [ 105.773376][ T6125] Quota error (device loop3): write_blk: dquota write failed [ 105.780848][ T6125] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 105.790075][ T6125] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.764: Allocating blocks 41-42 which overlap fs metadata [ 105.804908][ T6125] Quota error (device loop3): write_blk: dquota write failed [ 105.812709][ T6125] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 105.822701][ T6125] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.764: Failed to acquire dquot type 1 [ 106.008554][ T6125] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 106.023075][ T6125] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.764: corrupted inode contents [ 106.035366][ T6125] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.764: mark_inode_dirty error [ 106.047558][ T6125] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.764: corrupted inode contents [ 106.059913][ T6125] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.764: mark_inode_dirty error [ 106.071502][ T6125] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.764: corrupted inode contents [ 106.083803][ T6125] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 106.092782][ T6125] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.764: corrupted inode contents [ 106.105113][ T6125] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.764: mark_inode_dirty error [ 106.116777][ T6125] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 106.196431][ T6125] EXT4-fs (loop3): 1 truncate cleaned up [ 106.202718][ T6125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.215629][ T6125] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.462223][ T6140] loop3: detected capacity change from 0 to 512 [ 106.502507][ T6140] EXT4-fs: Ignoring removed nobh option [ 106.553385][ T6140] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.641745][ T6140] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.657673][ T6140] EXT4-fs (loop3): 1 truncate cleaned up [ 106.664797][ T6140] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.694740][ T29] audit: type=1400 audit(1769830070.122:1991): avc: denied { setattr } for pid=6139 comm="syz.3.767" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 106.847060][ T29] audit: type=1400 audit(1769830070.292:1992): avc: denied { getopt } for pid=6147 comm="syz.1.771" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 107.060749][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.124169][ T6159] loop0: detected capacity change from 0 to 1024 [ 107.166951][ T6159] EXT4-fs: Ignoring removed orlov option [ 107.172685][ T6159] EXT4-fs: inline encryption not supported [ 107.189425][ T6159] EXT4-fs (loop0): bad geometry: block count 3585 exceeds size of device (512 blocks) [ 107.211757][ T29] audit: type=1400 audit(1769830070.652:1993): avc: denied { create } for pid=6158 comm="syz.0.774" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.258029][ T29] audit: type=1400 audit(1769830070.672:1994): avc: denied { read write } for pid=6158 comm="syz.0.774" name="file0" dev="tmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.280847][ T29] audit: type=1400 audit(1769830070.672:1995): avc: denied { open } for pid=6158 comm="syz.0.774" path="/130/file0" dev="tmpfs" ino=733 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.364687][ T6172] loop4: detected capacity change from 0 to 512 [ 107.390343][ T6172] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.778: bad orphan inode 13 [ 107.400589][ T6172] ext4_test_bit(bit=12, block=4) = 1 [ 107.405948][ T6172] is_bad_inode(inode)=0 [ 107.410331][ T6172] NEXT_ORPHAN(inode)=0 [ 107.414509][ T6172] max_ino=32 [ 107.417750][ T6172] i_nlink=1 [ 107.421589][ T6172] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.452658][ T6172] lo speed is unknown, defaulting to 1000 [ 107.484207][ T6172] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.778: Unrecognised inode hash code 20 [ 107.495670][ T6172] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.778: Corrupt directory, running e2fsck is recommended [ 107.508613][ T6172] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.778: Unrecognised inode hash code 20 [ 107.520211][ T6172] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.778: Corrupt directory, running e2fsck is recommended [ 107.533247][ T6172] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.778: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 107.586946][ T3644] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 107.616890][ T3644] EXT4-fs error (device loop4): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad i_size value: 880468304680 [ 107.630066][ T3644] EXT4-fs error (device loop4): ext4_lookup:1785: inode #16: comm syz-executor: iget: bad i_size value: 880468304680 [ 107.868165][ T3644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.883065][ T360] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.950458][ T360] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.975657][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 107.997207][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 108.010037][ T360] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.022187][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 108.031387][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 108.063133][ T360] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.193732][ T360] bridge_slave_1: left allmulticast mode [ 108.199465][ T360] bridge_slave_1: left promiscuous mode [ 108.205288][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.310562][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.790'. [ 108.370502][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 108.370520][ T29] audit: type=1400 audit(1769830071.812:1999): avc: denied { getopt } for pid=6211 comm="syz.0.790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 108.403423][ T6209] loop3: detected capacity change from 0 to 4096 [ 108.411016][ T360] bridge_slave_0: left allmulticast mode [ 108.417175][ T360] bridge_slave_0: left promiscuous mode [ 108.422929][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.454610][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.791'. [ 108.493074][ T6209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.693500][ T360] gretap0 (unregistering): left promiscuous mode [ 108.729196][ T360] bond0 (unregistering): left promiscuous mode [ 108.735474][ T360] bond_slave_0: left promiscuous mode [ 108.741112][ T360] bond_slave_1: left promiscuous mode [ 108.750526][ T360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.761137][ T360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.771263][ T360] bond0 (unregistering): Released all slaves [ 108.808552][ T29] audit: type=1400 audit(1769830072.232:2000): avc: denied { read } for pid=3041 comm="dhcpcd" name="n33" dev="tmpfs" ino=5271 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.830408][ T29] audit: type=1400 audit(1769830072.232:2001): avc: denied { open } for pid=3041 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=5271 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.853699][ T29] audit: type=1400 audit(1769830072.242:2002): avc: denied { getattr } for pid=3041 comm="dhcpcd" path="/run/udev/data/n33" dev="tmpfs" ino=5271 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 108.886999][ T6193] lo speed is unknown, defaulting to 1000 [ 108.910681][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.006655][ T29] audit: type=1326 audit(1769830072.442:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 109.030116][ T29] audit: type=1326 audit(1769830072.442:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 109.053457][ T29] audit: type=1326 audit(1769830072.442:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 109.076905][ T29] audit: type=1326 audit(1769830072.442:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 109.100467][ T29] audit: type=1326 audit(1769830072.442:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 109.123921][ T29] audit: type=1326 audit(1769830072.442:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6232 comm="syz.1.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 109.152740][ T360] hsr_slave_0: left promiscuous mode [ 109.160839][ T360] hsr_slave_1: left promiscuous mode [ 109.167445][ T360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.174916][ T360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.182859][ T360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.190490][ T360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.218048][ T6256] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 109.224729][ T6256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.232332][ T6256] vhci_hcd vhci_hcd.0: Device attached [ 109.239229][ T360] vlan1: left allmulticast mode [ 109.244180][ T360] veth0_vlan: left allmulticast mode [ 109.251363][ T360] veth1_macvtap: left promiscuous mode [ 109.253580][ T6256] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(15) [ 109.257327][ T360] veth0_macvtap: left promiscuous mode [ 109.263506][ T6256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.269959][ T360] veth1_vlan: left promiscuous mode [ 109.276730][ T6256] vhci_hcd vhci_hcd.0: Device attached [ 109.282788][ T360] veth0_vlan: left promiscuous mode [ 109.330104][ T6256] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(17) [ 109.336812][ T6256] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 109.344577][ T6256] vhci_hcd vhci_hcd.0: Device attached [ 109.356894][ T6256] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(19) [ 109.363540][ T6256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.371224][ T6256] vhci_hcd vhci_hcd.0: Device attached [ 109.380376][ T6256] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(21) [ 109.387038][ T6256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.394639][ T6256] vhci_hcd vhci_hcd.0: Device attached [ 109.403759][ T6256] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(23) [ 109.410419][ T6256] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.418053][ T6256] vhci_hcd vhci_hcd.0: Device attached [ 109.428242][ T6256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.438579][ T6256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.461580][ T360] team0 (unregistering): Port device team_slave_1 removed [ 109.466213][ T6256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 109.477191][ T360] team0 (unregistering): Port device team_slave_0 removed [ 109.486044][ T4294] usb 1-1: new low-speed USB device number 5 using vhci_hcd [ 109.495231][ T6256] siw: device registration error -23 [ 109.530368][ T6277] vhci_hcd: connection closed [ 109.530586][ T6275] vhci_hcd: connection closed [ 109.530597][ T6272] vhci_hcd: connection closed [ 109.537463][ T6274] sit1: entered allmulticast mode [ 109.540236][ T6260] vhci_hcd: connection closed [ 109.550067][ T6258] vhci_hcd: connection reset by peer [ 109.556445][ T6193] chnl_net:caif_netlink_parms(): no params data found [ 109.560596][ T6267] vhci_hcd: connection closed [ 109.568032][ T37] vhci_hcd vhci_hcd.0: stop threads [ 109.578112][ T37] vhci_hcd vhci_hcd.0: release socket [ 109.583610][ T37] vhci_hcd vhci_hcd.0: disconnect device [ 109.594246][ T37] vhci_hcd vhci_hcd.0: stop threads [ 109.599590][ T37] vhci_hcd vhci_hcd.0: release socket [ 109.605099][ T37] vhci_hcd vhci_hcd.0: disconnect device [ 109.611582][ T37] vhci_hcd vhci_hcd.0: stop threads [ 109.616849][ T37] vhci_hcd vhci_hcd.0: release socket [ 109.622335][ T37] vhci_hcd vhci_hcd.0: disconnect device [ 109.635402][ T37] vhci_hcd vhci_hcd.0: stop threads [ 109.640764][ T37] vhci_hcd vhci_hcd.0: release socket [ 109.646227][ T37] vhci_hcd vhci_hcd.0: disconnect device [ 109.656156][ T37] vhci_hcd vhci_hcd.0: stop threads [ 109.661566][ T37] vhci_hcd vhci_hcd.0: release socket [ 109.667044][ T37] vhci_hcd vhci_hcd.0: disconnect device [ 109.674328][ T37] vhci_hcd vhci_hcd.0: stop threads [ 109.679670][ T37] vhci_hcd vhci_hcd.0: release socket [ 109.685132][ T37] vhci_hcd vhci_hcd.0: disconnect device [ 109.749321][ T6286] geneve3: entered promiscuous mode [ 109.761623][ T6193] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.768899][ T6193] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.776774][ T6193] bridge_slave_0: entered allmulticast mode [ 109.783467][ T6193] bridge_slave_0: entered promiscuous mode [ 109.790419][ T37] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 50014 - 0 [ 109.799869][ T6193] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.807179][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.824670][ T6193] bridge_slave_1: entered allmulticast mode [ 109.833291][ T6193] bridge_slave_1: entered promiscuous mode [ 109.866114][ T37] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 50014 - 0 [ 109.882191][ T360] IPVS: stop unused estimator thread 0... [ 109.910097][ T6193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.924593][ T37] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 50014 - 0 [ 109.957377][ T6193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.971518][ T37] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 50014 - 0 [ 110.001117][ T6308] netlink: 'syz.1.804': attribute type 1 has an invalid length. [ 110.034601][ T6308] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.059907][ T6193] team0: Port device team_slave_0 added [ 110.080631][ T6314] netlink: 44 bytes leftover after parsing attributes in process `syz.1.804'. [ 110.088217][ T6193] team0: Port device team_slave_1 added [ 110.126289][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.804'. [ 110.184930][ T6193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.192077][ T6193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.218141][ T6193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.279840][ T6193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.287022][ T6193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.313019][ T6193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.327639][ T6341] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 110.334283][ T6341] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.341881][ T6341] vhci_hcd vhci_hcd.0: Device attached [ 110.370968][ T6341] FAULT_INJECTION: forcing a failure. [ 110.370968][ T6341] name failslab, interval 1, probability 0, space 0, times 0 [ 110.383783][ T6341] CPU: 1 UID: 0 PID: 6341 Comm: syz.0.809 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.383819][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.383835][ T6341] Call Trace: [ 110.383842][ T6341] [ 110.383925][ T6341] __dump_stack+0x1d/0x30 [ 110.383986][ T6341] dump_stack_lvl+0x95/0xd0 [ 110.384077][ T6341] dump_stack+0x15/0x1b [ 110.384151][ T6341] should_fail_ex+0x263/0x280 [ 110.384185][ T6341] should_failslab+0x8c/0xb0 [ 110.384209][ T6341] kmem_cache_alloc_noprof+0x68/0x490 [ 110.384315][ T6341] ? sk_prot_alloc+0x3f/0x180 [ 110.384374][ T6341] sk_prot_alloc+0x3f/0x180 [ 110.384456][ T6341] sk_alloc+0x34/0x3d0 [ 110.384498][ T6341] unix_create1+0xa5/0x400 [ 110.384548][ T6341] ? inode_init_always_gfp+0x4cd/0x500 [ 110.384576][ T6341] unix_create+0x11f/0x150 [ 110.384644][ T6341] __sock_create+0x2e4/0x580 [ 110.384683][ T6341] __sys_socketpair+0x16f/0x420 [ 110.384711][ T6341] ? exit_to_user_mode_loop+0xef/0x6f0 [ 110.384835][ T6341] __x64_sys_socketpair+0x52/0x60 [ 110.384885][ T6341] x64_sys_call+0x2df3/0x3000 [ 110.384914][ T6341] do_syscall_64+0xc0/0x2a0 [ 110.384953][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.385041][ T6341] RIP: 0033:0x7fc8400dc77a [ 110.385062][ T6341] Code: 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.385087][ T6341] RSP: 002b:00007fc83eb15f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 110.385126][ T6341] RAX: ffffffffffffffda RBX: 00007fc840356000 RCX: 00007fc8400dc77a [ 110.385145][ T6341] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 110.385162][ T6341] RBP: 00007fc83eb16090 R08: 0000000000000000 R09: 0000000000000000 [ 110.385191][ T6341] R10: 00007fc83eb15f88 R11: 0000000000000246 R12: 0000000000000002 [ 110.385210][ T6341] R13: 00007fc840356128 R14: 00007fc840356090 R15: 00007fff11288138 [ 110.385230][ T6341] [ 110.601151][ T6193] hsr_slave_0: entered promiscuous mode [ 110.607620][ T6193] hsr_slave_1: entered promiscuous mode [ 110.619084][ T6193] debugfs: 'hsr0' already exists in 'hsr' [ 110.624871][ T6193] Cannot create hsr debugfs directory [ 110.675725][ T6339] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 110.682373][ T6339] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.689956][ T6339] vhci_hcd vhci_hcd.0: Device attached [ 110.753916][ T6346] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(21) [ 110.760561][ T6346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.768149][ T6346] vhci_hcd vhci_hcd.0: Device attached [ 110.856407][ T6347] vhci_hcd: connection closed [ 110.857845][ T12] vhci_hcd vhci_hcd.0: stop threads [ 110.867961][ T12] vhci_hcd vhci_hcd.0: release socket [ 110.873379][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 110.883648][ T6340] vhci_hcd: connection closed [ 110.888583][ T6353] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(13) [ 110.891508][ T6193] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.893376][ T6353] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.900200][ T6342] vhci_hcd: connection closed [ 110.906827][ T6353] vhci_hcd vhci_hcd.0: Device attached [ 110.925225][ T12] vhci_hcd vhci_hcd.0: stop threads [ 110.930681][ T12] vhci_hcd vhci_hcd.0: release socket [ 110.936149][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 110.946738][ T12] vhci_hcd vhci_hcd.0: stop threads [ 110.952015][ T12] vhci_hcd vhci_hcd.0: release socket [ 110.956382][ T6364] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(19) [ 110.957619][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 110.964028][ T6364] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.977295][ T6364] vhci_hcd vhci_hcd.0: Device attached [ 111.003243][ T6358] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(16) [ 111.009901][ T6358] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.017546][ T6358] vhci_hcd vhci_hcd.0: Device attached [ 111.025914][ T6353] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15) [ 111.032565][ T6353] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.040220][ T6353] vhci_hcd vhci_hcd.0: Device attached [ 111.047498][ T6193] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 111.062316][ T6363] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 111.069051][ T6363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.076774][ T6363] vhci_hcd vhci_hcd.0: Device attached [ 111.086570][ T6193] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.095052][ T6353] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 111.096488][ T6363] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 111.101755][ T6353] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.108319][ T6363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.116387][ T6353] vhci_hcd vhci_hcd.0: Device attached [ 111.123517][ T6363] vhci_hcd vhci_hcd.0: Device attached [ 111.135421][ T6193] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.139997][ T6363] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18) [ 111.148866][ T6363] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 111.156605][ T6363] vhci_hcd vhci_hcd.0: Device attached [ 111.165782][ T6358] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(24) [ 111.172525][ T6358] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.180077][ T6358] vhci_hcd vhci_hcd.0: Device attached [ 111.189375][ T6353] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.200012][ T6353] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.209783][ T6353] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.217921][ T1037] usb 7-1: new low-speed USB device number 4 using vhci_hcd [ 111.225542][ T6363] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(20) [ 111.232184][ T6363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.239841][ T6363] vhci_hcd vhci_hcd.0: Device attached [ 111.250192][ T6353] siw: device registration error -23 [ 111.256489][ T6363] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22) [ 111.263133][ T6363] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.271052][ T6363] vhci_hcd vhci_hcd.0: Device attached [ 111.288624][ T6377] vhci_hcd: connection closed [ 111.288819][ T6359] vhci_hcd: connection closed [ 111.289220][ T6354] vhci_hcd: connection reset by peer [ 111.303757][ T1670] vhci_hcd vhci_hcd.3: stop threads [ 111.304022][ T6370] vhci_hcd: connection closed [ 111.309032][ T1670] vhci_hcd vhci_hcd.3: release socket [ 111.310281][ T6382] vhci_hcd: connection closed [ 111.313964][ T1670] vhci_hcd vhci_hcd.3: disconnect device [ 111.330036][ T6366] vhci_hcd: connection closed [ 111.334786][ T6369] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(25) [ 111.336130][ T1670] vhci_hcd vhci_hcd.3: stop threads [ 111.339539][ T6369] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 111.346247][ T1670] vhci_hcd vhci_hcd.3: release socket [ 111.351723][ T6369] vhci_hcd vhci_hcd.0: Device attached [ 111.358874][ T1670] vhci_hcd vhci_hcd.3: disconnect device [ 111.379901][ T1670] vhci_hcd vhci_hcd.3: stop threads [ 111.385204][ T1670] vhci_hcd vhci_hcd.3: release socket [ 111.390698][ T1670] vhci_hcd vhci_hcd.3: disconnect device [ 111.414574][ T6404] FAULT_INJECTION: forcing a failure. [ 111.414574][ T6404] name failslab, interval 1, probability 0, space 0, times 0 [ 111.427434][ T6193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.429582][ T1670] vhci_hcd vhci_hcd.3: stop threads [ 111.434096][ T6404] CPU: 0 UID: 0 PID: 6404 Comm: syz.1.814 Not tainted syzkaller #0 PREEMPT(voluntary) [ 111.434262][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 111.434319][ T6404] Call Trace: [ 111.434341][ T6404] [ 111.434359][ T6404] __dump_stack+0x1d/0x30 [ 111.434442][ T6404] dump_stack_lvl+0x95/0xd0 [ 111.434515][ T6404] dump_stack+0x15/0x1b [ 111.434616][ T6404] should_fail_ex+0x263/0x280 [ 111.434726][ T6404] should_failslab+0x8c/0xb0 [ 111.434795][ T6404] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 111.434881][ T6404] ? sidtab_sid2str_get+0xa0/0x130 [ 111.435042][ T6404] kmemdup_noprof+0x2b/0x70 [ 111.435114][ T6404] sidtab_sid2str_get+0xa0/0x130 [ 111.435205][ T6404] security_sid_to_context_core+0x1eb/0x2e0 [ 111.435301][ T6404] security_sid_to_context+0x27/0x40 [ 111.435444][ T6404] selinux_lsmprop_to_secctx+0x67/0xf0 [ 111.435565][ T6404] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 111.435718][ T6404] audit_log_subj_ctx+0xa4/0x3e0 [ 111.435859][ T6404] ? skb_put+0xa9/0xf0 [ 111.435966][ T6404] audit_log_task_context+0x48/0x70 [ 111.436078][ T6404] audit_log_task+0xf3/0x250 [ 111.436277][ T6404] ? __perf_event_task_sched_in+0xa65/0xad0 [ 111.436378][ T6404] audit_seccomp+0x60/0x100 [ 111.436440][ T6404] ? __seccomp_filter+0x8db/0x1350 [ 111.436461][ T6404] __seccomp_filter+0x8ec/0x1350 [ 111.436485][ T6404] ? mas_find+0x222/0x700 [ 111.436560][ T6404] ? apply_vma_lock_flags+0x217/0x260 [ 111.436712][ T6404] __secure_computing+0x81/0x150 [ 111.436787][ T6404] syscall_trace_enter+0xce/0x1e0 [ 111.436906][ T6404] do_syscall_64+0x9a/0x2a0 [ 111.437107][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.437186][ T6404] RIP: 0033:0x7f691b3cb78e [ 111.437252][ T6404] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.437338][ T6404] RSP: 002b:00007f6919e66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.437447][ T6404] RAX: ffffffffffffffda RBX: 00007f6919e676c0 RCX: 00007f691b3cb78e [ 111.437504][ T6404] RDX: 000000000000000f RSI: 00007f6919e670a0 RDI: 0000000000000003 [ 111.437548][ T6404] RBP: 00007f6919e67090 R08: 0000000000000000 R09: 0000000000000000 [ 111.437593][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.437637][ T6404] R13: 00007f691b686038 R14: 00007f691b685fa0 R15: 00007ffe69f1eb98 [ 111.437702][ T6404] [ 111.506929][ T6193] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.509200][ T1670] vhci_hcd vhci_hcd.3: release socket [ 111.542284][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.546134][ T1670] vhci_hcd vhci_hcd.3: disconnect device [ 111.550581][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.571620][ T6363] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.720683][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.727801][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.729750][ T6411] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.741391][ T6369] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 111.758578][ T6412] loop1: detected capacity change from 0 to 1024 [ 111.771198][ T1670] vhci_hcd vhci_hcd.3: stop threads [ 111.776572][ T1670] vhci_hcd vhci_hcd.3: release socket [ 111.781983][ T1670] vhci_hcd vhci_hcd.3: disconnect device [ 111.791079][ T1670] vhci_hcd vhci_hcd.3: stop threads [ 111.796379][ T1670] vhci_hcd vhci_hcd.3: release socket [ 111.801799][ T1670] vhci_hcd vhci_hcd.3: disconnect device [ 111.809593][ T6412] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 111.819367][ T6363] siw: device registration error -23 [ 111.830338][ T6193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.843520][ T6399] vhci_hcd: connection closed [ 111.843865][ T6384] vhci_hcd: connection closed [ 111.848918][ T6380] vhci_hcd: connection closed [ 111.851340][ T360] vhci_hcd vhci_hcd.0: stop threads [ 111.863690][ T360] vhci_hcd vhci_hcd.0: release socket [ 111.869145][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 111.876088][ T6395] vhci_hcd: connection closed [ 111.876316][ T6412] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.891940][ T6389] vhci_hcd: connection closed [ 111.892108][ T6372] vhci_hcd: connection closed [ 111.905476][ T360] vhci_hcd vhci_hcd.0: stop threads [ 111.915685][ T360] vhci_hcd vhci_hcd.0: release socket [ 111.921141][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 111.928523][ T360] vhci_hcd vhci_hcd.0: stop threads [ 111.933816][ T360] vhci_hcd vhci_hcd.0: release socket [ 111.939330][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 111.955209][ T360] vhci_hcd vhci_hcd.0: stop threads [ 111.960646][ T360] vhci_hcd vhci_hcd.0: release socket [ 111.966253][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 111.983041][ T360] vhci_hcd vhci_hcd.0: stop threads [ 111.988361][ T360] vhci_hcd vhci_hcd.0: release socket [ 111.993773][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 112.014338][ T360] vhci_hcd vhci_hcd.0: stop threads [ 112.016900][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 112.019943][ T360] vhci_hcd vhci_hcd.0: release socket [ 112.034103][ T360] vhci_hcd vhci_hcd.0: disconnect device [ 112.075076][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 112.111138][ T6193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.395131][ T6193] veth0_vlan: entered promiscuous mode [ 112.408701][ T6193] veth1_vlan: entered promiscuous mode [ 112.438825][ T6193] veth0_macvtap: entered promiscuous mode [ 112.455881][ T6193] veth1_macvtap: entered promiscuous mode [ 112.469744][ T6193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.489975][ T6193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.505353][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.527719][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.547084][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.556458][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.799323][ T6490] netlink: 172 bytes leftover after parsing attributes in process `syz.1.831'. [ 112.808463][ T6490] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 112.970439][ T6498] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(14) [ 112.977122][ T6498] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.984714][ T6498] vhci_hcd vhci_hcd.0: Device attached [ 113.055953][ T6507] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(17) [ 113.062706][ T6507] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.070798][ T6507] vhci_hcd vhci_hcd.0: Device attached [ 113.133053][ T6498] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16) [ 113.139734][ T6498] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 113.147537][ T6498] vhci_hcd vhci_hcd.0: Device attached [ 113.198380][ T6498] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(19) [ 113.205043][ T6498] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.212634][ T6498] vhci_hcd vhci_hcd.0: Device attached [ 113.326979][ T3402] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 113.607451][ T6498] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(25) [ 113.614150][ T6498] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.621936][ T6498] vhci_hcd vhci_hcd.0: Device attached [ 113.674308][ T6507] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(22) [ 113.681017][ T6507] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 113.688649][ T6507] vhci_hcd vhci_hcd.0: Device attached [ 113.696132][ T6498] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.713274][ T6498] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.722125][ T6498] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 113.735602][ T6498] siw: device registration error -23 [ 113.741426][ T6526] vhci_hcd: connection closed [ 113.741529][ T6511] vhci_hcd: connection closed [ 113.741609][ T6515] vhci_hcd: connection closed [ 113.746857][ T6508] vhci_hcd: connection closed [ 113.751261][ T6525] vhci_hcd: connection closed [ 113.761029][ T6500] vhci_hcd: connection reset by peer [ 113.773389][ T1670] vhci_hcd vhci_hcd.5: stop threads [ 113.778719][ T1670] vhci_hcd vhci_hcd.5: release socket [ 113.784151][ T1670] vhci_hcd vhci_hcd.5: disconnect device [ 113.814990][ T1670] vhci_hcd vhci_hcd.5: stop threads [ 113.820378][ T1670] vhci_hcd vhci_hcd.5: release socket [ 113.826202][ T1670] vhci_hcd vhci_hcd.5: disconnect device [ 113.837219][ T1670] vhci_hcd vhci_hcd.5: stop threads [ 113.842611][ T1670] vhci_hcd vhci_hcd.5: release socket [ 113.848561][ T1670] vhci_hcd vhci_hcd.5: disconnect device [ 113.862950][ T1670] vhci_hcd vhci_hcd.5: stop threads [ 113.868359][ T1670] vhci_hcd vhci_hcd.5: release socket [ 113.874546][ T1670] vhci_hcd vhci_hcd.5: disconnect device [ 113.881621][ T1670] vhci_hcd vhci_hcd.5: stop threads [ 113.887559][ T1670] vhci_hcd vhci_hcd.5: release socket [ 113.893060][ T1670] vhci_hcd vhci_hcd.5: disconnect device [ 113.900331][ T1670] vhci_hcd vhci_hcd.5: stop threads [ 113.905779][ T1670] vhci_hcd vhci_hcd.5: release socket [ 113.911286][ T1670] vhci_hcd vhci_hcd.5: disconnect device [ 113.981958][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 113.981978][ T29] audit: type=1400 audit(1769830077.422:2169): avc: denied { create } for pid=6539 comm="syz.3.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 113.992549][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.843'. [ 114.017541][ T6540] netlink: 28 bytes leftover after parsing attributes in process `syz.3.843'. [ 114.048544][ T6540] @0Ù: entered promiscuous mode [ 114.058171][ T6542] FAULT_INJECTION: forcing a failure. [ 114.058171][ T6542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.071423][ T6542] CPU: 0 UID: 0 PID: 6542 Comm: syz.0.844 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.071499][ T6542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.071517][ T6542] Call Trace: [ 114.071525][ T6542] [ 114.071534][ T6542] __dump_stack+0x1d/0x30 [ 114.071567][ T6542] dump_stack_lvl+0x95/0xd0 [ 114.071596][ T6542] dump_stack+0x15/0x1b [ 114.071675][ T6542] should_fail_ex+0x263/0x280 [ 114.071716][ T6542] should_fail+0xb/0x20 [ 114.071753][ T6542] should_fail_usercopy+0x1a/0x20 [ 114.071814][ T6542] copy_fpstate_to_sigframe+0x636/0x7d0 [ 114.071846][ T6542] ? copy_fpstate_to_sigframe+0xe5/0x7d0 [ 114.071879][ T6542] ? x86_task_fpu+0x36/0x60 [ 114.071958][ T6542] get_sigframe+0x34c/0x470 [ 114.072068][ T6542] ? get_signal+0xdbe/0xf60 [ 114.072148][ T6542] x64_setup_rt_frame+0xa7/0x4e0 [ 114.072183][ T6542] arch_do_signal_or_restart+0x24b/0x450 [ 114.072222][ T6542] exit_to_user_mode_loop+0x6a/0x6f0 [ 114.072283][ T6542] do_syscall_64+0x1d3/0x2a0 [ 114.072325][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.072353][ T6542] RIP: 0033:0x7fc84009b78e [ 114.072374][ T6542] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.072399][ T6542] RSP: 002b:00007fc83eb36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 114.072483][ T6542] RAX: 0000000000000001 RBX: 00007fc83eb376c0 RCX: 00007fc84009b78e [ 114.072501][ T6542] RDX: 0000000000000001 RSI: 00007fc83eb37090 RDI: 0000000000000003 [ 114.072518][ T6542] RBP: 00007fc83eb37090 R08: 0000000000000000 R09: 0000000000000000 [ 114.072535][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.072552][ T6542] R13: 00007fc840356038 R14: 00007fc840355fa0 R15: 00007fff11288138 [ 114.072577][ T6542] [ 114.257104][ T6540] team0: entered promiscuous mode [ 114.262356][ T6540] team_slave_0: entered promiscuous mode [ 114.268115][ T6540] team_slave_1: entered promiscuous mode [ 114.331644][ T6552] netlink: 'syz.1.848': attribute type 2 has an invalid length. [ 114.340140][ T6552] netlink: 132 bytes leftover after parsing attributes in process `syz.1.848'. [ 114.376710][ T6554] loop0: detected capacity change from 0 to 2048 [ 114.384028][ T6554] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.394501][ T6554] EXT4-fs: inline encryption not supported [ 114.395224][ T6557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.850'. [ 114.432708][ T6554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 114.507749][ T6569] netlink: 24 bytes leftover after parsing attributes in process `syz.5.854'. [ 114.516180][ T29] audit: type=1326 audit(1769830077.932:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c920aeb9 code=0x7ffc0000 [ 114.540064][ T29] audit: type=1326 audit(1769830077.932:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c920aeb9 code=0x7ffc0000 [ 114.558138][ T4294] usb 1-1: enqueue for inactive port 0 [ 114.563609][ T29] audit: type=1326 audit(1769830077.932:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c920aeb9 code=0x7ffc0000 [ 114.592610][ T29] audit: type=1326 audit(1769830077.932:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96c920aeb9 code=0x7ffc0000 [ 114.616037][ T29] audit: type=1326 audit(1769830077.932:2174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c920aeb9 code=0x7ffc0000 [ 114.639574][ T29] audit: type=1326 audit(1769830077.932:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c920aeb9 code=0x7ffc0000 [ 114.657540][ T4294] usb 1-1: enqueue for inactive port 0 [ 114.663899][ T29] audit: type=1326 audit(1769830077.932:2176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c920aeb9 code=0x7ffc0000 [ 114.692742][ T29] audit: type=1326 audit(1769830077.932:2177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7f96c920aeb9 code=0x7ffc0000 [ 114.716231][ T29] audit: type=1326 audit(1769830077.932:2178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6567 comm="syz.5.854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96c920aeb9 code=0x7ffc0000 [ 114.752119][ T6569] netlink: 20 bytes leftover after parsing attributes in process `syz.5.854'. [ 114.826073][ T4294] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 114.840203][ T6582] loop1: detected capacity change from 0 to 512 [ 114.890000][ T6582] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.960563][ T6582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.003575][ T6582] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.052496][ T6591] loop3: detected capacity change from 0 to 512 [ 115.100188][ T6591] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.862: iget: bad i_size value: 38620345925642 [ 115.170487][ T6591] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.862: couldn't read orphan inode 15 (err -117) [ 115.197094][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.208046][ T6554] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.290035][ T6591] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.313151][ T6554] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 115.325801][ T6554] EXT4-fs (loop0): This should not happen!! Data will be lost [ 115.325801][ T6554] [ 115.335665][ T6554] EXT4-fs (loop0): Total free blocks count 0 [ 115.341775][ T6554] EXT4-fs (loop0): Free/Dirty block details [ 115.347852][ T6554] EXT4-fs (loop0): free_blocks=2415919104 [ 115.353618][ T6554] EXT4-fs (loop0): dirty_blocks=4992 [ 115.358966][ T6554] EXT4-fs (loop0): Block reservation details [ 115.365178][ T6554] EXT4-fs (loop0): i_reserved_data_blocks=312 [ 115.410709][ T6591] Direct I/O collision with buffered writes! File: /file1 Comm: syz.3.862 [ 115.456233][ T6600] netlink: 76 bytes leftover after parsing attributes in process `syz.1.864'. [ 115.482575][ T1670] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 115.568051][ T37] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 115.581084][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 115.593379][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 115.593379][ T37] [ 115.603103][ T37] EXT4-fs (loop3): Total free blocks count 0 [ 115.609155][ T37] EXT4-fs (loop3): Free/Dirty block details [ 115.615082][ T37] EXT4-fs (loop3): free_blocks=0 [ 115.620146][ T37] EXT4-fs (loop3): dirty_blocks=5 [ 115.625201][ T37] EXT4-fs (loop3): Block reservation details [ 115.631234][ T37] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 115.666445][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 115.710870][ T6609] loop1: detected capacity change from 0 to 4096 [ 115.759214][ T6609] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.905718][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.872'. [ 116.286400][ T1037] usb 7-1: enqueue for inactive port 0 [ 116.291940][ T1037] usb 7-1: enqueue for inactive port 0 [ 116.337916][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.368921][ T1037] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 116.813884][ T6663] loop0: detected capacity change from 0 to 2048 [ 116.859505][ T3307] GPT:first_usable_lbas don't match. [ 116.864900][ T3307] GPT:34 != 290 [ 116.868555][ T3307] GPT: Use GNU Parted to correct GPT errors. [ 116.874702][ T3307] loop0: p1 p2 p3 [ 116.899189][ T6663] GPT:first_usable_lbas don't match. [ 116.904598][ T6663] GPT:34 != 290 [ 116.908169][ T6663] GPT: Use GNU Parted to correct GPT errors. [ 116.914396][ T6663] loop0: p1 p2 p3 [ 116.958446][ T6673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.044256][ T6673] bond2: option ad_select: unable to set because the bond device is up [ 117.060125][ T6673] loop1: detected capacity change from 0 to 512 [ 117.070381][ T6673] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.089368][ T6673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.102570][ T6673] ext4 filesystem being mounted at /203/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.115176][ T6688] __nla_validate_parse: 2 callbacks suppressed [ 117.115227][ T6688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.891'. [ 117.148281][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.214118][ T6694] loop1: detected capacity change from 0 to 512 [ 117.225502][ T6694] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.896: bg 0: block 393: padding at end of block bitmap is not set [ 117.243235][ T6694] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 117.252805][ T6694] EXT4-fs (loop1): 2 truncates cleaned up [ 117.259409][ T6694] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.287078][ T6697] netlink: 'syz.2.898': attribute type 2 has an invalid length. [ 117.294825][ T6697] netlink: 132 bytes leftover after parsing attributes in process `syz.2.898'. [ 117.322661][ T6694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.896'. [ 117.348807][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.400528][ T4294] kernel write not supported for file bpf-prog (pid: 4294 comm: kworker/1:5) [ 117.599307][ T6731] netlink: 'syz.0.909': attribute type 2 has an invalid length. [ 117.607083][ T6731] netlink: 132 bytes leftover after parsing attributes in process `syz.0.909'. [ 117.770712][ T6746] loop1: detected capacity change from 0 to 2048 [ 117.827128][ T3307] GPT:first_usable_lbas don't match. [ 117.832508][ T3307] GPT:34 != 290 [ 117.836081][ T3307] GPT: Use GNU Parted to correct GPT errors. [ 117.842306][ T3307] loop1: p1 p2 p3 [ 117.856195][ T6746] GPT:first_usable_lbas don't match. [ 117.861601][ T6746] GPT:34 != 290 [ 117.865302][ T6746] GPT: Use GNU Parted to correct GPT errors. [ 117.871491][ T6746] loop1: p1 p2 p3 [ 117.881536][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.911'. [ 117.901518][ T6750] loop3: detected capacity change from 0 to 2048 [ 117.920012][ T6750] EXT4-fs: Ignoring removed mblk_io_submit option [ 117.932624][ T6750] EXT4-fs: inline encryption not supported [ 117.977403][ T6750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 118.137040][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 118.315740][ T6771] FAULT_INJECTION: forcing a failure. [ 118.315740][ T6771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.328885][ T6771] CPU: 0 UID: 0 PID: 6771 Comm: syz.3.920 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.328960][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.328974][ T6771] Call Trace: [ 118.328981][ T6771] [ 118.328990][ T6771] __dump_stack+0x1d/0x30 [ 118.329021][ T6771] dump_stack_lvl+0x95/0xd0 [ 118.329088][ T6771] dump_stack+0x15/0x1b [ 118.329112][ T6771] should_fail_ex+0x263/0x280 [ 118.329221][ T6771] should_fail+0xb/0x20 [ 118.329250][ T6771] should_fail_usercopy+0x1a/0x20 [ 118.329293][ T6771] _copy_to_user+0x20/0xa0 [ 118.329321][ T6771] simple_read_from_buffer+0xb5/0x130 [ 118.329413][ T6771] proc_fail_nth_read+0x10e/0x150 [ 118.329447][ T6771] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 118.329517][ T6771] vfs_read+0x1ab/0x7f0 [ 118.329586][ T6771] ? __schedule+0x82d/0xc90 [ 118.329605][ T6771] ? __rcu_read_unlock+0x4e/0x70 [ 118.329718][ T6771] ? __fget_files+0x184/0x1c0 [ 118.329750][ T6771] ? mutex_lock+0x57/0x90 [ 118.329882][ T6771] ksys_read+0xdc/0x1a0 [ 118.329933][ T6771] __x64_sys_read+0x40/0x50 [ 118.329959][ T6771] x64_sys_call+0x2889/0x3000 [ 118.329992][ T6771] do_syscall_64+0xc0/0x2a0 [ 118.330088][ T6771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.330117][ T6771] RIP: 0033:0x7f418881b78e [ 118.330138][ T6771] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 118.330158][ T6771] RSP: 002b:00007f41872b6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 118.330179][ T6771] RAX: ffffffffffffffda RBX: 00007f41872b76c0 RCX: 00007f418881b78e [ 118.330198][ T6771] RDX: 000000000000000f RSI: 00007f41872b70a0 RDI: 0000000000000008 [ 118.330217][ T6771] RBP: 00007f41872b7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.330235][ T6771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.330252][ T6771] R13: 00007f4188ad6038 R14: 00007f4188ad5fa0 R15: 00007ffd0e431688 [ 118.330279][ T6771] [ 118.571476][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 118.583069][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 118.600809][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 118.686263][ T3402] usb 11-1: enqueue for inactive port 0 [ 118.692286][ T3402] usb 11-1: enqueue for inactive port 0 [ 118.786128][ T3402] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 118.966531][ T6794] loop0: detected capacity change from 0 to 512 [ 119.035045][ T6794] EXT4-fs: Ignoring removed nobh option [ 119.069615][ T6794] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.090528][ T6794] EXT4-fs (loop0): 1 truncate cleaned up [ 119.097528][ T6794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.214209][ T6800] loop5: detected capacity change from 0 to 2048 [ 119.256419][ T6800] EXT4-fs: Ignoring removed mblk_io_submit option [ 119.262959][ T6800] EXT4-fs: inline encryption not supported [ 119.401160][ T6800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 119.425793][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 119.470059][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.618761][ T6817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.317749][ T6832] usb usb1: usbfs: process 6832 (syz.5.939) did not claim interface 0 before use [ 120.711344][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 120.711364][ T29] audit: type=1400 audit(1769830084.152:2294): avc: denied { ioctl } for pid=6854 comm="syz.1.949" path="socket:[16359]" dev="sockfs" ino=16359 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 120.745320][ T6855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.949'. [ 120.757425][ T6855] netlink: 20 bytes leftover after parsing attributes in process `syz.1.949'. [ 120.771402][ T6855] dvmrp6: entered allmulticast mode [ 120.915814][ T6865] loop1: detected capacity change from 0 to 512 [ 120.931613][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.954'. [ 120.939029][ T6865] EXT4-fs: Ignoring removed nobh option [ 120.949751][ T6865] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.989185][ T6865] EXT4-fs (loop1): 1 truncate cleaned up [ 121.001542][ T6865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.298422][ T6887] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 121.305091][ T6887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.312678][ T6887] vhci_hcd vhci_hcd.0: Device attached [ 121.320722][ T6887] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(16) [ 121.323721][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.327447][ T6887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.327950][ T6887] vhci_hcd vhci_hcd.0: Device attached [ 121.381109][ T29] audit: type=1400 audit(1769830084.822:2295): avc: denied { accept } for pid=6893 comm="syz.2.964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.404912][ T6887] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(18) [ 121.411563][ T6887] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 121.419796][ T6887] vhci_hcd vhci_hcd.0: Device attached [ 121.441834][ T6887] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(20) [ 121.448507][ T6887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.456103][ T6887] vhci_hcd vhci_hcd.0: Device attached [ 121.479684][ T6901] FAULT_INJECTION: forcing a failure. [ 121.479684][ T6901] name failslab, interval 1, probability 0, space 0, times 0 [ 121.492444][ T6901] CPU: 0 UID: 0 PID: 6901 Comm: syz.1.965 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.492543][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 121.492574][ T6901] Call Trace: [ 121.492587][ T6901] [ 121.492598][ T6901] __dump_stack+0x1d/0x30 [ 121.492630][ T6901] dump_stack_lvl+0x95/0xd0 [ 121.492692][ T6901] dump_stack+0x15/0x1b [ 121.492718][ T6901] should_fail_ex+0x263/0x280 [ 121.492788][ T6901] should_failslab+0x8c/0xb0 [ 121.492812][ T6901] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 121.492850][ T6901] ? __alloc_skb+0x2f0/0x4b0 [ 121.492882][ T6901] __alloc_skb+0x2f0/0x4b0 [ 121.492923][ T6901] ? __alloc_skb+0x219/0x4b0 [ 121.492959][ T6901] netlink_ack+0xfd/0x500 [ 121.493033][ T6901] netlink_rcv_skb+0x192/0x220 [ 121.493073][ T6901] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.493103][ T6901] rtnetlink_rcv+0x1c/0x30 [ 121.493124][ T6901] netlink_unicast+0x5c0/0x690 [ 121.493308][ T6901] netlink_sendmsg+0x5c8/0x6f0 [ 121.493336][ T6901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.493361][ T6901] ____sys_sendmsg+0x5af/0x600 [ 121.493396][ T6901] ___sys_sendmsg+0x195/0x1e0 [ 121.493494][ T6901] __x64_sys_sendmsg+0xd4/0x160 [ 121.493539][ T6901] x64_sys_call+0x17ba/0x3000 [ 121.493581][ T6901] do_syscall_64+0xc0/0x2a0 [ 121.493625][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.493668][ T6901] RIP: 0033:0x7f691b40aeb9 [ 121.493753][ T6901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.493778][ T6901] RSP: 002b:00007f6919e67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.493805][ T6901] RAX: ffffffffffffffda RBX: 00007f691b685fa0 RCX: 00007f691b40aeb9 [ 121.493824][ T6901] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 121.493841][ T6901] RBP: 00007f6919e67090 R08: 0000000000000000 R09: 0000000000000000 [ 121.493859][ T6901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.493891][ T6901] R13: 00007f691b686038 R14: 00007f691b685fa0 R15: 00007ffe69f1eb98 [ 121.493922][ T6901] [ 121.735830][ T6904] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(22) [ 121.742671][ T6904] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.750324][ T6904] vhci_hcd vhci_hcd.0: Device attached [ 121.755762][ T6911] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 121.756566][ T6911] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 121.773695][ T6911] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 121.819765][ T6887] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(25) [ 121.826457][ T6887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.834227][ T6887] vhci_hcd vhci_hcd.0: Device attached [ 121.841836][ T6890] vhci_hcd: connection closed [ 121.842060][ T6625] vhci_hcd vhci_hcd.0: stop threads [ 121.842114][ T6888] vhci_hcd: connection closed [ 121.846834][ T6625] vhci_hcd vhci_hcd.0: release socket [ 121.846858][ T6625] vhci_hcd vhci_hcd.0: disconnect device [ 121.868684][ T6895] vhci_hcd: connection closed [ 121.868790][ T6898] vhci_hcd: connection closed [ 121.874128][ T6906] vhci_hcd: connection closed [ 121.880701][ T6907] vhci_hcd: connection closed [ 121.885713][ T6625] vhci_hcd vhci_hcd.0: stop threads [ 121.895786][ T6625] vhci_hcd vhci_hcd.0: release socket [ 121.901237][ T6625] vhci_hcd vhci_hcd.0: disconnect device [ 121.907402][ T6625] vhci_hcd vhci_hcd.0: stop threads [ 121.912665][ T6625] vhci_hcd vhci_hcd.0: release socket [ 121.918161][ T6625] vhci_hcd vhci_hcd.0: disconnect device [ 121.925766][ T6625] vhci_hcd vhci_hcd.0: stop threads [ 121.931052][ T6625] vhci_hcd vhci_hcd.0: release socket [ 121.936509][ T6625] vhci_hcd vhci_hcd.0: disconnect device [ 121.942712][ T6625] vhci_hcd vhci_hcd.0: stop threads [ 121.948007][ T6625] vhci_hcd vhci_hcd.0: release socket [ 121.953467][ T6625] vhci_hcd vhci_hcd.0: disconnect device [ 121.960515][ T6625] vhci_hcd vhci_hcd.0: stop threads [ 121.965790][ T6625] vhci_hcd vhci_hcd.0: release socket [ 121.971527][ T6625] vhci_hcd vhci_hcd.0: disconnect device [ 122.239184][ T6921] loop1: detected capacity change from 0 to 2048 [ 122.299470][ T6921] GPT:first_usable_lbas don't match. [ 122.304843][ T6921] GPT:34 != 290 [ 122.308407][ T6921] GPT: Use GNU Parted to correct GPT errors. [ 122.314523][ T6921] loop1: p1 p2 p3 [ 122.345090][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.969'. [ 122.470235][ T6925] loop5: detected capacity change from 0 to 4096 [ 122.560328][ T29] audit: type=1400 audit(1769830085.992:2296): avc: denied { mount } for pid=6893 comm="syz.2.964" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 122.632863][ T29] audit: type=1326 audit(1769830086.072:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6935 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8400daeb9 code=0x7ffc0000 [ 122.707949][ T29] audit: type=1326 audit(1769830086.072:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6935 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8400daeb9 code=0x7ffc0000 [ 122.731666][ T29] audit: type=1326 audit(1769830086.072:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6935 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8400daeb9 code=0x7ffc0000 [ 122.755299][ T29] audit: type=1326 audit(1769830086.072:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6935 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc8400daeb9 code=0x7ffc0000 [ 122.778845][ T29] audit: type=1326 audit(1769830086.072:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6935 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8400daeb9 code=0x7ffc0000 [ 122.802255][ T29] audit: type=1326 audit(1769830086.072:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6935 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8400daeb9 code=0x7ffc0000 [ 122.825731][ T29] audit: type=1326 audit(1769830086.072:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6935 comm="syz.0.973" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8400daeb9 code=0x7ffc0000 [ 122.880802][ T6925] loop5: detected capacity change from 0 to 256 [ 123.147629][ T6967] FAULT_INJECTION: forcing a failure. [ 123.147629][ T6967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.160871][ T6967] CPU: 0 UID: 0 PID: 6967 Comm: syz.3.982 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.160907][ T6967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 123.160925][ T6967] Call Trace: [ 123.160965][ T6967] [ 123.160989][ T6967] __dump_stack+0x1d/0x30 [ 123.161023][ T6967] dump_stack_lvl+0x95/0xd0 [ 123.161052][ T6967] dump_stack+0x15/0x1b [ 123.161075][ T6967] should_fail_ex+0x263/0x280 [ 123.161154][ T6967] should_fail+0xb/0x20 [ 123.161202][ T6967] should_fail_usercopy+0x1a/0x20 [ 123.161285][ T6967] _copy_from_user+0x1c/0xb0 [ 123.161314][ T6967] autofs_dev_ioctl+0xdd/0x6a0 [ 123.161415][ T6967] ? mutex_lock+0x57/0x90 [ 123.161448][ T6967] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 123.161491][ T6967] __se_sys_ioctl+0xce/0x140 [ 123.161665][ T6967] __x64_sys_ioctl+0x43/0x50 [ 123.161708][ T6967] x64_sys_call+0x14b0/0x3000 [ 123.161741][ T6967] do_syscall_64+0xc0/0x2a0 [ 123.161845][ T6967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.161874][ T6967] RIP: 0033:0x7f418885aeb9 [ 123.161894][ T6967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.161918][ T6967] RSP: 002b:00007f41872b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.162006][ T6967] RAX: ffffffffffffffda RBX: 00007f4188ad5fa0 RCX: 00007f418885aeb9 [ 123.162026][ T6967] RDX: 0000200000000200 RSI: 00000000c018937e RDI: 0000000000000003 [ 123.162103][ T6967] RBP: 00007f41872b7090 R08: 0000000000000000 R09: 0000000000000000 [ 123.162122][ T6967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.162140][ T6967] R13: 00007f4188ad6038 R14: 00007f4188ad5fa0 R15: 00007ffd0e431688 [ 123.162167][ T6967] [ 123.458732][ T6981] loop5: detected capacity change from 0 to 512 [ 123.469079][ T6983] loop1: detected capacity change from 0 to 512 [ 123.478471][ T6983] EXT4-fs: Ignoring removed nobh option [ 123.513259][ T6981] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.986: bg 0: block 393: padding at end of block bitmap is not set [ 123.529755][ T6983] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 123.593107][ T6981] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 123.722669][ T6981] EXT4-fs (loop5): 2 truncates cleaned up [ 123.783596][ T6983] EXT4-fs (loop1): 1 truncate cleaned up [ 123.790597][ T6983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.937334][ T6981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.968617][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz.5.986'. [ 124.020448][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.059858][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.218243][ T7022] FAULT_INJECTION: forcing a failure. [ 124.218243][ T7022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.231551][ T7022] CPU: 0 UID: 0 PID: 7022 Comm: syz.5.995 Not tainted syzkaller #0 PREEMPT(voluntary) [ 124.231587][ T7022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 124.231604][ T7022] Call Trace: [ 124.231612][ T7022] [ 124.231620][ T7022] __dump_stack+0x1d/0x30 [ 124.231678][ T7022] dump_stack_lvl+0x95/0xd0 [ 124.231701][ T7022] dump_stack+0x15/0x1b [ 124.231729][ T7022] should_fail_ex+0x263/0x280 [ 124.231805][ T7022] should_fail+0xb/0x20 [ 124.231836][ T7022] should_fail_usercopy+0x1a/0x20 [ 124.231875][ T7022] _copy_to_user+0x20/0xa0 [ 124.231900][ T7022] simple_read_from_buffer+0xb5/0x130 [ 124.231995][ T7022] proc_fail_nth_read+0x10e/0x150 [ 124.232027][ T7022] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 124.232130][ T7022] vfs_read+0x1ab/0x7f0 [ 124.232170][ T7022] ksys_read+0xdc/0x1a0 [ 124.232190][ T7022] __x64_sys_read+0x40/0x50 [ 124.232212][ T7022] x64_sys_call+0x2889/0x3000 [ 124.232246][ T7022] do_syscall_64+0xc0/0x2a0 [ 124.232318][ T7022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.232352][ T7022] RIP: 0033:0x7f96c91cb78e [ 124.232373][ T7022] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 124.232393][ T7022] RSP: 002b:00007f96c7c66fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 124.232492][ T7022] RAX: ffffffffffffffda RBX: 00007f96c7c676c0 RCX: 00007f96c91cb78e [ 124.232512][ T7022] RDX: 000000000000000f RSI: 00007f96c7c670a0 RDI: 0000000000000004 [ 124.232526][ T7022] RBP: 00007f96c7c67090 R08: 0000000000000000 R09: 0000000000000000 [ 124.232543][ T7022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.232560][ T7022] R13: 00007f96c9486038 R14: 00007f96c9485fa0 R15: 00007ffed4c39688 [ 124.232585][ T7022] [ 124.470433][ T7028] loop1: detected capacity change from 0 to 4096 [ 124.871181][ T7046] bridge0: entered promiscuous mode [ 124.878289][ T7046] bridge0: port 3(macsec1) entered blocking state [ 124.884789][ T7046] bridge0: port 3(macsec1) entered disabled state [ 124.892735][ T7046] macsec1: entered allmulticast mode [ 124.898141][ T7046] bridge0: entered allmulticast mode [ 124.929406][ T7046] macsec1: left allmulticast mode [ 124.934608][ T7046] bridge0: left allmulticast mode [ 124.956892][ T7046] bridge0: left promiscuous mode [ 124.990802][ T7095] Dead loop on virtual device ip6_vti0, fix it urgently! [ 125.116563][ T7028] loop1: detected capacity change from 0 to 256 [ 125.196708][ T7100] loop0: detected capacity change from 0 to 2048 [ 125.203474][ T7100] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.217366][ T7100] EXT4-fs: inline encryption not supported [ 125.268488][ T7100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 125.351659][ T7106] loop3: detected capacity change from 0 to 512 [ 125.383819][ T7106] EXT4-fs: Ignoring removed nobh option [ 125.403976][ T7106] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.440020][ T7106] EXT4-fs (loop3): 1 truncate cleaned up [ 125.446616][ T7106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.603920][ T7100] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 125.628959][ T7100] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 125.641748][ T7100] EXT4-fs (loop0): This should not happen!! Data will be lost [ 125.641748][ T7100] [ 125.651746][ T7100] EXT4-fs (loop0): Total free blocks count 0 [ 125.657828][ T7100] EXT4-fs (loop0): Free/Dirty block details [ 125.663803][ T7100] EXT4-fs (loop0): free_blocks=2415919104 [ 125.669766][ T7100] EXT4-fs (loop0): dirty_blocks=8208 [ 125.675090][ T7100] EXT4-fs (loop0): Block reservation details [ 125.681138][ T7100] EXT4-fs (loop0): i_reserved_data_blocks=513 [ 125.692450][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.759395][ T7120] loop1: detected capacity change from 0 to 512 [ 125.769339][ T7120] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.1020: iget: bad i_size value: 38620345925642 [ 125.782532][ T7120] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1020: couldn't read orphan inode 15 (err -117) [ 125.795597][ T7120] EXT4-fs (loop1): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.813670][ T7120] Direct I/O collision with buffered writes! File: /file1 Comm: syz.1.1020 [ 125.822946][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 125.841965][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 125.841985][ T29] audit: type=1326 audit(1769830089.282:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 125.871848][ T29] audit: type=1326 audit(1769830089.282:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 125.896697][ T29] audit: type=1326 audit(1769830089.282:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 125.920759][ T29] audit: type=1326 audit(1769830089.282:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 125.944201][ T29] audit: type=1326 audit(1769830089.282:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 125.967704][ T29] audit: type=1326 audit(1769830089.282:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 125.991266][ T29] audit: type=1326 audit(1769830089.282:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 126.014660][ T29] audit: type=1326 audit(1769830089.282:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 126.038247][ T29] audit: type=1326 audit(1769830089.282:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 126.061713][ T29] audit: type=1326 audit(1769830089.282:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7119 comm="syz.1.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691b40aeb9 code=0x7ffc0000 [ 126.090308][ T1670] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 126.103615][ T1670] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 126.116070][ T1670] EXT4-fs (loop1): This should not happen!! Data will be lost [ 126.116070][ T1670] [ 126.125711][ T1670] EXT4-fs (loop1): Total free blocks count 0 [ 126.131827][ T1670] EXT4-fs (loop1): Free/Dirty block details [ 126.138906][ T1670] EXT4-fs (loop1): free_blocks=0 [ 126.143883][ T1670] EXT4-fs (loop1): dirty_blocks=5 [ 126.149165][ T1670] EXT4-fs (loop1): Block reservation details [ 126.155512][ T1670] EXT4-fs (loop1): i_reserved_data_blocks=5 [ 126.184683][ T6625] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 126.263354][ T7132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 126.305065][ T7131] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.333599][ T7134] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1025: bg 0: block 393: padding at end of block bitmap is not set [ 126.372622][ T7137] Dead loop on virtual device ip6_vti0, fix it urgently! [ 126.384724][ T7134] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 126.423475][ T7134] EXT4-fs (loop5): 2 truncates cleaned up [ 126.566569][ T7134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.665911][ T7134] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 126.672445][ T7134] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 126.700433][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1025'. [ 126.726332][ T7134] hsr_slave_0: left promiscuous mode [ 126.743432][ T7134] hsr_slave_1: left promiscuous mode [ 126.903439][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.920370][ T7151] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1029'. [ 127.015555][ T7155] EXT4-fs: Ignoring removed oldalloc option [ 127.021737][ T7155] EXT4-fs: Ignoring removed bh option [ 127.106813][ T7155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.163992][ T7155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1031'. [ 127.351638][ T7175] pim6reg9: entered allmulticast mode [ 127.397697][ T7175] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1036'. [ 127.418708][ T7183] netlink: 'syz.3.1038': attribute type 2 has an invalid length. [ 127.426539][ T7183] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1038'. [ 127.536785][ T7188] set_capacity_and_notify: 3 callbacks suppressed [ 127.536803][ T7188] loop0: detected capacity change from 0 to 512 [ 127.587679][ T7188] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.1039: iget: bad i_size value: 38620345925642 [ 127.689399][ T7188] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.1039: couldn't read orphan inode 15 (err -117) [ 127.716009][ T7188] EXT4-fs (loop0): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.754874][ T7188] Direct I/O collision with buffered writes! File: /file1 Comm: syz.0.1039 [ 127.872162][ T1670] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 127.891925][ T1670] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 127.904391][ T1670] EXT4-fs (loop0): This should not happen!! Data will be lost [ 127.904391][ T1670] [ 127.914237][ T1670] EXT4-fs (loop0): Total free blocks count 0 [ 127.920399][ T1670] EXT4-fs (loop0): Free/Dirty block details [ 127.926354][ T1670] EXT4-fs (loop0): free_blocks=0 [ 127.931423][ T1670] EXT4-fs (loop0): dirty_blocks=5 [ 127.936593][ T1670] EXT4-fs (loop0): Block reservation details [ 127.942601][ T1670] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 127.979626][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 131587 with max blocks 1 with error 28 [ 128.032412][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1041'. [ 128.059015][ T7198] loop5: detected capacity change from 0 to 1024 [ 128.065915][ T7198] journal_path: Lookup failure for './file2' [ 128.072006][ T7198] EXT4-fs: error: could not find journal device path [ 128.093346][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.386933][ T7219] netlink: 'syz.0.1050': attribute type 2 has an invalid length. [ 128.394754][ T7219] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1050'. [ 128.434930][ T7228] loop0: detected capacity change from 0 to 512 [ 128.446881][ T7226] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(14) [ 128.453582][ T7226] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.461153][ T7226] vhci_hcd vhci_hcd.0: Device attached [ 128.475182][ T7228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.489233][ T7226] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(16) [ 128.495963][ T7226] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.503627][ T7226] vhci_hcd vhci_hcd.0: Device attached [ 128.509592][ T7228] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.530582][ T7237] loop5: detected capacity change from 0 to 2048 [ 128.539062][ T7226] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18) [ 128.545787][ T7226] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 128.553481][ T7226] vhci_hcd vhci_hcd.0: Device attached [ 128.576015][ T7226] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(20) [ 128.582742][ T7226] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.590558][ T7226] vhci_hcd vhci_hcd.0: Device attached [ 128.607079][ T3307] GPT:first_usable_lbas don't match. [ 128.612440][ T3307] GPT:34 != 290 [ 128.615967][ T3307] GPT: Use GNU Parted to correct GPT errors. [ 128.622191][ T3307] loop5: p1 p2 p3 [ 128.626592][ T7226] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(22) [ 128.633248][ T7226] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.640903][ T7226] vhci_hcd vhci_hcd.0: Device attached [ 128.649736][ T7226] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(24) [ 128.656397][ T7226] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 128.664089][ T7226] vhci_hcd vhci_hcd.0: Device attached [ 128.672660][ T7226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 128.681407][ T7226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 128.688243][ T7237] GPT:first_usable_lbas don't match. [ 128.691756][ T7226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 128.694938][ T7237] GPT:34 != 290 [ 128.706718][ T7237] GPT: Use GNU Parted to correct GPT errors. [ 128.712892][ T7237] loop5: p1 p2 p3 [ 128.715603][ T7246] vhci_hcd: connection closed [ 128.716814][ T1037] usb 3-1: new low-speed USB device number 4 using vhci_hcd [ 128.732159][ T7248] vhci_hcd: connection closed [ 128.732177][ T7238] vhci_hcd: connection closed [ 128.736990][ T7242] vhci_hcd: connection closed [ 128.746097][ T3487] vhci_hcd vhci_hcd.1: stop threads [ 128.751942][ T7235] vhci_hcd: connection closed [ 128.756138][ T3487] vhci_hcd vhci_hcd.1: release socket [ 128.758055][ T7229] vhci_hcd: connection closed [ 128.760861][ T3487] vhci_hcd vhci_hcd.1: disconnect device [ 128.780441][ T3487] vhci_hcd vhci_hcd.1: stop threads [ 128.785693][ T3487] vhci_hcd vhci_hcd.1: release socket [ 128.786186][ T7230] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 128.791239][ T3487] vhci_hcd vhci_hcd.1: disconnect device [ 128.805720][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.815366][ T3487] vhci_hcd vhci_hcd.1: stop threads [ 128.820739][ T3487] vhci_hcd vhci_hcd.1: release socket [ 128.826280][ T3487] vhci_hcd vhci_hcd.1: disconnect device [ 128.840971][ T3487] vhci_hcd vhci_hcd.1: stop threads [ 128.846295][ T3487] vhci_hcd vhci_hcd.1: release socket [ 128.851792][ T3487] vhci_hcd vhci_hcd.1: disconnect device [ 128.857970][ T3487] vhci_hcd vhci_hcd.1: stop threads [ 128.863268][ T3487] vhci_hcd vhci_hcd.1: release socket [ 128.868763][ T3487] vhci_hcd vhci_hcd.1: disconnect device [ 128.874803][ T3487] vhci_hcd vhci_hcd.1: stop threads [ 128.880132][ T3487] vhci_hcd vhci_hcd.1: release socket [ 128.885709][ T3487] vhci_hcd vhci_hcd.1: disconnect device [ 128.911889][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 129.045719][ T7264] loop0: detected capacity change from 0 to 1024 [ 129.060943][ T7264] EXT4-fs: inline encryption not supported [ 129.067462][ T7264] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.085146][ T7264] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8800e019, mo2=0000] [ 129.113224][ T7264] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1066: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.136161][ T7264] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.1066: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.150930][ T7264] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1066: Failed to acquire dquot type 0 [ 129.162750][ T7264] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 129.199213][ T7264] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1066: mark_inode_dirty error [ 129.227652][ T6960] udevd[6960]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 129.243911][ T7272] loop5: detected capacity change from 0 to 1024 [ 129.255511][ T7264] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 129.283040][ T7264] EXT4-fs (loop0): 1 orphan inode deleted [ 129.290167][ T7264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.290168][ T7272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.325542][ T12] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.368675][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 129.380472][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 129.410631][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 129.452375][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.463438][ T7264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.484417][ T7264] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.1066: Invalid inode table block 1 in block_group 0 [ 129.489212][ T7286] netlink: 'syz.2.1075': attribute type 2 has an invalid length. [ 129.504990][ T7286] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1075'. [ 129.516304][ T7264] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 129.530331][ T7264] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.1066: mark_inode_dirty error [ 129.553431][ T7288] loop3: detected capacity change from 0 to 2048 [ 129.597677][ T3307] GPT:first_usable_lbas don't match. [ 129.603049][ T3307] GPT:34 != 290 [ 129.606660][ T3307] GPT: Use GNU Parted to correct GPT errors. [ 129.612851][ T3307] loop3: p1 p2 p3 [ 129.624016][ T7299] loop1: detected capacity change from 0 to 2048 [ 129.667186][ T7288] GPT:first_usable_lbas don't match. [ 129.672589][ T7288] GPT:34 != 290 [ 129.676157][ T7288] GPT: Use GNU Parted to correct GPT errors. [ 129.682236][ T7288] loop3: p1 p2 p3 [ 129.691332][ T7299] GPT:first_usable_lbas don't match. [ 129.696864][ T7299] GPT:34 != 290 [ 129.700350][ T7299] GPT: Use GNU Parted to correct GPT errors. [ 129.706635][ T7299] loop1: p1 p2 p3 [ 130.050777][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 130.060326][ T7325] hsr_slave_0: left promiscuous mode [ 130.069388][ T7325] hsr_slave_1: left promiscuous mode [ 130.138134][ T7327] netlink: 'syz.0.1087': attribute type 2 has an invalid length. [ 130.146106][ T7327] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1087'. [ 130.218040][ T7332] loop0: detected capacity change from 0 to 4096 [ 130.230930][ T7332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.240720][ T7330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1088'. [ 130.337371][ T7332] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.404881][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1093'. [ 130.607652][ T7363] Dead loop on virtual device ip6_vti0, fix it urgently! [ 130.758476][ T7369] loop5: detected capacity change from 0 to 1024 [ 130.796505][ T7369] EXT4-fs: Ignoring removed oldalloc option [ 130.802493][ T7369] EXT4-fs: Ignoring removed bh option [ 130.849525][ T7369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.795582][ T7369] ================================================================== [ 131.803773][ T7369] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 131.811751][ T7369] [ 131.814097][ T7369] write to 0xffff88811ac62164 of 4 bytes by task 7375 on cpu 1: [ 131.821765][ T7369] xas_set_mark+0x12b/0x140 [ 131.826325][ T7369] __folio_start_writeback+0x17b/0x370 [ 131.831860][ T7369] ext4_bio_write_folio+0x5ad/0x9f0 [ 131.837103][ T7369] mpage_process_page_bufs+0x4a1/0x620 [ 131.842606][ T7369] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 131.848459][ T7369] ext4_do_writepages+0x9f6/0x2800 [ 131.853617][ T7369] ext4_writepages+0x18f/0x320 [ 131.858415][ T7369] do_writepages+0x1c6/0x310 [ 131.863047][ T7369] file_write_and_wait_range+0x178/0x2f0 [ 131.868724][ T7369] generic_buffers_fsync_noflush+0x45/0x130 [ 131.874668][ T7369] ext4_sync_file+0x1aa/0x680 [ 131.879397][ T7369] vfs_fsync_range+0x10d/0x130 [ 131.884201][ T7369] ext4_buffered_write_iter+0x34f/0x3c0 [ 131.889803][ T7369] ext4_file_write_iter+0x380/0xf70 [ 131.895074][ T7369] iter_file_splice_write+0x6bc/0xa80 [ 131.900482][ T7369] direct_splice_actor+0x156/0x2a0 [ 131.905625][ T7369] splice_direct_to_actor+0x311/0x670 [ 131.911035][ T7369] do_splice_direct+0x119/0x1a0 [ 131.915933][ T7369] do_sendfile+0x382/0x650 [ 131.920404][ T7369] __x64_sys_sendfile64+0x105/0x150 [ 131.925644][ T7369] x64_sys_call+0x2db1/0x3000 [ 131.930449][ T7369] do_syscall_64+0xc0/0x2a0 [ 131.935011][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.940941][ T7369] [ 131.943295][ T7369] read to 0xffff88811ac62164 of 4 bytes by task 7369 on cpu 0: [ 131.950874][ T7369] __writeback_single_inode+0x201/0x7b0 [ 131.956559][ T7369] writeback_single_inode+0x16d/0x3f0 [ 131.961993][ T7369] sync_inode_metadata+0x6e/0xa0 [ 131.966982][ T7369] generic_buffers_fsync_noflush+0xee/0x130 [ 131.972962][ T7369] ext4_sync_file+0x1aa/0x680 [ 131.977686][ T7369] vfs_fsync_range+0x10d/0x130 [ 131.982580][ T7369] ext4_buffered_write_iter+0x34f/0x3c0 [ 131.988187][ T7369] ext4_file_write_iter+0x380/0xf70 [ 131.993565][ T7369] iter_file_splice_write+0x6bc/0xa80 [ 131.998974][ T7369] direct_splice_actor+0x156/0x2a0 [ 132.004141][ T7369] splice_direct_to_actor+0x311/0x670 [ 132.009563][ T7369] do_splice_direct+0x119/0x1a0 [ 132.014453][ T7369] do_sendfile+0x382/0x650 [ 132.018925][ T7369] __x64_sys_sendfile64+0x105/0x150 [ 132.024183][ T7369] x64_sys_call+0x2db1/0x3000 [ 132.028911][ T7369] do_syscall_64+0xc0/0x2a0 [ 132.033469][ T7369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.039402][ T7369] [ 132.041760][ T7369] value changed: 0x0a000021 -> 0x04000021 [ 132.047597][ T7369] [ 132.049947][ T7369] Reported by Kernel Concurrency Sanitizer on: [ 132.056126][ T7369] CPU: 0 UID: 0 PID: 7369 Comm: syz.5.1101 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.065888][ T7369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 132.075983][ T7369] ================================================================== [ 132.109522][ T6193] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.806218][ T1037] usb 3-1: enqueue for inactive port 0 [ 133.811907][ T1037] usb 3-1: enqueue for inactive port 0 [ 133.886063][ T1037] vhci_hcd vhci_hcd.1: vhci_device speed not set