last executing test programs: 2.420625733s ago: executing program 3 (id=2959): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_io_uring_setup(0x1104, 0x0, &(0x7f00000003c0), &(0x7f0000000040)) (async) syz_io_uring_setup(0x1104, 0x0, &(0x7f00000003c0), &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003", @ANYBLOB="801cfc1936"], 0xec}, 0x1, 0x0, 0x0, 0x20000851}, 0x20040050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='ext4_sync_fs\x00', r4, 0x0, 0x5b}, 0xa) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='ext4_sync_fs\x00', r4, 0x0, 0x5b}, 0xa) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@noquota}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x536, &(0x7f0000000680)="$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") (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@noquota}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x536, &(0x7f0000000680)="$eJzs3c9rJFkdAPBv9XRn50dmO6sedMF1dVdmFp3uycbdDR7WEURPC+J6H2PSE8J00iHd2Z2EgJm/QBBR0ZNevAj+AYIMePEowoCeFVYU0YweBHVKqrqSyWa6k56xtzs/Ph+oqVevqvr7Xg2vUq/qURXAmfViRNyIiIdpmr4SEdUiv1RMsd2dsu0e7GzNZ1MSafr235JIirzd30qK+aVit/MR8bWvRHwzeTxue2Pz9lyz2Vgrluud5dV6e2Pz2tLy3GJjsbEyMzP9+uwbs6/NXh9KPS9HxJtf+tP3vv3TL7/5y8+++8ebf7maVTsmi/X76/EEskNUPmyDbtUr+bHYle2w9hTBjqtyXsPChV5bpGmaPkyr+3LujqRkAAAclF3AfigiPhURr0Q1zh1+OQsAAACcQOkXJuM/SfcJTQ8TffIBAACAE6SUj4FNSrViLMBklEq1WncM70fiYqnZanc+c6u1vrJw/4eTETEVldKtpWbjejFWeCoqSbY8nacfLb96YHkmIp6LiO9WL+TLtflWc2HcNz8AAADgjLh0oP//z2q3/w8AAACcMlOPZ5XGUQ4AAADgg9Oj/w8AAACcMvr/AAAAcKp99a23sind/f71wjsb67db71xbaLRv15bX52vzrbXV2mKrtZi/s2/5qN9rtlqrn4uV9Tv1TqPdqbc3Nm8ut9ZXOjeX3vcJbAAAAGCEnvvEvd8nEbH9+Qv5lJkYd6GAkSjvpZJi3qP1/+HZ7vy9ERUKGIlzA2zz3jMjKAgwcuVxFwAYm8q4CwCMXXLE+r6Dd35TzD853PIAAADDd+Vj/Z//H/4NgG2fCIATTiOGs+vA8/+0Oq6CACOXP/8fdMCviwU4VSoDjQAETrP/+/n/kdL0iQoEAAAM3WQ+JaVacXtvMkqlWi3icv5ZgEpya6nZuB4Rz0bE76qVZ7Ll6XzP5Mg+AwAAAAAAAAAAAAAAAAAAAAAAAADQlaZJpIe5cehaAAAA4ASIKP05+VX3Xf5Xqi9PHrw/MJH8K/8k8EREvPujt79/Z67TWZvO8v++l9/5QZH/6jjuYAAAAAAH7fbTd/vxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBMD3a25h/sbKX/3tmaH2Xcv34xIqb24udTd005zufz81GJiIv/SKK8b78kIs4NIf723Yj4aK/4SVasvZC94l/44OPHVHEUesW/NIT4cJbdy84/N3q1v1K8mM97t79yxPuWn1b/81/snf/O9Wn/lweM8fz9n9f7xr8b8Xy59/lnN37SJ/5LURoo/je+vrnZb13644gr0Tv+/lj1zvJqvb2xeW1peW6xsdhYmZmZfn32jdnXZq/Xby01G8W/PWN85+O/eHhY/S/2iT91RP1fHqj2Ef+9f2fnw91kpVf8qy/1iP/rnxRbPB6/VPzt+3SRztZf2U1vd9P7vfCz375wWP0XHtW/8iT//1cHrP9QGgoAMDTtjc3bc81mY+0kJCpPs1fWSz8OhZc4folvDfUH0zRNszbVY9W9iBjkd5I4DoclT4z7zAQAAAzbo4v+cZcEAAAAAAAAAAAAAAAAAAAAzq4hvjNsot9r9g7G3N5LJd4MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcG/8LAAD//3uY3uY=") syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_clone(0x800d400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setgroups(0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x89f1, &(0x7f0000000080)) ioctl$TIOCCBRK(r6, 0x5428) 2.338834144s ago: executing program 2 (id=2961): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) remap_file_pages(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x3, 0x2, 0x10000) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0xfff7, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000280)={0x80000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.335932989s ago: executing program 2 (id=2966): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x752887e04b6038ce, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r8 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x12, r8, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x24}, 0x14) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregs(0xd, r9, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r9, 0x1, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) 1.28515635s ago: executing program 3 (id=2968): unshare(0x66000080) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001000200000004000b"], 0x24}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="200000006900030500000000000000000000000a0000000000000000000000003c7acf8b042ac46c5d5b436de2373970520127bb93e624076c9632a199327cff62d99a55711d26c863a7beab5957ebadab8492b6347ba2e2f6a39a895e77cb218af9f51570e2623cfda1d601a96b710dd5266e71b7f00b98649aedbdb31aec120b3a67281ca19ea8acc4fe85c8c1020bee7f47c01fa448de38ae5de0d92df755eeacfb4c045617b1d7c1a0e58821bd60ef598bdc547caac2c10f648e81b48d440f523e4fd8b5b50a09fe6dd8387368bf2e1cbf87b7ed3c78c0e77eac3490594bce95d94ad221180a7332fb65c6652fad5523d7c2b101e4452fb5dd85538daa1520cd3d5e8a4f0bcb528f8de78ac150da65"], 0x20}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async) unshare(0x20000600) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) (async) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xb, 0x10, &(0x7f0000000380)=ANY=[], 0x0, 0xaed1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000b00)=ANY=[@ANYRES64=r0, @ANYBLOB="8174e188ce955fb20ba6ff1788b6a586b67acc368e4438774cd8fb5849de6eb60165bdf00efbf353562ef8ce3feb807e99f8003be4e057156d37bfa79622e480b13472e83f7aae9c0b150b795cd10dd81b870677d79b3dff61f9b50b22033ebcfb959d705a5f31658095fdc958c465e09c31249ac402c84a18c54b686e4763eaf6d67e46253d882c0895ef8475549536e9cd70cb3c2c7337477d3af59f0e2fdb5bfbea519798ea3c2db869", @ANYRES64=r2, @ANYRES8=r3], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) (async) r6 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x0, 0x1a2) fcntl$notify(r7, 0x402, 0x4) openat(r7, 0x0, 0x40000, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}}) (async) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) (async) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) (async) pwrite64(0xffffffffffffffff, &(0x7f00000001c0)="1f", 0x1, 0xfecc) (async) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) write$sndseq(r9, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async, rerun: 64) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (rerun: 64) 1.200228051s ago: executing program 2 (id=2971): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pause() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0xd) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="d19444f9d83ab1b90c0ff0a7eec7af0f5ba1c85ba4d777b8", @ANYRES64, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.090801863s ago: executing program 4 (id=2973): bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000007000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r1], 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000a00)="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", &(0x7f00000002c0)=""/69}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00', r4}, 0x18) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r5, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) 1.090457853s ago: executing program 3 (id=2974): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x8, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18804, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'veth1_to_batadv\x00'}) set_mempolicy(0x3, &(0x7f00000000c0)=0x5, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x20010, 0xffffffffffffffff, 0x3e651000) 1.077457443s ago: executing program 4 (id=2976): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="50030000160001082dbd700000000000fe880000000000000000000000000001fe88000000000000000000000000010100000000fffc00010000a020", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x350}}, 0x0) 1.047312774s ago: executing program 4 (id=2978): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000000000005f"], 0x0, 0x4d}, 0x20) 984.226904ms ago: executing program 3 (id=2979): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) remap_file_pages(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x3, 0x2, 0x10000) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0xfff7, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000280)={0x80000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 982.685755ms ago: executing program 4 (id=2980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000008000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000000000000000000000000500", [0x4, 0x40000000000000]}}) 923.559616ms ago: executing program 4 (id=2982): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffff8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x6, 0x0) r7 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x8) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000006c0)={0xbc, 0x0, &(0x7f00000005c0)=[@increfs={0x40046304, 0x2}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/207, 0xcf, 0x2, 0xc}, @fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0xb, 0x3}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}, 0x1000}, @free_buffer, @free_buffer={0x40086303, r7}, @release={0x40046306, 0x3}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x1101}, @fd={0x66642a85, 0x0, r8}, @fda={0x66646185, 0x7, 0x0, 0xe}}, &(0x7f00000003c0)={0x0, 0x18, 0x30}}}], 0x38, 0x0, &(0x7f0000000680)="ba5b053ba7e6c4b46800ddf34ad171125c9c0133a90dca095813b9d79b749c54a29b8ea3b2bebe8b6470f460151e8fbef7e3e700a27d4161"}) 889.635336ms ago: executing program 4 (id=2983): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x2, &(0x7f0000001f40)={0x0, 0x2c, 0x2, @thr={&(0x7f0000001e00)="41ca1329ce8ec84585225bf197256f", &(0x7f0000001e40)="46bcc10b77dc6a4377f6a5ba4a6eb0257dbfe8f539a1c36075a80cf7645a624e3e09bd0f354d04636fdabe033b78aa1e1474383b457f4942e5db1368faee135bf026211856fa2ff5bc1b99728df3e822d8b8a81b71687cdd574a9a7d55668465d8ca32abe30aa0061064d054657387e147fdb4a33a3e4791122e3237e58645d8254b77ffc4026778624055a22d9e0a56d65b9eb43726396d0a302cc91a02ea1f535d3427305fab38be76b5e6af7b9ee4bd9cfce03006e232b1a50f9f6642c6421253f0385049d38fc613bb8caf0d6135f61d2cec8fc61af7264c"}}, &(0x7f0000001f80)=0x0) timer_settime(r3, 0x1, &(0x7f0000001fc0)={{0x77359400}}, &(0x7f0000002000)) clock_gettime(0x0, &(0x7f0000000340)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) io_setup(0x1, &(0x7f00000012c0)=0x0) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r7, &(0x7f0000000080)="4e8fc38e", 0xb, 0x200000000004}]) 813.353677ms ago: executing program 1 (id=2984): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 770.185647ms ago: executing program 1 (id=2985): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000053"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x9c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_NAT_SRC={0x50, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @loopback}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x28}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x51}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x48000}, 0x80) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f00000000c0)={0x0, 0xf4240, 0x7}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r7}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r10 = dup(r9) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) 698.974329ms ago: executing program 3 (id=2986): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000003a000000bf91000000000000b7020000002000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 641.08512ms ago: executing program 0 (id=2989): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b7"], &(0x7f00000003c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$hidraw(r2, &(0x7f0000002380)=""/93, 0xfdef) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x200, 0x0, 0xff, 0x3}, 0x20) write$binfmt_script(r3, &(0x7f0000020480)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x9f7, 0x6, 0x6, 0xff}, {0x8, 0x0, 0x8, 0x6}, {0xfff9, 0x2, 0x3, 0x758dda4a}, {0xfff7, 0x5, 0x2, 0x1}, {0x4, 0x9, 0x6d, 0x7}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 423.769223ms ago: executing program 0 (id=2990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000018000000850000003400000095"], &(0x7f0000000000)='GPL\x00', 0x1}, 0x94) 362.840534ms ago: executing program 0 (id=2991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 362.362914ms ago: executing program 0 (id=2992): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000240)={"0b0a87a6f876257e9cc7a7f23278f21f", 0x0, 0x0, {0x3, 0x3}, {0xb, 0x6}, 0x1, [0x3, 0x7, 0x4, 0xf, 0x5, 0x7, 0x9, 0x3, 0x9, 0x0, 0x2, 0x3, 0x8, 0x7, 0xc, 0xd6]}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000980)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000001300)={r4, 0x9, 0x0, [0x10000, 0x7, 0x1, 0x9, 0x9], [0x8000000000000000, 0x1, 0xa, 0x5, 0xc, 0xfffffffffffffff8, 0x0, 0x7f, 0x0, 0xd0, 0x91a, 0x3ff, 0x242, 0x3b, 0xe9, 0x9, 0xffffffffffffffff, 0x232, 0x3, 0x1c00000, 0x5, 0xd1e, 0x8, 0x4, 0x4, 0x23, 0x400, 0x4, 0x0, 0x8, 0x6, 0x2, 0x33, 0x1, 0xfffffffffffffff8, 0x9, 0x5, 0xeb95, 0x1, 0x4, 0x6, 0x401, 0x40, 0x4, 0x2, 0x81df244, 0x100000001, 0x6, 0x89ff, 0x2, 0x4, 0x3, 0xe2, 0x0, 0x2, 0x90, 0xb3, 0x8, 0x8, 0x5, 0x1, 0x4, 0xa24, 0x0, 0x3, 0x9, 0xe, 0x7, 0x9, 0x3ff, 0x8, 0x1, 0xfff, 0x6, 0x2000000, 0x5, 0x18, 0x8, 0x7ff, 0x200, 0x9147, 0xe3, 0xff, 0x2, 0xb, 0x4, 0x1000, 0xd429, 0x2, 0x3, 0xe58, 0x10000, 0x1, 0x80, 0xffffffffffff8001, 0x6, 0x2, 0x4, 0x2421, 0xa, 0x5, 0x0, 0x7fffffffffffffff, 0x0, 0x7, 0x0, 0xbe9f, 0x3, 0x80000001, 0x3, 0x5, 0x20e, 0x2, 0x3, 0x8000, 0xff, 0x97, 0x4, 0x7, 0x8, 0xffffefff]}) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000000b00)={0x2, 0x6, @start={r4, 0x0, "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", "596e93f2ba23e5bc70f3d35e57c2342e680d2340d4c7bdeb923babb8c0e1ddd01a431d3e4d7681a1fb247c67afe07542786a0126a3c55a51702a3c40497691d2b0df57db838ae02a05c214657718238281aa4abeaadab2cf674135e5d050565a5c13357af85c64851f6517325be32145ab13d249f985319d12b008c8fa157f465eb029464f22ec1fb234abe220f3cc5c9d53a2b9d1d598f17b677ae73e38dbbccb72e693de963729f92b321bef2000591a9404f9c8de14ead4c7d24982fb29b272175ed0f576e4430a211e807b836b23de693e1bda3e1db152e039cb1741f284917ff14ff9bd24a9d790f67170d45c50089763c47d37d4811d2adb766c7922d78f3abb1bb372ef315925f68fa4872149e20ea1fd8ea8aa2f9ea7fdae09eadb7ccc68a9bb9c4fd97de14ea4f6eed330f7c244b5b0ecfb033da3f9acb1b86b97c710ffc516037cb4eb9b935df65f0d913d784d58d856186c46047871962356444cff519b3cab4dcd3fbc9b918752ae960d8b34cbdb0e6ac005939fbbe65a9072171fea8086e9dbb69316e004c90733374e666f9040e77d11658fdca9a1cdffd698a646fa92c4901ed047182f45f0af95b97ccb366a651f70018eb6dcd3f78faa59b0396f3e0e4486e39b60d1af71e14f88f27e0c77f8b0bdac40259d26fb3fe05a293b88680c8d696e2ec760fcf11482172c60f3b0eb4986fc6ab27ae4e7bfc896265dc1497383b0c93fd92a15ccc8fdbc689172ea01bf2b1c4617b689ce52ee50e2516108fb2cab48296fa9dc5e1a22ecf128299ddb31611449ad2f518442c708fd21bd38a1ea21865d2c823ad6cd91a1fbaa10247202ea07017180ca56dc37eaac0c3f13fb3cd4dc39d8d6c9595784ad5922926f046938607b68535269307fb150a87318528f0cbc2910076ac7d0d2ea812011244b442d27be52214d409906e72ebe4a13cbc8a71628a44120baf1815743f005a46d766085127dfdff95470af1ccb1452ec6c9a59067a6e838b718d5556c838268c43fe19994a429ccc5f128ad381bc55c99e4cf70e0ec07bd19c79c7daecbf45a3da47ee5d5a9ae9f34cdd14e8912f3d24722737f279dce6a05e718e22a2b578a28876e84911123ac11f67b6fd3c7626761e602363e6597310d3975ccb9206c3c4718defe29623bc01d519eb46be377225b00da39a4401ea026e193cfa061e63a6f766c3eb038a2efb3f8a421dbb6c6c3976234442cf801255277251af84d0acebba66b73843786dfb334d3511602dd2ebedde619ae1f5e42269a2741f505595f1455ccafb5d5c1c0d65e97e2ea473715a10030c9bb1c48815bd2d77f358696a02b370eac8f993b6577ff3d81a9de2db0f13ab61d21a4054fae2b549526988d549987ce3830228c43c82a30f540ed0a6c447bd2f779986e3100fc3f8f1cc85cacd9ab4a5f4c8a8dd5bdef6042c3"}, [0x81, 0xd7a5, 0x2, 0x5, 0x8, 0x7, 0x8, 0x41, 0x3, 0xdb3, 0x1, 0xfffffffffffffff7, 0x200, 0x8, 0x3, 0x1, 0x9, 0xb, 0x5, 0x2, 0x7, 0x7fff, 0x8, 0x80000000, 0x800, 0x0, 0x100, 0x1, 0x2, 0x80000001, 0x7fffffff, 0x1, 0xe, 0x7, 0xffff, 0x9, 0x9, 0x1, 0x6, 0x7, 0x4, 0x1, 0x8, 0x5, 0x10, 0x9, 0x2, 0x5, 0x1, 0x1000000, 0x42b898c2, 0x84f, 0x32c7, 0x7fffffff, 0x4, 0x5, 0xfffffffffffffffd, 0x4, 0x5, 0x5a6, 0x1000, 0xfff, 0x7, 0x2253]}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x18, 0x0, "50e4d101a949f3f4d3479fb3110fbb83dc7a2414e74ef9c682c427e1a542df3531062020eb16da11d6707d82272beab27a1da6e527cceef0e7db687b56729c203d01b7693f6d4c81a64de132e818dea3"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in, 0x0, 0x0, 0x1d, 0x0, "d3d87bc1779df0260137ffea3b267abe0be604d99164ceede9ce200eb018abebbf99a8ae25b276a23593abc5bfbcd104244b1bcd3f8dcc8bb1afb8237f33ee41a904e61d65a7bacfec9dc935544d3f64"}, 0xd8) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000c00)={{}, r2, 0x4, @unused=[0x7f, 0x7ff, 0x6, 0x1], @devid=r4}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) utime(0x0, 0x0) 335.754984ms ago: executing program 1 (id=2993): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="f7e80100896b19c8a99300000000140510"], 0x34}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000020000003c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 298.729505ms ago: executing program 1 (id=2994): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@delalloc}, {@noload}, {@acl}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x783, &(0x7f0000001000)="$eJzs3c9rHFUcAPDvbJKmSauJIGg9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQg4tIngRVDwIeunZH/Xm1R9X/S88SEvVtFjxIJHZH+222U03bXY3kM8HXva9mdm89903P97sDDsB7FkT6Z9MxKGI+DiJGKtPTyJiqJobjDhRW+72+lo+TUlsbLz9Z1Jd5tb6Wj6a3pM6UC88HRE/fRBxOLO53vLK6nyuWCws1ctTlYXzU+WV1SPnFnJzhbnC4rHpmZmjx186fmznYv3719WD1z954/lvT/z7/lNXP/o5iRNxsD6vOY6dMhET9c9kKP0I7/H6TlfWZ0m/G8BDSTfNgdpWHodiLAaquTZGetkyAKBbNgCAPSgxBgCAPabxPcCt9bV8I/X3G4neuvFaROyvxd+4vlmbM1i/Zre/eh109FZyz5WRJCLGd6D+iYj48vt3v05T1PvBtTSgFy5djogz4xOb9//JpnsWtuuFrWZuDFdfJu6bvNeOP9BPP6Tjn5dbjf8yd8Y/0WL8M9xi230YD97+M9d2oJq20vHfq033tt1uir9ufKBeeqw65htKzp4rFtJ92+MRMRlDw2l5urpo65Hb5M3/brarv3n899en732V1p++3l0ic21w+N73zOYquUeNu+HG5YhnBlvFn9zp/6TN+PdUh3W8+cqHX7Sbl8afxttIm+Pvro0rEc+17P+7fZlseX/iVHV1mGqsFC1899vno+3qb+7/NKX1N84FeiHt/9Gt4x9Pmu/XLG+/jl+ujP3Ybt6D42+9/u9L3qnm99WnXcxVKkvTEfuStzZPP3r3vY1yY/k0/slnW2//tWpbr//pOeGZDuMfvP7HNw8ff3el8c9uq/+3n7l6e36gXf2d9f9MNTdZn9LJ/q/TBj7KZwcAAAAAAAAAAAAAAAAAAAAAAAAAncpExMFIMtk7+Uwmm609w/vJGM0US+XK4bOl5cXZqD4rezyGMo2fuhxr+j3U6frv4TfKR+8rvxgRT0TEZ8Mj1XI2XyrO9jt4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKg70Ob5/6nfh/vdOgCga/b3uwEAQM85/gPA3rO94/9I19oBAPSO838A2Hs6Pv6f6W47AIDecf4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl506eTJNG/+sr+XT8uyFleX50oUjs4XyfHZhOZ/Nl5bOZ+dKpbliIZsvLbT9R5dqL8VS6fxMLC5fnKoUypWp8srq6YXS8mLl9LmF3FzhdGGoZ5EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQOfKK6vzuWKxsCSzZWZkdzRj12QGY1c0Q6Zrmea9xEj/dlAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9z/AQAA//+MoS4e") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001400)=ANY=[@ANYBLOB="000000004c900200070000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000040000000000000ffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 238.767986ms ago: executing program 2 (id=2995): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) 238.273046ms ago: executing program 0 (id=2996): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) remap_file_pages(&(0x7f0000fee000/0x12000)=nil, 0x12000, 0x3, 0x2, 0x10000) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0xfff7, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000000280)={0x80000000, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff], 0x1}, 0x58) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f0000000040)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) socket(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 237.873916ms ago: executing program 3 (id=2997): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x80, &(0x7f00000000c0)="1a00000002000000", 0x8) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x188, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x158, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xfffffffffffffea8, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r3, 0x891b, &(0x7f00000000c0)={'bridge0\x00', {0x2, 0x0, @private}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)={{0x14}, [@NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0xa03, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}}, 0x0) 236.223636ms ago: executing program 1 (id=2998): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac1414000000000000000000000000000000000000ffffff8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004800020063626328616573290000"], 0x184}}, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r4 = fsmount(0xffffffffffffffff, 0x0, 0x85) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r2, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5}, 0x50) r6 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010700000000fcdbdf25410000000e0001006e657464657673696d0000004f0002006e657464657673696d300000"], 0x34}}, 0x4c000) fallocate(r6, 0x0, 0x0, 0x1001f0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000d00)={{}, {}, [], {0x4, 0x5}, [], {}, {0x20, 0x1}}, 0x24, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) socket(0x2, 0x80805, 0x0) copy_file_range(r6, 0x0, r6, &(0x7f0000000840)=0xc615, 0x1000, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={0x1, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000540)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) write$cgroup_type(r4, &(0x7f00000007c0), 0x9) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0xfffffff6, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x12, &(0x7f0000000380)=@raw=[@ldst={0x1, 0x1, 0x3, 0x3, 0xb, 0xfffffffffffffffc, 0x4}, @call={0x85, 0x0, 0x0, 0xb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_val={0x18, 0x4, 0x2, 0x0, r5}, @exit], &(0x7f00000000c0)='syzkaller\x00', 0xe, 0xed, &(0x7f0000000440)=""/237, 0x41000, 0x2, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000140)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000600)=[r9, r10, r11], &(0x7f0000000640)=[{0x5, 0x4, 0xc, 0xc}, {0x3, 0x4, 0x2, 0x3}, {0x0, 0x4, 0x3, 0xc}, {0x2, 0x2, 0x2, 0x7}, {0x2, 0x1, 0xd, 0x5}, {0x5, 0x5, 0x0, 0xc}], 0x10, 0x7}, 0x94) 1.780359ms ago: executing program 2 (id=2999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="50030000160001082dbd700000000000fe880000000000000000000000000001fe88000000000000000000000000010100000000fffc00010000a0200000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x350}}, 0x0) 727.419µs ago: executing program 2 (id=3000): epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001680)={0x68, 0x0, &(0x7f0000001580)=[@decrefs={0x40046307, 0x3}, @exit_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001440)={@flat=@weak_handle, @ptr={0x70742a85, 0x1, &(0x7f0000001400)=""/17, 0x11, 0x1, 0x23}, @flat=@handle={0x73682a85, 0x1, 0x2}}, &(0x7f0000001540)={0x0, 0x18, 0x40}}, 0x400}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000001340)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000200)={0x2, r3, 'id1\x00'}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd4, 0x7fffffffffffffff}, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f0000001380)={0x0, 'batadv0\x00', 0x4}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x10}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x7fff}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="6b6ecb", 0x3, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r6}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="fcffe9f2", 0x4}], 0x1}}], 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001200010500"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000feffffff0000000000600002"], 0xac}, 0x1, 0x0, 0x0, 0x8050}, 0x0) 446.229µs ago: executing program 1 (id=3001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0xe0f5, 0x2, 0x2, 0xf2}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 0s ago: executing program 0 (id=3002): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$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") getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x1, 0x8, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0xb, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffff7f}, {0x0, 0x0, 0x0, 0x2, 0x80000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x2}, {0xffff0000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x80, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x7, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5, 0x1000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0x7}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x0, 0x1}, {0x0, 0x7fff}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x200000, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000004}, {}, {}, {0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) kernel console output (not intermixed with test programs): 2.769664][ T8668] lo speed is unknown, defaulting to 1000 [ 112.779859][ T29] audit: type=1326 audit(1751145874.529:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8692 comm="syz.3.1817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8c87be929 code=0x7ffc0000 [ 113.004347][ T8715] __nla_validate_parse: 8 callbacks suppressed [ 113.004364][ T8715] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1824'. [ 113.111380][ T8728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1824'. [ 113.143870][ T8702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1820'. [ 113.613697][ T8754] lo speed is unknown, defaulting to 1000 [ 113.794268][ T8758] veth13: entered promiscuous mode [ 113.859834][ T8762] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.001347][ T8762] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.054216][ T8762] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.117618][ T8762] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.208243][ T8762] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.236373][ T8762] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.275583][ T8762] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.323023][ T8762] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.553977][ T8788] 9pnet_fd: Insufficient options for proto=fd [ 114.871450][ T8801] syzkaller0: entered allmulticast mode [ 114.879189][ T8801] syzkaller0 (unregistering): left allmulticast mode [ 115.039675][ T8804] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1858'. [ 115.112729][ T8805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1858'. [ 115.551860][ T8793] syz.1.1854 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 115.562964][ T8793] CPU: 0 UID: 0 PID: 8793 Comm: syz.1.1854 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 115.563000][ T8793] Tainted: [W]=WARN [ 115.563006][ T8793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.563019][ T8793] Call Trace: [ 115.563026][ T8793] [ 115.563035][ T8793] __dump_stack+0x1d/0x30 [ 115.563067][ T8793] dump_stack_lvl+0xe8/0x140 [ 115.563085][ T8793] dump_stack+0x15/0x1b [ 115.563181][ T8793] dump_header+0x81/0x220 [ 115.563214][ T8793] oom_kill_process+0x334/0x3f0 [ 115.563263][ T8793] out_of_memory+0x979/0xb80 [ 115.563391][ T8793] try_charge_memcg+0x5e6/0x9e0 [ 115.563421][ T8793] charge_memcg+0x51/0xc0 [ 115.563453][ T8793] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 115.563516][ T8793] __read_swap_cache_async+0x1df/0x350 [ 115.563551][ T8793] swap_cluster_readahead+0x277/0x3e0 [ 115.563587][ T8793] swapin_readahead+0xde/0x6f0 [ 115.563680][ T8793] ? __filemap_get_folio+0x4f7/0x6b0 [ 115.563709][ T8793] ? swap_cache_get_folio+0x77/0x200 [ 115.563779][ T8793] do_swap_page+0x301/0x2430 [ 115.563801][ T8793] ? css_rstat_updated+0xcd/0x5b0 [ 115.563852][ T8793] ? __pfx_default_wake_function+0x10/0x10 [ 115.563874][ T8793] handle_mm_fault+0x9a5/0x2be0 [ 115.563892][ T8793] ? mas_walk+0xf2/0x120 [ 115.563998][ T8793] do_user_addr_fault+0x636/0x1090 [ 115.564023][ T8793] ? fpregs_restore_userregs+0xad/0x1d0 [ 115.564049][ T8793] ? switch_fpu_return+0xe/0x20 [ 115.564102][ T8793] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 115.564150][ T8793] exc_page_fault+0x62/0xa0 [ 115.564178][ T8793] asm_exc_page_fault+0x26/0x30 [ 115.564227][ T8793] RIP: 0033:0x7fd8c5c3538c [ 115.564242][ T8793] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 115.564256][ T8793] RSP: 002b:00007ffdd4a4a7d0 EFLAGS: 00010202 [ 115.564270][ T8793] RAX: 0000000000000000 RBX: 00007fd8c5f85fa0 RCX: 0000000000000000 [ 115.564283][ T8793] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558f343808 [ 115.564360][ T8793] RBP: 00007fd8c5f87ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 115.564445][ T8793] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001b138 [ 115.564458][ T8793] R13: 00007ffdd4a4a8c0 R14: ffffffffffffffff R15: 00007ffdd4a4a8e0 [ 115.564478][ T8793] [ 115.564485][ T8793] memory: usage 307200kB, limit 307200kB, failcnt 826 [ 115.743019][ T8827] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1860'. [ 115.747163][ T8793] memory+swap: usage 309628kB, limit 9007199254740988kB, failcnt 0 [ 115.820414][ T8793] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 115.827762][ T8793] Memory cgroup stats for /syz1: [ 115.828346][ T8793] cache 0 [ 115.836257][ T8793] rss 0 [ 115.839053][ T8793] shmem 0 [ 115.841985][ T8793] mapped_file 0 [ 115.845433][ T8793] dirty 0 [ 115.848405][ T8793] writeback 0 [ 115.851698][ T8793] workingset_refault_anon 192 [ 115.856594][ T8793] workingset_refault_file 586 [ 115.861320][ T8793] swap 2486272 [ 115.864696][ T8793] swapcached 16384 [ 115.868414][ T8793] pgpgin 155816 [ 115.871978][ T8793] pgpgout 155812 [ 115.875530][ T8793] pgfault 163077 [ 115.879145][ T8793] pgmajfault 130 [ 115.882743][ T8793] inactive_anon 16384 [ 115.886812][ T8793] active_anon 0 [ 115.890298][ T8793] inactive_file 0 [ 115.894107][ T8793] active_file 0 [ 115.897660][ T8793] unevictable 0 [ 115.901272][ T8793] hierarchical_memory_limit 314572800 [ 115.906649][ T8793] hierarchical_memsw_limit 9223372036854771712 [ 115.912890][ T8793] total_cache 0 [ 115.916361][ T8793] total_rss 0 [ 115.919725][ T8793] total_shmem 0 [ 115.923424][ T8793] total_mapped_file 0 [ 115.927834][ T8793] total_dirty 0 [ 115.931452][ T8793] total_writeback 0 [ 115.935289][ T8793] total_workingset_refault_anon 192 [ 115.940576][ T8793] total_workingset_refault_file 586 [ 115.945983][ T8793] total_swap 2486272 [ 115.949965][ T8793] total_swapcached 16384 [ 115.955169][ T8793] total_pgpgin 155833 [ 115.959202][ T8793] total_pgpgout 155829 [ 115.963285][ T8793] total_pgfault 163105 [ 115.967401][ T8793] total_pgmajfault 131 [ 115.971486][ T8793] total_inactive_anon 16384 [ 115.971523][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1866'. [ 115.976072][ T8793] total_active_anon 0 [ 115.976084][ T8793] total_inactive_file 0 [ 115.985110][ T8835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1866'. [ 115.989101][ T8793] total_active_file 0 [ 115.989111][ T8793] total_unevictable 0 [ 115.989118][ T8793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1854,pid=8793,uid=0 [ 115.989194][ T8793] Memory cgroup out of memory: Killed process 8793 (syz.1.1854) total-vm:93620kB, anon-rss:936kB, file-rss:22204kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 116.952646][ T8867] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1879'. [ 117.022866][ T8867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1879'. [ 117.034190][ T8879] veth17: entered promiscuous mode [ 117.084810][ T8884] vlan0: entered promiscuous mode [ 117.694799][ T8922] syz_tun: entered promiscuous mode [ 117.714956][ T8922] batadv_slave_0: entered promiscuous mode [ 117.737548][ T8922] hsr2: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 117.747633][ T8922] hsr2: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 117.789549][ T8922] hsr2: entered allmulticast mode [ 117.795937][ T8922] syz_tun: entered allmulticast mode [ 117.801241][ T8922] batadv_slave_0: entered allmulticast mode [ 117.881812][ T29] kauditd_printk_skb: 359 callbacks suppressed [ 117.881835][ T29] audit: type=1326 audit(1751145879.392:3495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.1.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c5d5e929 code=0x7ffc0000 [ 117.911706][ T29] audit: type=1326 audit(1751145879.392:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.1.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fd8c5d5e929 code=0x7ffc0000 [ 117.935175][ T29] audit: type=1326 audit(1751145879.392:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.1.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c5d5e929 code=0x7ffc0000 [ 117.958772][ T29] audit: type=1326 audit(1751145879.392:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.1.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd8c5d5e929 code=0x7ffc0000 [ 117.982451][ T29] audit: type=1326 audit(1751145879.392:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.1.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c5d5e929 code=0x7ffc0000 [ 118.006024][ T29] audit: type=1326 audit(1751145879.392:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.1.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd8c5d5e929 code=0x7ffc0000 [ 118.039556][ T8913] bond5: entered promiscuous mode [ 118.044679][ T8913] bond5: entered allmulticast mode [ 118.082466][ T8913] 8021q: adding VLAN 0 to HW filter on device bond5 [ 118.102376][ T8913] bond5 (unregistering): Released all slaves [ 118.139346][ T29] audit: type=1400 audit(1751145879.532:3501): avc: denied { ioctl } for pid=8912 comm="syz.1.1895" path="socket:[23682]" dev="sockfs" ino=23682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.205120][ T29] audit: type=1326 audit(1751145879.682:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.1.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c5d5e929 code=0x7ffc0000 [ 118.228817][ T29] audit: type=1326 audit(1751145879.682:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8912 comm="syz.1.1895" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c5d5e929 code=0x7ffc0000 [ 118.358491][ T8969] netlink: 'syz.3.1914': attribute type 4 has an invalid length. [ 118.378898][ T8977] __nla_validate_parse: 2 callbacks suppressed [ 118.378913][ T8977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1913'. [ 118.396609][ T8969] netlink: 'syz.3.1914': attribute type 4 has an invalid length. [ 118.407139][ T4889] lo speed is unknown, defaulting to 1000 [ 118.412907][ T4889] syz0: Port: 1 Link ACTIVE [ 118.717036][ T8986] lo speed is unknown, defaulting to 1000 [ 119.153074][ T29] audit: type=1404 audit(1751145880.580:3504): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 119.341588][ T9033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1934'. [ 119.350744][ T9033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1934'. [ 120.211043][ T9075] lo speed is unknown, defaulting to 1000 [ 120.512712][ T9078] lo speed is unknown, defaulting to 1000 [ 120.555860][ T9079] netlink: 'syz.2.1948': attribute type 4 has an invalid length. [ 120.563710][ T9079] netlink: 'syz.2.1948': attribute type 3 has an invalid length. [ 120.571452][ T9079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1948'. [ 120.710667][ T9093] lo speed is unknown, defaulting to 1000 [ 120.849866][ T9078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1950'. [ 120.900627][ T9078] ipvlan0: entered promiscuous mode [ 120.957538][ T9101] hub 8-0:1.0: USB hub found [ 120.962371][ T9101] hub 8-0:1.0: 8 ports detected [ 121.604761][ T9121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1964'. [ 121.690429][ T9140] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1970'. [ 121.700962][ T9140] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1970'. [ 121.710048][ T9140] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1970'. [ 121.762023][ T9140] wireguard0: entered promiscuous mode [ 121.767775][ T9140] wireguard0: entered allmulticast mode [ 122.196647][ T9158] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 122.315795][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1980'. [ 122.668321][ T9185] SELinux: Context system_u:object_r:xen_device_t:s0 is not valid (left unmapped). [ 123.227985][ T9247] x_tables: duplicate underflow at hook 2 [ 123.240183][ T9238] lo speed is unknown, defaulting to 1000 [ 123.396890][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 123.396904][ T29] audit: type=1400 audit(1751145884.555:3711): avc: denied { create } for pid=9269 comm="syz.4.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.456732][ T9289] netlink: 'syz.2.2000': attribute type 1 has an invalid length. [ 123.498718][ T9281] siw: device registration error -23 [ 123.501238][ T29] audit: type=1400 audit(1751145884.583:3712): avc: denied { ioctl } for pid=9269 comm="syz.4.1999" path="socket:[25116]" dev="sockfs" ino=25116 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 123.529948][ T29] audit: type=1326 audit(1751145884.583:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 123.530122][ T9289] 8021q: adding VLAN 0 to HW filter on device bond8 [ 123.555307][ T29] audit: type=1326 audit(1751145884.583:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 123.585477][ T29] audit: type=1326 audit(1751145884.592:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4d492d290 code=0x7ffc0000 [ 123.609172][ T29] audit: type=1326 audit(1751145884.592:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe4d4930157 code=0x7ffc0000 [ 123.634469][ T29] audit: type=1326 audit(1751145884.592:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 123.658126][ T29] audit: type=1326 audit(1751145884.592:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe4d4930157 code=0x7ffc0000 [ 123.683196][ T29] audit: type=1326 audit(1751145884.592:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe4d492d58a code=0x7ffc0000 [ 123.706937][ T29] audit: type=1326 audit(1751145884.592:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9269 comm="syz.4.1999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 123.829800][ T9309] veth19: entered promiscuous mode [ 124.309120][ T9352] __nla_validate_parse: 2 callbacks suppressed [ 124.309136][ T9352] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2022'. [ 124.361312][ T9354] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2023'. [ 124.403583][ T9352] netlink: 'syz.2.2022': attribute type 1 has an invalid length. [ 124.427704][ T9360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2023'. [ 124.458154][ T9365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2022'. [ 124.511452][ T9352] 8021q: adding VLAN 0 to HW filter on device bond9 [ 124.667775][ T9375] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2026'. [ 124.696005][ T9365] bond9 (unregistering): Released all slaves [ 124.864976][ T9396] Cannot find del_set index 2 as target [ 124.927752][ T9404] veth11: entered promiscuous mode [ 125.286932][ T9439] 9pnet_fd: Insufficient options for proto=fd [ 125.398101][ T9435] lo speed is unknown, defaulting to 1000 [ 125.498967][ T9446] lo speed is unknown, defaulting to 1000 [ 125.544248][ T9468] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2063'. [ 125.610350][ T9473] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2063'. [ 125.782355][ T9488] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 125.812187][ T9493] netlink: 'syz.2.2071': attribute type 1 has an invalid length. [ 125.850628][ T9488] vhci_hcd: default hub control req: 0200 v0000 i0000 l31125 [ 125.884708][ T9493] 8021q: adding VLAN 0 to HW filter on device bond9 [ 125.958275][ T9497] veth21: entered promiscuous mode [ 126.616544][ T9547] lo speed is unknown, defaulting to 1000 [ 126.769620][ T9559] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2091'. [ 127.029883][ T9519] syz.2.2079 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 127.044329][ T9519] CPU: 0 UID: 0 PID: 9519 Comm: syz.2.2079 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 127.044444][ T9519] Tainted: [W]=WARN [ 127.044451][ T9519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.044516][ T9519] Call Trace: [ 127.044523][ T9519] [ 127.044532][ T9519] __dump_stack+0x1d/0x30 [ 127.044555][ T9519] dump_stack_lvl+0xe8/0x140 [ 127.044616][ T9519] dump_stack+0x15/0x1b [ 127.044631][ T9519] dump_header+0x81/0x220 [ 127.044702][ T9519] oom_kill_process+0x334/0x3f0 [ 127.044730][ T9519] out_of_memory+0x979/0xb80 [ 127.044828][ T9519] try_charge_memcg+0x5e6/0x9e0 [ 127.044855][ T9519] obj_cgroup_charge_pages+0xa6/0x150 [ 127.044954][ T9519] __memcg_kmem_charge_page+0x9f/0x170 [ 127.045052][ T9519] __alloc_frozen_pages_noprof+0x188/0x360 [ 127.045092][ T9519] alloc_pages_mpol+0xb3/0x250 [ 127.045189][ T9519] alloc_pages_noprof+0x90/0x130 [ 127.045233][ T9519] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 127.045274][ T9519] __kvmalloc_node_noprof+0x30f/0x4e0 [ 127.045307][ T9519] ? ip_set_alloc+0x1f/0x30 [ 127.045365][ T9519] ? ip_set_alloc+0x1f/0x30 [ 127.045436][ T9519] ip_set_alloc+0x1f/0x30 [ 127.045462][ T9519] hash_netiface_create+0x282/0x740 [ 127.045569][ T9519] ? __pfx_hash_netiface_create+0x10/0x10 [ 127.045628][ T9519] ip_set_create+0x3c9/0x960 [ 127.045665][ T9519] ? __nla_parse+0x40/0x60 [ 127.045706][ T9519] nfnetlink_rcv_msg+0x4c6/0x590 [ 127.045748][ T9519] ? selinux_capable+0x1f9/0x270 [ 127.045802][ T9519] netlink_rcv_skb+0x120/0x220 [ 127.045836][ T9519] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 127.045863][ T9519] nfnetlink_rcv+0x16b/0x1690 [ 127.045885][ T9519] ? __kfree_skb+0x109/0x150 [ 127.045966][ T9519] ? nlmon_xmit+0x4f/0x60 [ 127.045988][ T9519] ? consume_skb+0x49/0x150 [ 127.046012][ T9519] ? nlmon_xmit+0x4f/0x60 [ 127.046030][ T9519] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 127.046145][ T9519] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 127.046253][ T9519] ? __dev_queue_xmit+0x182/0x1fb0 [ 127.046313][ T9519] ? search_extable+0x53/0x80 [ 127.046337][ T9519] ? ref_tracker_free+0x37d/0x3e0 [ 127.046433][ T9519] ? __netlink_deliver_tap+0x4dc/0x500 [ 127.046469][ T9519] netlink_unicast+0x5a1/0x670 [ 127.046511][ T9519] netlink_sendmsg+0x58b/0x6b0 [ 127.046534][ T9519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.046625][ T9519] __sock_sendmsg+0x142/0x180 [ 127.046647][ T9519] ____sys_sendmsg+0x31e/0x4e0 [ 127.046678][ T9519] ___sys_sendmsg+0x17b/0x1d0 [ 127.046802][ T9519] __x64_sys_sendmsg+0xd4/0x160 [ 127.046869][ T9519] x64_sys_call+0x2999/0x2fb0 [ 127.046891][ T9519] do_syscall_64+0xd2/0x200 [ 127.046908][ T9519] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.046943][ T9519] ? clear_bhb_loop+0x40/0x90 [ 127.046961][ T9519] ? clear_bhb_loop+0x40/0x90 [ 127.046981][ T9519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.047002][ T9519] RIP: 0033:0x7f983406e929 [ 127.047020][ T9519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.047064][ T9519] RSP: 002b:00007f98326d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.047083][ T9519] RAX: ffffffffffffffda RBX: 00007f9834295fa0 RCX: 00007f983406e929 [ 127.047094][ T9519] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000005 [ 127.047108][ T9519] RBP: 00007f98340f0b39 R08: 0000000000000000 R09: 0000000000000000 [ 127.047122][ T9519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.047135][ T9519] R13: 0000000000000000 R14: 00007f9834295fa0 R15: 00007ffd71b0f448 [ 127.047226][ T9519] [ 127.047233][ T9519] memory: usage 307200kB, limit 307200kB, failcnt 1018 [ 127.291258][ T9577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.295356][ T9519] memory+swap: usage 309960kB, limit 9007199254740988kB, failcnt 0 [ 127.295372][ T9519] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 127.352540][ T9577] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.359429][ T9519] Memory cgroup stats for /syz2 [ 127.431100][ T9519] : [ 127.445643][ T9519] cache 0 [ 127.448624][ T9519] rss 4096 [ 127.451640][ T9519] shmem 0 [ 127.454568][ T9519] mapped_file 0 [ 127.458038][ T9519] dirty 0 [ 127.461003][ T9519] writeback 0 [ 127.464399][ T9519] workingset_refault_anon 274 [ 127.469070][ T9519] workingset_refault_file 840 [ 127.473844][ T9519] swap 2826240 [ 127.477489][ T9519] swapcached 16384 [ 127.481240][ T9519] pgpgin 180526 [ 127.484746][ T9519] pgpgout 180522 [ 127.488452][ T9519] pgfault 184008 [ 127.492085][ T9519] pgmajfault 209 [ 127.495724][ T9519] inactive_anon 16384 [ 127.495809][ T9519] active_anon 0 [ 127.495817][ T9519] inactive_file 0 [ 127.495823][ T9519] active_file 0 [ 127.495888][ T9519] unevictable 0 [ 127.495896][ T9519] hierarchical_memory_limit 314572800 [ 127.495905][ T9519] hierarchical_memsw_limit 9223372036854771712 [ 127.495915][ T9519] total_cache 0 [ 127.495923][ T9519] total_rss 4096 [ 127.495930][ T9519] total_shmem 0 [ 127.495938][ T9519] total_mapped_file 0 [ 127.495946][ T9519] total_dirty 0 [ 127.495953][ T9519] total_writeback 0 [ 127.495959][ T9519] total_workingset_refault_anon 274 [ 127.495974][ T9519] total_workingset_refault_file 840 [ 127.495981][ T9519] total_swap 2826240 [ 127.495987][ T9519] total_swapcached 16384 [ 127.495994][ T9519] total_pgpgin 180649 [ 127.496000][ T9519] total_pgpgout 180645 [ 127.496006][ T9519] total_pgfault 184129 [ 127.496013][ T9519] total_pgmajfault 209 [ 127.496041][ T9519] total_inactive_anon 16384 [ 127.496048][ T9519] total_active_anon 0 [ 127.496054][ T9519] total_inactive_file 0 [ 127.496062][ T9519] total_active_file 0 [ 127.496070][ T9519] total_unevictable 0 [ 127.496078][ T9519] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2079,pid=9518,uid=0 [ 127.496230][ T9519] Memory cgroup out of memory: Killed process 9518 (syz.2.2079) total-vm:93620kB, anon-rss:1064kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 127.517469][ T9577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.898173][ T9613] lo speed is unknown, defaulting to 1000 [ 128.096037][ T9609] wireguard1: entered promiscuous mode [ 128.102171][ T9609] wireguard1: entered allmulticast mode [ 128.712418][ T9641] lo speed is unknown, defaulting to 1000 [ 128.732040][ T9651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2125'. [ 128.834834][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 128.857166][ T9655] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 128.987738][ T9675] rdma_rxe: rxe_newlink: failed to add lo [ 129.003851][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 129.003864][ T29] audit: type=1326 audit(1751145889.792:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 129.043635][ T29] audit: type=1326 audit(1751145889.830:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 129.078864][ T29] audit: type=1400 audit(1751145889.867:3842): avc: denied { create } for pid=9639 comm="syz.3.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.098408][ T29] audit: type=1400 audit(1751145889.867:3843): avc: denied { bind } for pid=9639 comm="syz.3.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.117852][ T29] audit: type=1400 audit(1751145889.867:3844): avc: denied { write } for pid=9639 comm="syz.3.2125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 129.250320][ T29] audit: type=1326 audit(1751145890.026:3845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 129.274505][ T29] audit: type=1326 audit(1751145890.026:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 129.298165][ T29] audit: type=1326 audit(1751145890.026:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 129.321738][ T29] audit: type=1326 audit(1751145890.026:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 129.345400][ T29] audit: type=1326 audit(1751145890.026:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9668 comm="syz.4.2137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 129.598441][ T9690] lo speed is unknown, defaulting to 1000 [ 130.054598][ T9763] netlink: 'syz.4.2168': attribute type 1 has an invalid length. [ 130.078243][ T9763] 8021q: adding VLAN 0 to HW filter on device bond7 [ 130.096897][ T9763] veth9: entered promiscuous mode [ 130.128450][ T9775] netlink: 'syz.3.2170': attribute type 3 has an invalid length. [ 130.832718][ T9838] 9pnet_fd: Insufficient options for proto=fd [ 131.074034][ T9863] 9pnet_fd: Insufficient options for proto=fd [ 131.202416][ T9881] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2207'. [ 131.233425][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 131.281641][ T9897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2207'. [ 131.343426][ T9904] wireguard0: entered promiscuous mode [ 131.348940][ T9904] wireguard0: entered allmulticast mode [ 131.445961][ T9917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.062453][ T9962] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2234'. [ 132.072342][ T9959] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.139225][ T9971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2234'. [ 132.149838][ T9959] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.219221][ T9959] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.261297][ T9959] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.320540][ T9959] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.356705][ T9959] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.385017][ T9959] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.398066][ T9959] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.416884][ T9959] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.437421][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2240'. [ 132.496818][ T9959] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.527628][T10000] tap0: tun_chr_ioctl cmd 1074025677 [ 132.538337][T10000] tap0: linktype set to 823 [ 132.545867][ T9959] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.674813][ T9959] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.819909][T10010] vhci_hcd: invalid port number 96 [ 132.825082][T10010] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 133.784593][T10030] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2259'. [ 133.850947][T10037] pim6reg1: entered promiscuous mode [ 133.857777][T10037] pim6reg1: entered allmulticast mode [ 133.859485][T10038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2259'. [ 134.369016][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 134.369029][ T29] audit: type=1326 audit(1751145894.684:4158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.4.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 134.399718][ T29] audit: type=1326 audit(1751145894.815:4159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10069 comm="syz.4.2270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 134.671491][T10083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2274'. [ 134.680611][T10083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2274'. [ 134.946443][ T29] audit: type=1400 audit(1751145895.357:4160): avc: denied { write } for pid=10088 comm="syz.3.2278" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 135.078117][ T29] audit: type=1400 audit(1751145895.479:4161): avc: denied { name_bind } for pid=10117 comm="syz.3.2287" src=24097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 135.303980][ T29] audit: type=1400 audit(1751145895.684:4162): avc: denied { setopt } for pid=10114 comm="syz.0.2286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.327641][ T4888] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.343963][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.351534][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.354597][ T29] audit: type=1400 audit(1751145895.713:4163): avc: denied { read write } for pid=10114 comm="syz.0.2286" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 135.359518][ T4888] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.383334][ T29] audit: type=1400 audit(1751145895.713:4164): avc: denied { open } for pid=10114 comm="syz.0.2286" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 135.437469][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.445087][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.454230][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.461965][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.469747][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.477287][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.484709][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.493508][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.500946][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.508441][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.515879][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.524735][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.532415][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.540157][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.547805][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.556651][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.564097][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.571479][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.578953][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.587747][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.595254][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.602728][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.610377][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.619068][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.626490][ T4889] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 135.638439][ T4889] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz0 [ 135.678529][T10175] veth15: entered promiscuous mode [ 135.688655][T10174] siw: device registration error -23 [ 135.748287][ T29] audit: type=1400 audit(1751145896.105:4165): avc: denied { listen } for pid=10184 comm="syz.1.2307" lport=56359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.772681][ T29] audit: type=1400 audit(1751145896.124:4166): avc: denied { accept } for pid=10184 comm="syz.1.2307" lport=56359 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 135.796253][ T29] audit: type=1400 audit(1751145896.124:4167): avc: denied { setopt } for pid=10184 comm="syz.1.2307" lport=56359 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 135.902856][T10198] syz_tun: entered promiscuous mode [ 135.917142][T10198] batadv_slave_0: entered promiscuous mode [ 135.933317][T10198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.941265][T10198] Cannot create hsr debugfs directory [ 136.006322][T10218] Invalid ELF header type: 3 != 1 [ 136.356061][T10233] FAULT_INJECTION: forcing a failure. [ 136.356061][T10233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.370035][T10233] CPU: 0 UID: 0 PID: 10233 Comm: syz.4.2322 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 136.370100][T10233] Tainted: [W]=WARN [ 136.370106][T10233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.370181][T10233] Call Trace: [ 136.370188][T10233] [ 136.370197][T10233] __dump_stack+0x1d/0x30 [ 136.370219][T10233] dump_stack_lvl+0xe8/0x140 [ 136.370244][T10233] dump_stack+0x15/0x1b [ 136.370258][T10233] should_fail_ex+0x265/0x280 [ 136.370283][T10233] should_fail+0xb/0x20 [ 136.370338][T10233] should_fail_usercopy+0x1a/0x20 [ 136.370401][T10233] _copy_to_user+0x20/0xa0 [ 136.370419][T10233] io_register_iowq_max_workers+0x34d/0x470 [ 136.370446][T10233] __se_sys_io_uring_register+0xdce/0xeb0 [ 136.370631][T10233] ? fput+0x8f/0xc0 [ 136.370650][T10233] ? ksys_write+0x192/0x1a0 [ 136.370676][T10233] __x64_sys_io_uring_register+0x55/0x70 [ 136.370710][T10233] x64_sys_call+0xc91/0x2fb0 [ 136.370771][T10233] do_syscall_64+0xd2/0x200 [ 136.370786][T10233] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.370883][T10233] ? clear_bhb_loop+0x40/0x90 [ 136.370918][T10233] ? clear_bhb_loop+0x40/0x90 [ 136.370936][T10233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.370953][T10233] RIP: 0033:0x7fe4d492e929 [ 136.371024][T10233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.371041][T10233] RSP: 002b:00007fe4d2f97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 136.371138][T10233] RAX: ffffffffffffffda RBX: 00007fe4d4b55fa0 RCX: 00007fe4d492e929 [ 136.371148][T10233] RDX: 0000200000000400 RSI: 0000000000000013 RDI: 0000000000000003 [ 136.371159][T10233] RBP: 00007fe4d2f97090 R08: 0000000000000000 R09: 0000000000000000 [ 136.371170][T10233] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 136.371180][T10233] R13: 0000000000000000 R14: 00007fe4d4b55fa0 R15: 00007ffe2adfd718 [ 136.371195][T10233] [ 136.708115][T10252] veth11: entered promiscuous mode [ 136.883480][T10262] __nla_validate_parse: 9 callbacks suppressed [ 136.883493][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2332'. [ 137.634901][ T9959] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.647390][ T9959] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.671580][ T9959] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.691645][T10289] macvlan2: entered promiscuous mode [ 137.697033][T10289] bridge0: entered promiscuous mode [ 137.724629][T10289] bridge0: port 3(macvlan2) entered blocking state [ 137.731363][T10289] bridge0: port 3(macvlan2) entered disabled state [ 137.761239][T10289] macvlan2: entered allmulticast mode [ 137.766854][T10289] bridge0: entered allmulticast mode [ 137.795488][T10289] macvlan2: left allmulticast mode [ 137.800949][T10289] bridge0: left allmulticast mode [ 137.817236][T10289] bridge0: left promiscuous mode [ 138.019934][T10280] syz.1.2339 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 138.035295][T10280] CPU: 0 UID: 0 PID: 10280 Comm: syz.1.2339 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 138.035373][T10280] Tainted: [W]=WARN [ 138.035380][T10280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.035394][T10280] Call Trace: [ 138.035401][T10280] [ 138.035411][T10280] __dump_stack+0x1d/0x30 [ 138.035473][T10280] dump_stack_lvl+0xe8/0x140 [ 138.035490][T10280] dump_stack+0x15/0x1b [ 138.035504][T10280] dump_header+0x81/0x220 [ 138.035533][T10280] oom_kill_process+0x334/0x3f0 [ 138.035576][T10280] out_of_memory+0x979/0xb80 [ 138.035610][T10280] try_charge_memcg+0x5e6/0x9e0 [ 138.035639][T10280] obj_cgroup_charge_pages+0xa6/0x150 [ 138.035726][T10280] __memcg_kmem_charge_page+0x9f/0x170 [ 138.035754][T10280] __alloc_frozen_pages_noprof+0x188/0x360 [ 138.035794][T10280] alloc_pages_mpol+0xb3/0x250 [ 138.035881][T10280] alloc_pages_noprof+0x90/0x130 [ 138.035910][T10280] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 138.035946][T10280] __kvmalloc_node_noprof+0x30f/0x4e0 [ 138.036023][T10280] ? ip_set_alloc+0x1f/0x30 [ 138.036046][T10280] ? ip_set_alloc+0x1f/0x30 [ 138.036177][T10280] ? hash_netiface_create+0x21b/0x740 [ 138.036202][T10280] ? __kmalloc_cache_noprof+0x189/0x320 [ 138.036256][T10280] ip_set_alloc+0x1f/0x30 [ 138.036285][T10280] hash_netiface_create+0x282/0x740 [ 138.036388][T10280] ? __pfx_hash_netiface_create+0x10/0x10 [ 138.036455][T10280] ip_set_create+0x3c9/0x960 [ 138.036493][T10280] ? __nla_parse+0x40/0x60 [ 138.036510][T10280] nfnetlink_rcv_msg+0x4c6/0x590 [ 138.036576][T10280] ? selinux_capable+0x1f9/0x270 [ 138.036610][T10280] netlink_rcv_skb+0x120/0x220 [ 138.036648][T10280] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 138.036681][T10280] nfnetlink_rcv+0x16b/0x1690 [ 138.036715][T10280] ? __kfree_skb+0x109/0x150 [ 138.036814][T10280] ? nlmon_xmit+0x4f/0x60 [ 138.036833][T10280] ? consume_skb+0x49/0x150 [ 138.036905][T10280] ? nlmon_xmit+0x4f/0x60 [ 138.036927][T10280] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 138.036962][T10280] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 138.036995][T10280] ? __dev_queue_xmit+0x182/0x1fb0 [ 138.037056][T10280] ? ref_tracker_free+0x37d/0x3e0 [ 138.037094][T10280] ? __netlink_deliver_tap+0x4dc/0x500 [ 138.037134][T10280] netlink_unicast+0x5a1/0x670 [ 138.037229][T10280] netlink_sendmsg+0x58b/0x6b0 [ 138.037252][T10280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.037273][T10280] __sock_sendmsg+0x142/0x180 [ 138.037343][T10280] ____sys_sendmsg+0x31e/0x4e0 [ 138.037376][T10280] ___sys_sendmsg+0x17b/0x1d0 [ 138.037477][T10280] __x64_sys_sendmsg+0xd4/0x160 [ 138.037517][T10280] x64_sys_call+0x2999/0x2fb0 [ 138.037540][T10280] do_syscall_64+0xd2/0x200 [ 138.037622][T10280] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.037651][T10280] ? clear_bhb_loop+0x40/0x90 [ 138.037674][T10280] ? clear_bhb_loop+0x40/0x90 [ 138.037698][T10280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.037779][T10280] RIP: 0033:0x7fd8c5d5e929 [ 138.037793][T10280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.037814][T10280] RSP: 002b:00007fd8c43c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.037835][T10280] RAX: ffffffffffffffda RBX: 00007fd8c5f85fa0 RCX: 00007fd8c5d5e929 [ 138.037849][T10280] RDX: 0000000000000810 RSI: 0000200000000040 RDI: 0000000000000005 [ 138.037863][T10280] RBP: 00007fd8c5de0b39 R08: 0000000000000000 R09: 0000000000000000 [ 138.037874][T10280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.037884][T10280] R13: 0000000000000000 R14: 00007fd8c5f85fa0 R15: 00007ffdd4a4a668 [ 138.037900][T10280] [ 138.037922][T10280] memory: usage 307200kB, limit 307200kB, failcnt 1215 [ 138.420324][T10280] memory+swap: usage 309644kB, limit 9007199254740988kB, failcnt 0 [ 138.428331][T10280] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 138.435790][T10280] Memory cgroup stats for /syz1: [ 138.435933][T10298] FAULT_INJECTION: forcing a failure. [ 138.435933][T10298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.437102][T10280] cache 4096 [ 138.441136][T10298] CPU: 0 UID: 0 PID: 10298 Comm: syz.0.2346 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 138.441169][T10298] Tainted: [W]=WARN [ 138.441176][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 138.441189][T10298] Call Trace: [ 138.441196][T10298] [ 138.441205][T10298] __dump_stack+0x1d/0x30 [ 138.441300][T10298] dump_stack_lvl+0xe8/0x140 [ 138.441327][T10298] dump_stack+0x15/0x1b [ 138.441342][T10298] should_fail_ex+0x265/0x280 [ 138.441376][T10298] should_fail+0xb/0x20 [ 138.441453][T10298] should_fail_usercopy+0x1a/0x20 [ 138.441491][T10298] _copy_to_user+0x20/0xa0 [ 138.441518][T10298] simple_read_from_buffer+0xb5/0x130 [ 138.441552][T10298] proc_fail_nth_read+0x100/0x140 [ 138.441647][T10298] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 138.441694][T10298] vfs_read+0x1a0/0x6f0 [ 138.441734][T10298] ? __rcu_read_unlock+0x4f/0x70 [ 138.441754][T10298] ? __fget_files+0x184/0x1c0 [ 138.441778][T10298] ksys_read+0xda/0x1a0 [ 138.441847][T10298] __x64_sys_read+0x40/0x50 [ 138.441877][T10298] x64_sys_call+0x2d77/0x2fb0 [ 138.441904][T10298] do_syscall_64+0xd2/0x200 [ 138.441992][T10298] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.442016][T10298] ? clear_bhb_loop+0x40/0x90 [ 138.442074][T10298] ? clear_bhb_loop+0x40/0x90 [ 138.442095][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.442135][T10298] RIP: 0033:0x7fa39486d33c [ 138.442151][T10298] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.442167][T10298] RSP: 002b:00007fa392ed7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.442186][T10298] RAX: ffffffffffffffda RBX: 00007fa394a95fa0 RCX: 00007fa39486d33c [ 138.442200][T10298] RDX: 000000000000000f RSI: 00007fa392ed70a0 RDI: 0000000000000004 [ 138.442245][T10298] RBP: 00007fa392ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.442258][T10298] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 138.442271][T10298] R13: 0000000000000000 R14: 00007fa394a95fa0 R15: 00007ffd4ddf81e8 [ 138.442292][T10298] [ 138.459259][ T9959] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.474103][T10280] rss 4096 [ 138.693025][T10280] shmem 0 [ 138.695970][T10280] mapped_file 4096 [ 138.700737][T10280] dirty 4096 [ 138.703992][T10280] writeback 0 [ 138.707437][T10280] workingset_refault_anon 319 [ 138.712221][T10280] workingset_refault_file 1160 [ 138.717170][T10280] swap 2482176 [ 138.720582][T10280] swapcached 20480 [ 138.724329][T10280] pgpgin 177993 [ 138.727770][T10280] pgpgout 177987 [ 138.732188][T10280] pgfault 190085 [ 138.735883][T10280] pgmajfault 209 [ 138.739465][T10280] inactive_anon 16384 [ 138.745725][T10280] active_anon 4096 [ 138.749790][T10280] inactive_file 4096 [ 138.756877][T10280] active_file 0 [ 138.761916][T10280] unevictable 0 [ 138.765375][T10280] hierarchical_memory_limit 314572800 [ 138.770785][T10280] hierarchical_memsw_limit 9223372036854771712 [ 138.778258][T10280] total_cache 4096 [ 138.781977][T10280] total_rss 4096 [ 138.785598][T10280] total_shmem 0 [ 138.789042][T10280] total_mapped_file 4096 [ 138.794475][T10280] total_dirty 4096 [ 138.798189][T10280] total_writeback 0 [ 138.802622][T10280] total_workingset_refault_anon 319 [ 138.807818][T10280] total_workingset_refault_file 1160 [ 138.813175][T10280] total_swap 2482176 [ 138.817150][T10280] total_swapcached 20480 [ 138.821547][T10280] total_pgpgin 178010 [ 138.826412][T10280] total_pgpgout 178004 [ 138.830474][T10280] total_pgfault 190113 [ 138.834719][T10280] total_pgmajfault 210 [ 138.838880][T10280] total_inactive_anon 16384 [ 138.843390][T10280] total_active_anon 4096 [ 138.847665][T10280] total_inactive_file 4096 [ 138.852078][T10280] total_active_file 0 [ 138.856042][T10280] total_unevictable 0 [ 138.860855][T10280] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2339,pid=10278,uid=0 [ 138.875573][T10280] Memory cgroup out of memory: Killed process 10280 (syz.1.2339) total-vm:95668kB, anon-rss:1060kB, file-rss:22204kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 138.895873][T10295] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 139.448097][T10337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2359'. [ 139.468390][T10337] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2359'. [ 139.912992][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 139.913007][ T29] audit: type=1400 audit(1751145899.996:4182): avc: denied { read } for pid=10355 comm="syz.0.2366" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.942997][ T29] audit: type=1400 audit(1751145899.996:4183): avc: denied { open } for pid=10355 comm="syz.0.2366" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 139.990041][ T29] audit: type=1326 audit(1751145900.052:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.0.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39486e929 code=0x7ffc0000 [ 140.007434][T10367] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2370'. [ 140.014283][ T29] audit: type=1326 audit(1751145900.052:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10355 comm="syz.0.2366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39486e929 code=0x7ffc0000 [ 140.064487][ T29] audit: type=1400 audit(1751145900.127:4186): avc: denied { mount } for pid=10364 comm="syz.0.2369" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 140.094374][T10324] lo speed is unknown, defaulting to 1000 [ 140.121803][ T29] audit: type=1326 audit(1751145900.174:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39486e929 code=0x7ffc0000 [ 140.145352][ T29] audit: type=1326 audit(1751145900.174:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa39486e929 code=0x7ffc0000 [ 140.169770][ T29] audit: type=1326 audit(1751145900.174:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39486e929 code=0x7ffc0000 [ 140.194253][ T29] audit: type=1326 audit(1751145900.174:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fa39486e929 code=0x7ffc0000 [ 140.266407][ T29] audit: type=1326 audit(1751145900.239:4191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.0.2369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39486e929 code=0x7ffc0000 [ 140.284754][T10369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2370'. [ 140.385830][T10388] block device autoloading is deprecated and will be removed. [ 140.441004][T10397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2379'. [ 140.451025][T10397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2379'. [ 141.491251][T10431] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.564745][T10431] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.671033][T10431] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.788010][T10431] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.850516][T10451] Falling back ldisc for ttyS3. [ 141.943953][T10431] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.965459][T10431] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.977572][T10431] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.989221][T10431] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.010915][T10466] 8021q: adding VLAN 0 to HW filter on device bond8 [ 142.024020][T10426] syz.2.2391 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 142.035072][T10426] CPU: 1 UID: 0 PID: 10426 Comm: syz.2.2391 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 142.035107][T10426] Tainted: [W]=WARN [ 142.035114][T10426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.035127][T10426] Call Trace: [ 142.035134][T10426] [ 142.035141][T10426] __dump_stack+0x1d/0x30 [ 142.035160][T10426] dump_stack_lvl+0xe8/0x140 [ 142.035180][T10426] dump_stack+0x15/0x1b [ 142.035244][T10426] dump_header+0x81/0x220 [ 142.035276][T10426] oom_kill_process+0x334/0x3f0 [ 142.035365][T10426] out_of_memory+0x979/0xb80 [ 142.035460][T10426] try_charge_memcg+0x5e6/0x9e0 [ 142.035483][T10426] charge_memcg+0x51/0xc0 [ 142.035535][T10426] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 142.035571][T10426] __read_swap_cache_async+0x1df/0x350 [ 142.035683][T10426] swap_cluster_readahead+0x277/0x3e0 [ 142.035719][T10426] swapin_readahead+0xde/0x6f0 [ 142.035750][T10426] ? __filemap_get_folio+0x4f7/0x6b0 [ 142.035779][T10426] ? __rcu_read_unlock+0x34/0x70 [ 142.035855][T10426] ? swap_cache_get_folio+0x77/0x200 [ 142.035985][T10426] do_swap_page+0x301/0x2430 [ 142.036007][T10426] ? css_rstat_updated+0xcd/0x5b0 [ 142.036070][T10426] ? __pfx_default_wake_function+0x10/0x10 [ 142.036096][T10426] handle_mm_fault+0x9a5/0x2be0 [ 142.036115][T10426] ? mas_walk+0xf2/0x120 [ 142.036222][T10426] do_user_addr_fault+0x636/0x1090 [ 142.036249][T10426] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 142.036275][T10426] exc_page_fault+0x62/0xa0 [ 142.036328][T10426] asm_exc_page_fault+0x26/0x30 [ 142.036349][T10426] RIP: 0033:0x7f98340a1193 [ 142.036365][T10426] Code: e1 08 00 48 8d 3d 56 e1 08 00 e8 f8 48 f6 ff 0f 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 <80> 3d 9e 43 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f [ 142.036383][T10426] RSP: 002b:00007ffd71b0f568 EFLAGS: 00010293 [ 142.036399][T10426] RAX: 00000000fffffffa RBX: 00007f9834295fa0 RCX: 0000000000000000 [ 142.036468][T10426] RDX: 00007ffd71b0f580 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.036480][T10426] RBP: 00007f9834297ba0 R08: 0000000025cbf5b7 R09: 7fffffffffffffff [ 142.036493][T10426] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000021215 [ 142.036506][T10426] R13: 00007ffd71b0f6a0 R14: ffffffffffffffff R15: 00007ffd71b0f6c0 [ 142.036526][T10426] [ 142.036533][T10426] memory: usage 307200kB, limit 307200kB, failcnt 1223 [ 142.281005][T10426] memory+swap: usage 309948kB, limit 9007199254740988kB, failcnt 0 [ 142.288928][T10426] kmem: usage 307172kB, limit 9007199254740988kB, failcnt 0 [ 142.296216][T10426] Memory cgroup stats for /syz2: [ 142.386416][T10426] cache 0 [ 142.394492][T10426] rss 4096 [ 142.397577][T10426] shmem 0 [ 142.400529][T10426] mapped_file 0 [ 142.403976][T10426] dirty 0 [ 142.407829][T10426] writeback 12288 [ 142.411485][T10426] workingset_refault_anon 332 [ 142.416153][T10426] workingset_refault_file 986 [ 142.420938][T10426] swap 2813952 [ 142.424301][T10426] swapcached 28672 [ 142.428213][T10426] pgpgin 191825 [ 142.431670][T10426] pgpgout 191818 [ 142.435286][T10426] pgfault 198324 [ 142.439579][T10426] pgmajfault 232 [ 142.443114][T10426] inactive_anon 12288 [ 142.447130][T10426] active_anon 16384 [ 142.450941][T10426] inactive_file 0 [ 142.454563][T10426] active_file 0 [ 142.458012][T10426] unevictable 0 [ 142.461519][T10426] hierarchical_memory_limit 314572800 [ 142.466877][T10426] hierarchical_memsw_limit 9223372036854771712 [ 142.473762][T10426] total_cache 0 [ 142.477217][T10426] total_rss 4096 [ 142.480760][T10426] total_shmem 0 [ 142.484309][T10426] total_mapped_file 0 [ 142.488338][T10426] total_dirty 0 [ 142.491795][T10426] total_writeback 12288 [ 142.495952][T10426] total_workingset_refault_anon 332 [ 142.501162][T10426] total_workingset_refault_file 986 [ 142.507088][T10426] total_swap 2813952 [ 142.511147][T10426] total_swapcached 28672 [ 142.515406][T10426] total_pgpgin 191948 [ 142.519376][T10426] total_pgpgout 191941 [ 142.523460][T10426] total_pgfault 198445 [ 142.527550][T10426] total_pgmajfault 232 [ 142.531705][T10426] total_inactive_anon 12288 [ 142.536937][T10426] total_active_anon 16384 [ 142.541283][T10426] total_inactive_file 0 [ 142.545472][T10426] total_active_file 0 [ 142.549445][T10426] total_unevictable 0 [ 142.553491][T10426] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2391,pid=10426,uid=0 [ 142.568888][T10426] Memory cgroup out of memory: Killed process 10426 (syz.2.2391) total-vm:93620kB, anon-rss:1060kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 142.968026][T10497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2417'. [ 142.977278][T10497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2417'. [ 143.478925][T10523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2428'. [ 144.010802][T10546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2437'. [ 144.019999][T10546] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2437'. [ 144.064011][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 144.094667][T10551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2435'. [ 144.104295][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2440'. [ 144.222254][T10565] netlink: 'syz.2.2443': attribute type 27 has an invalid length. [ 144.274711][T10566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.364020][T10565] vlan0: left promiscuous mode [ 144.380926][T10565] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.390703][T10565] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.399146][T10565] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.407555][T10565] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.446169][T10565] veth3: left promiscuous mode [ 144.456324][T10565] veth5: left promiscuous mode [ 144.462062][T10565] veth7: left promiscuous mode [ 144.467732][T10565] veth9: left promiscuous mode [ 144.474081][T10565] veth11: left promiscuous mode [ 144.479917][T10565] veth13: left promiscuous mode [ 144.486418][T10565] veth15: left promiscuous mode [ 144.491525][T10565] veth17: left promiscuous mode [ 144.497149][T10565] veth19: left promiscuous mode [ 144.503688][T10565] veth21: left promiscuous mode [ 144.624266][T10579] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2447'. [ 144.652896][T10576] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2447'. [ 144.741487][T10569] lo speed is unknown, defaulting to 1000 [ 144.913303][T10593] veth13: entered promiscuous mode [ 145.052887][T10605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.071151][T10605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.399515][T10621] netlink: 'syz.4.2463': attribute type 1 has an invalid length. [ 145.421306][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 145.421319][ T29] audit: type=1400 audit(1751145905.149:4258): avc: denied { checkpoint_restore } for pid=10598 comm="syz.3.2455" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 145.513473][T10627] netlink: 'syz.1.2465': attribute type 1 has an invalid length. [ 145.528275][ T29] audit: type=1326 audit(1751145905.243:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10629 comm="syz.2.2466" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f983406e929 code=0x0 [ 145.558763][ T29] audit: type=1400 audit(1751145905.271:4260): avc: denied { create } for pid=10620 comm="syz.4.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 145.580456][ T29] audit: type=1400 audit(1751145905.290:4261): avc: denied { write } for pid=10620 comm="syz.4.2463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 145.604130][T10631] FAULT_INJECTION: forcing a failure. [ 145.604130][T10631] name failslab, interval 1, probability 0, space 0, times 0 [ 145.609647][ T29] audit: type=1400 audit(1751145905.327:4262): avc: denied { mounton } for pid=10629 comm="syz.2.2466" path="/proc/1178/task/1179/fd" dev="proc" ino=30761 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 145.617251][T10631] CPU: 1 UID: 0 PID: 10631 Comm: syz.2.2466 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 145.617285][T10631] Tainted: [W]=WARN [ 145.617292][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.617304][T10631] Call Trace: [ 145.617311][T10631] [ 145.617320][T10631] __dump_stack+0x1d/0x30 [ 145.617343][T10631] dump_stack_lvl+0xe8/0x140 [ 145.617362][T10631] dump_stack+0x15/0x1b [ 145.617378][T10631] should_fail_ex+0x265/0x280 [ 145.617408][T10631] should_failslab+0x8c/0xb0 [ 145.617430][T10631] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 145.617528][T10631] ? proc_alloc_inode+0x34/0x90 [ 145.617550][T10631] ? __pfx_proc_alloc_inode+0x10/0x10 [ 145.617570][T10631] proc_alloc_inode+0x34/0x90 [ 145.617602][T10631] alloc_inode+0x40/0x170 [ 145.617630][T10631] new_inode+0x1d/0xe0 [ 145.617649][T10631] proc_get_inode+0x21/0x370 [ 145.617670][T10631] proc_fill_super+0x2f9/0x3d0 [ 145.617692][T10631] ? __pfx_proc_fill_super+0x10/0x10 [ 145.617783][T10631] get_tree_nodev+0x83/0x100 [ 145.617812][T10631] proc_get_tree+0x1c/0x30 [ 145.617834][T10631] vfs_get_tree+0x54/0x1d0 [ 145.617905][T10631] do_new_mount+0x207/0x680 [ 145.617938][T10631] path_mount+0x4a4/0xb20 [ 145.617966][T10631] ? user_path_at+0x109/0x130 [ 145.618072][T10631] __se_sys_mount+0x28f/0x2e0 [ 145.618089][T10631] ? fput+0x8f/0xc0 [ 145.618151][T10631] __x64_sys_mount+0x67/0x80 [ 145.618180][T10631] x64_sys_call+0xd36/0x2fb0 [ 145.618235][T10631] do_syscall_64+0xd2/0x200 [ 145.618254][T10631] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 145.618279][T10631] ? clear_bhb_loop+0x40/0x90 [ 145.618299][T10631] ? clear_bhb_loop+0x40/0x90 [ 145.618376][T10631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.618397][T10631] RIP: 0033:0x7f983406e929 [ 145.618412][T10631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.618429][T10631] RSP: 002b:00007f98326b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 145.618448][T10631] RAX: ffffffffffffffda RBX: 00007f9834296080 RCX: 00007f983406e929 [ 145.618460][T10631] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 145.618472][T10631] RBP: 00007f98326b6090 R08: 0000000000000000 R09: 0000000000000000 [ 145.618513][T10631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 145.618525][T10631] R13: 0000000000000000 R14: 00007f9834296080 R15: 00007ffd71b0f448 [ 145.618544][T10631] [ 145.618552][T10631] proc_fill_super: get root inode failed [ 145.770866][T10642] bridge_slave_0: left allmulticast mode [ 145.846536][T10644] netlink: 'syz.4.2470': attribute type 21 has an invalid length. [ 145.853447][T10642] bridge_slave_0: left promiscuous mode [ 145.853595][T10642] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.933754][T10644] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.942109][T10642] bridge_slave_1: left allmulticast mode [ 145.947886][T10642] bridge_slave_1: left promiscuous mode [ 145.953671][T10642] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.964782][T10642] bond0: (slave bond_slave_0): Releasing backup interface [ 145.974236][T10642] bond0: (slave bond_slave_1): Releasing backup interface [ 145.984903][T10642] team0: Port device team_slave_0 removed [ 145.991350][T10642] team0: Port device team_slave_1 removed [ 145.997496][T10642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.007649][T10642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.064701][T10642] bond1: (slave gretap1): Releasing active interface [ 146.075267][T10642] bond4: (slave geneve2): Releasing active interface [ 146.168248][ T29] audit: type=1326 audit(1751145905.842:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 146.189883][T10652] vlan0: entered allmulticast mode [ 146.192590][ T29] audit: type=1326 audit(1751145905.842:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 146.192617][ T29] audit: type=1326 audit(1751145905.842:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 146.192637][ T29] audit: type=1326 audit(1751145905.842:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 146.192746][ T29] audit: type=1326 audit(1751145905.842:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.4.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4d492e929 code=0x7ffc0000 [ 146.293214][T10652] bond5: entered allmulticast mode [ 147.124637][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.145035][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.330394][T10709] syz_tun (unregistering): left promiscuous mode [ 148.651520][T10746] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 148.671023][T10751] __nla_validate_parse: 6 callbacks suppressed [ 148.671035][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2506'. [ 148.778619][T10764] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2512'. [ 148.815712][T10766] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2513'. [ 148.820236][T10770] loop0: detected capacity change from 0 to 1024 [ 148.841854][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2516'. [ 148.856572][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2510'. [ 148.874154][T10769] lo speed is unknown, defaulting to 1000 [ 148.883348][T10770] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.898061][T10770] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.914481][T10776] block device autoloading is deprecated and will be removed. [ 149.028949][T10784] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.055300][T10770] Falling back ldisc for ttyS3. [ 149.097762][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.140569][T10793] netlink: set zone limit has 8 unknown bytes [ 149.190729][T10804] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2525'. [ 149.375439][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2538'. [ 149.384646][T10835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2538'. [ 149.424078][T10842] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2540'. [ 149.438184][T10846] netlink: 'syz.2.2541': attribute type 10 has an invalid length. [ 149.456668][T10846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.465226][T10846] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 149.496875][T10850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2544'. [ 149.808959][T10852] lo speed is unknown, defaulting to 1000 [ 150.349020][T10866] netlink: 'syz.1.2549': attribute type 1 has an invalid length. [ 150.349663][T10863] futex_wake_op: syz.0.2548 tries to shift op by -1; fix this program [ 150.391059][T10866] 8021q: adding VLAN 0 to HW filter on device bond6 [ 150.435072][T10866] veth17: entered promiscuous mode [ 150.441897][T10872] SELinux: Context system_u:object_r:net_conf_t:s0 is not valid (left unmapped). [ 150.536294][T10883] FAULT_INJECTION: forcing a failure. [ 150.536294][T10883] name failslab, interval 1, probability 0, space 0, times 0 [ 150.549731][T10883] CPU: 0 UID: 0 PID: 10883 Comm: syz.2.2553 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 150.549843][T10883] Tainted: [W]=WARN [ 150.549849][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.549924][T10883] Call Trace: [ 150.549931][T10883] [ 150.549940][T10883] __dump_stack+0x1d/0x30 [ 150.550038][T10883] dump_stack_lvl+0xe8/0x140 [ 150.550058][T10883] dump_stack+0x15/0x1b [ 150.550102][T10883] should_fail_ex+0x265/0x280 [ 150.550129][T10883] should_failslab+0x8c/0xb0 [ 150.550153][T10883] kmem_cache_alloc_noprof+0x50/0x310 [ 150.550177][T10883] ? security_inode_alloc+0x37/0x100 [ 150.550215][T10883] security_inode_alloc+0x37/0x100 [ 150.550239][T10883] inode_init_always_gfp+0x4b7/0x500 [ 150.550266][T10883] ? __pfx_proc_alloc_inode+0x10/0x10 [ 150.550340][T10883] alloc_inode+0x58/0x170 [ 150.550439][T10883] new_inode+0x1d/0xe0 [ 150.550458][T10883] proc_get_inode+0x21/0x370 [ 150.550478][T10883] proc_fill_super+0x2f9/0x3d0 [ 150.550497][T10883] ? __pfx_proc_fill_super+0x10/0x10 [ 150.550517][T10883] get_tree_nodev+0x83/0x100 [ 150.550546][T10883] proc_get_tree+0x1c/0x30 [ 150.550569][T10883] vfs_get_tree+0x54/0x1d0 [ 150.550662][T10883] do_new_mount+0x207/0x680 [ 150.550695][T10883] path_mount+0x4a4/0xb20 [ 150.550737][T10883] ? user_path_at+0x109/0x130 [ 150.550758][T10883] __se_sys_mount+0x28f/0x2e0 [ 150.550773][T10883] ? fput+0x8f/0xc0 [ 150.550799][T10883] __x64_sys_mount+0x67/0x80 [ 150.550892][T10883] x64_sys_call+0xd36/0x2fb0 [ 150.550913][T10883] do_syscall_64+0xd2/0x200 [ 150.550932][T10883] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.551055][T10883] ? clear_bhb_loop+0x40/0x90 [ 150.551074][T10883] ? clear_bhb_loop+0x40/0x90 [ 150.551092][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.551164][T10883] RIP: 0033:0x7f983406e929 [ 150.551249][T10883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.551300][T10883] RSP: 002b:00007f98326b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 150.551316][T10883] RAX: ffffffffffffffda RBX: 00007f9834296080 RCX: 00007f983406e929 [ 150.551326][T10883] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 150.551337][T10883] RBP: 00007f98326b6090 R08: 0000000000000000 R09: 0000000000000000 [ 150.551349][T10883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.551427][T10883] R13: 0000000000000000 R14: 00007f9834296080 R15: 00007ffd71b0f448 [ 150.551446][T10883] [ 150.551455][T10883] proc_fill_super: get root inode failed [ 150.871261][T10889] netlink: 'syz.1.2558': attribute type 1 has an invalid length. [ 150.925891][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 150.925906][ T29] audit: type=1400 audit(1751145910.294:4584): avc: denied { create } for pid=10888 comm="syz.1.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 150.991807][ T29] audit: type=1400 audit(1751145910.331:4585): avc: denied { write } for pid=10888 comm="syz.1.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 151.014004][ T29] audit: type=1400 audit(1751145910.350:4586): avc: denied { setopt } for pid=10888 comm="syz.1.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.137324][T10868] syz.4.2552 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 151.149234][T10868] CPU: 1 UID: 0 PID: 10868 Comm: syz.4.2552 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 151.149275][T10868] Tainted: [W]=WARN [ 151.149281][T10868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.149292][T10868] Call Trace: [ 151.149299][T10868] [ 151.149307][T10868] __dump_stack+0x1d/0x30 [ 151.149328][T10868] dump_stack_lvl+0xe8/0x140 [ 151.149369][T10868] dump_stack+0x15/0x1b [ 151.149385][T10868] dump_header+0x81/0x220 [ 151.149415][T10868] oom_kill_process+0x334/0x3f0 [ 151.149445][T10868] out_of_memory+0x979/0xb80 [ 151.149543][T10868] try_charge_memcg+0x5e6/0x9e0 [ 151.149570][T10868] charge_memcg+0x51/0xc0 [ 151.149601][T10868] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 151.149651][T10868] __read_swap_cache_async+0x1df/0x350 [ 151.149683][T10868] swap_cluster_readahead+0x376/0x3e0 [ 151.149781][T10868] swapin_readahead+0xde/0x6f0 [ 151.149900][T10868] ? __filemap_get_folio+0x4f7/0x6b0 [ 151.149930][T10868] ? __rcu_read_unlock+0x34/0x70 [ 151.149952][T10868] ? swap_cache_get_folio+0x77/0x200 [ 151.150042][T10868] do_swap_page+0x301/0x2430 [ 151.150063][T10868] ? css_rstat_updated+0xcd/0x5b0 [ 151.150094][T10868] ? __pfx_default_wake_function+0x10/0x10 [ 151.150119][T10868] handle_mm_fault+0x9a5/0x2be0 [ 151.150184][T10868] ? mas_walk+0xf2/0x120 [ 151.150217][T10868] do_user_addr_fault+0x636/0x1090 [ 151.150251][T10868] exc_page_fault+0x62/0xa0 [ 151.150278][T10868] asm_exc_page_fault+0x26/0x30 [ 151.150323][T10868] RIP: 0033:0x7fe4d4956750 [ 151.150339][T10868] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 151.150356][T10868] RSP: 002b:00007ffe2adfd808 EFLAGS: 00010246 [ 151.150372][T10868] RAX: 0000000000000000 RBX: 00007fe4d4b55fa0 RCX: 00007fe4d49611e5 [ 151.150385][T10868] RDX: 00007ffe2adfd850 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.150398][T10868] RBP: 00007fe4d4b57ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 151.150410][T10868] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000002338e [ 151.150422][T10868] R13: 00007ffe2adfd970 R14: ffffffffffffffff R15: 00007ffe2adfd990 [ 151.150492][T10868] [ 151.150498][T10868] memory: usage 307200kB, limit 307200kB, failcnt 965 [ 151.205783][ T29] audit: type=1400 audit(1751145910.555:4587): avc: denied { create } for pid=10903 comm="syz.1.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.210029][T10868] memory+swap: usage 308924kB, limit 9007199254740988kB, failcnt 0 [ 151.214575][ T29] audit: type=1400 audit(1751145910.555:4588): avc: denied { read } for pid=10903 comm="syz.1.2565" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.214664][ T29] audit: type=1400 audit(1751145910.555:4589): avc: denied { open } for pid=10903 comm="syz.1.2565" path="net:[4026532395]" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 151.219605][T10868] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 151.219617][T10868] Memory cgroup stats for /syz4: [ 151.219880][T10868] cache 0 [ 151.223947][ T29] audit: type=1400 audit(1751145910.555:4590): avc: denied { create } for pid=10903 comm="syz.1.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.230596][T10868] rss 0 [ 151.235448][ T29] audit: type=1400 audit(1751145910.555:4591): avc: denied { write } for pid=10903 comm="syz.1.2565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 151.241551][T10868] shmem 0 [ 151.266348][ T29] audit: type=1400 audit(1751145910.621:4592): avc: denied { bind } for pid=10907 comm="syz.1.2566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 151.267497][T10868] mapped_file 0 [ 151.381489][ T29] audit: type=1400 audit(1751145910.724:4593): avc: denied { validate_trans } for pid=10914 comm="syz.0.2569" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 151.383169][T10868] dirty 0 [ 151.393851][T10915] loop0: detected capacity change from 0 to 512 [ 151.410756][T10868] writeback 0 [ 151.510388][T10915] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13 [ 151.523646][T10868] workingset_refault_anon 271 [ 151.528062][T10915] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #13: comm syz.0.2569: iget: bad i_size value: 12154757448730 [ 151.547539][T10868] workingset_refault_file 2394 [ 151.551407][T10915] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.2569: couldn't read orphan inode 13 (err -117) [ 151.572111][T10868] swap 1765376 [ 151.576395][T10915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.580745][T10868] swapcached 0 [ 151.580768][T10868] pgpgin 182327 [ 151.580775][T10868] pgpgout 182327 [ 151.580781][T10868] pgfault 191264 [ 151.580856][T10868] pgmajfault 175 [ 151.580863][T10868] inactive_anon 0 [ 151.591910][T10915] EXT4-fs warning (device loop0): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 151.592188][T10868] active_anon 0 [ 151.597133][T10915] EXT4-fs warning (device loop0): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 151.610686][T10868] inactive_file 0 [ 151.694000][T10868] active_file 0 [ 151.697495][T10868] unevictable 0 [ 151.701702][T10868] hierarchical_memory_limit 314572800 [ 151.707155][T10868] hierarchical_memsw_limit 9223372036854771712 [ 151.713359][T10868] total_cache 0 [ 151.716818][T10868] total_rss 0 [ 151.720135][T10868] total_shmem 0 [ 151.723599][T10868] total_mapped_file 0 [ 151.727637][T10868] total_dirty 0 [ 151.731923][T10868] total_writeback 0 [ 151.735731][T10868] total_workingset_refault_anon 271 [ 151.740995][T10868] total_workingset_refault_file 2394 [ 151.746363][T10868] total_swap 1765376 [ 151.750265][T10868] total_swapcached 0 [ 151.754154][T10868] total_pgpgin 182327 [ 151.758111][T10868] total_pgpgout 182327 [ 151.763115][T10868] total_pgfault 191269 [ 151.767256][T10868] total_pgmajfault 175 [ 151.771301][T10868] total_inactive_anon 0 [ 151.775470][T10868] total_active_anon 0 [ 151.779426][T10868] total_inactive_file 0 [ 151.783663][T10868] total_active_file 0 [ 151.787675][T10868] total_unevictable 0 [ 151.791669][T10868] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2552,pid=10868,uid=0 [ 151.807268][T10868] Memory cgroup out of memory: Killed process 10868 (syz.4.2552) total-vm:93620kB, anon-rss:936kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 151.934419][T10924] Falling back ldisc for ttyS3. [ 151.984199][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.022790][T10946] netlink: 'syz.2.2580': attribute type 1 has an invalid length. [ 152.480887][T10964] netlink: 'syz.2.2583': attribute type 1 has an invalid length. [ 153.496153][T11018] netlink: 'syz.3.2599': attribute type 10 has an invalid length. [ 153.507622][T11018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.520888][T11018] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 153.618466][T11027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.625790][T11021] lo speed is unknown, defaulting to 1000 [ 153.667204][T11027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.535464][T11118] lo speed is unknown, defaulting to 1000 [ 154.552688][T11113] Falling back ldisc for ttyS3. [ 154.622774][T11124] lo speed is unknown, defaulting to 1000 [ 154.824843][T11148] infiniband syz2: set down [ 154.829391][T11148] infiniband syz2: added veth0_to_bond [ 154.843842][T11148] RDS/IB: syz2: added [ 154.848029][T11148] smc: adding ib device syz2 with port count 1 [ 154.854466][T11148] smc: ib device syz2 port 1 has pnetid [ 154.950182][T11164] Falling back ldisc for ttyS3. [ 155.150448][T11179] __nla_validate_parse: 9 callbacks suppressed [ 155.150463][T11179] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2660'. [ 155.165903][T11179] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2660'. [ 155.272651][T11194] loop0: detected capacity change from 0 to 2048 [ 155.307987][T11188] IPVS: Error connecting to the multicast addr [ 155.343716][T11194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.356090][T11192] Falling back ldisc for ttyS3. [ 155.375087][T11194] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 155.640111][T11208] veth13: entered promiscuous mode [ 155.646045][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.684418][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2669'. [ 155.880331][T11222] random: crng reseeded on system resumption [ 155.897752][T11222] netlink: 'syz.4.2676': attribute type 1 has an invalid length. [ 155.956443][T11236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2681'. [ 155.965587][T11236] netlink: 'syz.0.2681': attribute type 3 has an invalid length. [ 155.973310][T11236] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2681'. [ 156.011940][T11235] Falling back ldisc for ttyS3. [ 156.254894][T11253] netlink: 'syz.3.2687': attribute type 1 has an invalid length. [ 156.287667][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 156.287680][ T29] audit: type=1400 audit(1751145915.316:4790): avc: denied { mac_admin } for pid=11252 comm="syz.3.2687" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 156.319811][T11253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2687'. [ 156.356732][ T29] audit: type=1400 audit(1751145915.372:4791): avc: denied { create } for pid=11252 comm="syz.3.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 156.425759][ T29] audit: type=1400 audit(1751145915.409:4792): avc: denied { write } for pid=11252 comm="syz.3.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 156.446827][ T29] audit: type=1400 audit(1751145915.409:4793): avc: denied { setopt } for pid=11252 comm="syz.3.2687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 156.470955][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.479221][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.486609][ T29] audit: type=1400 audit(1751145915.484:4794): avc: denied { read write } for pid=11255 comm="syz.3.2688" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 156.486638][ T29] audit: type=1400 audit(1751145915.484:4795): avc: denied { open } for pid=11255 comm="syz.3.2688" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 156.510893][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.511664][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.550563][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.558258][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.565958][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.574361][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.581754][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.589572][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.597094][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.604569][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.612798][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.620266][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.628273][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.635778][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.644008][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.651494][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.658909][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.666424][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.674521][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.682101][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.689530][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.696955][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.697906][ T29] audit: type=1400 audit(1751145915.699:4796): avc: denied { create } for pid=11262 comm="syz.0.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 156.704537][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.704620][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.704644][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.704676][ T4883] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 156.706176][ T4883] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.727293][ T29] audit: type=1400 audit(1751145915.727:4797): avc: denied { write } for pid=11262 comm="syz.0.2690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 156.854727][ T29] audit: type=1400 audit(1751145915.849:4798): avc: denied { bind } for pid=11268 comm="syz.1.2693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 156.874267][ T29] audit: type=1400 audit(1751145915.849:4799): avc: denied { name_bind } for pid=11268 comm="syz.1.2693" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 156.955634][T11274] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2695'. [ 156.992482][T11271] Falling back ldisc for ttyS3. [ 157.065508][T11287] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2695'. [ 157.096090][T11299] SELinux: policydb magic number 0x9f20458c does not match expected magic number 0xf97cff8c [ 157.117248][T11299] SELinux: failed to load policy [ 157.184886][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.210119][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.547658][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2721'. [ 158.571409][T11351] hsr_slave_0 (unregistering): left promiscuous mode [ 158.928275][T11375] Falling back ldisc for ttyS3. [ 158.982318][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2731'. [ 159.386588][T11398] netlink: 'syz.3.2735': attribute type 1 has an invalid length. [ 159.462471][T11403] Falling back ldisc for ttyS3. [ 159.485366][T11410] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 159.496642][T11410] SELinux: failed to load policy [ 159.501918][T11410] netlink: 'syz.0.2740': attribute type 13 has an invalid length. [ 159.535819][T11412] Falling back ldisc for ttyS3. [ 159.653451][T11429] FAULT_INJECTION: forcing a failure. [ 159.653451][T11429] name failslab, interval 1, probability 0, space 0, times 0 [ 159.666804][T11429] CPU: 0 UID: 0 PID: 11429 Comm: syz.3.2746 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 159.666843][T11429] Tainted: [W]=WARN [ 159.666848][T11429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.666860][T11429] Call Trace: [ 159.666868][T11429] [ 159.666877][T11429] __dump_stack+0x1d/0x30 [ 159.666898][T11429] dump_stack_lvl+0xe8/0x140 [ 159.666922][T11429] dump_stack+0x15/0x1b [ 159.666999][T11429] should_fail_ex+0x265/0x280 [ 159.667024][T11429] should_failslab+0x8c/0xb0 [ 159.667044][T11429] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 159.667067][T11429] ? __d_alloc+0x3d/0x350 [ 159.667131][T11429] __d_alloc+0x3d/0x350 [ 159.667152][T11429] ? inode_doinit_with_dentry+0x3a9/0x7a0 [ 159.667177][T11429] ? hashlen_string+0x54/0x110 [ 159.667205][T11429] d_alloc_name+0x61/0x150 [ 159.667242][T11429] proc_setup_self+0x6c/0x160 [ 159.667273][T11429] proc_fill_super+0x323/0x3d0 [ 159.667303][T11429] ? __pfx_proc_fill_super+0x10/0x10 [ 159.667323][T11429] get_tree_nodev+0x83/0x100 [ 159.667355][T11429] proc_get_tree+0x1c/0x30 [ 159.667374][T11429] vfs_get_tree+0x54/0x1d0 [ 159.667406][T11429] do_new_mount+0x207/0x680 [ 159.667434][T11429] path_mount+0x4a4/0xb20 [ 159.667537][T11429] ? user_path_at+0x109/0x130 [ 159.667580][T11429] __se_sys_mount+0x28f/0x2e0 [ 159.667598][T11429] ? fput+0x8f/0xc0 [ 159.667694][T11429] __x64_sys_mount+0x67/0x80 [ 159.667712][T11429] x64_sys_call+0xd36/0x2fb0 [ 159.667732][T11429] do_syscall_64+0xd2/0x200 [ 159.667746][T11429] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.667776][T11429] ? clear_bhb_loop+0x40/0x90 [ 159.667788][T11429] ? clear_bhb_loop+0x40/0x90 [ 159.667799][T11429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.667811][T11429] RIP: 0033:0x7ff8c87be929 [ 159.667821][T11429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.667868][T11429] RSP: 002b:00007ff8c6e06038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 159.667880][T11429] RAX: ffffffffffffffda RBX: 00007ff8c89e6080 RCX: 00007ff8c87be929 [ 159.667887][T11429] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 159.667894][T11429] RBP: 00007ff8c6e06090 R08: 0000000000000000 R09: 0000000000000000 [ 159.667928][T11429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 159.667935][T11429] R13: 0000000000000000 R14: 00007ff8c89e6080 R15: 00007ffd03d2ef58 [ 159.667946][T11429] [ 159.667951][T11429] proc_fill_super: can't allocate /proc/self [ 159.768366][T11434] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 159.984937][T11442] Falling back ldisc for ttyS3. [ 160.107024][T11470] netlink: 'syz.2.2765': attribute type 1 has an invalid length. [ 160.208732][T11476] Falling back ldisc for ttyS3. [ 160.245337][T11481] netlink: 'syz.2.2769': attribute type 10 has an invalid length. [ 160.254594][T11481] bond0: (slave dummy0): Releasing backup interface [ 160.261358][T11481] bond0: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 160.280379][T11481] team0: Port device dummy0 added [ 160.737461][T11511] __nla_validate_parse: 4 callbacks suppressed [ 160.737537][T11511] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2778'. [ 160.819366][T11513] Falling back ldisc for ttyS3. [ 160.915430][T11521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.924163][T11521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.960544][T11526] netlink: 'syz.0.2784': attribute type 1 has an invalid length. [ 160.985722][T11526] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2784'. [ 161.098049][T11538] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2789'. [ 161.171945][T11538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2789'. [ 161.662517][T11568] SELinux: syz.1.2795 (11568) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 161.800872][T11127] syz_tun (unregistering): left promiscuous mode [ 161.853632][T11553] lo speed is unknown, defaulting to 1000 [ 162.080817][T11553] chnl_net:caif_netlink_parms(): no params data found [ 162.120292][T11553] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.128112][T11553] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.137535][T11553] bridge_slave_0: entered allmulticast mode [ 162.145046][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 162.145059][ T29] audit: type=1400 audit(1751145920.797:4977): avc: denied { sqpoll } for pid=11584 comm="syz.1.2800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.172589][T11553] bridge_slave_0: entered promiscuous mode [ 162.179942][T11553] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.187139][T11553] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.195778][T11553] bridge_slave_1: entered allmulticast mode [ 162.203793][T11553] bridge_slave_1: entered promiscuous mode [ 162.232723][T11553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.282900][T11553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.307023][T11553] team0: Port device team_slave_0 added [ 162.314476][T11553] team0: Port device team_slave_1 added [ 162.336946][T11553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.344124][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.370750][T11553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.382788][T11553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.390735][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.417065][T11553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.445845][T11553] hsr_slave_0: entered promiscuous mode [ 162.451956][T11553] hsr_slave_1: entered promiscuous mode [ 162.457969][T11553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.465595][T11553] Cannot create hsr debugfs directory [ 162.696601][T11606] netlink: 'syz.2.2805': attribute type 6 has an invalid length. [ 162.704463][T11606] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2805'. [ 162.973649][T11614] netlink: 'syz.1.2810': attribute type 10 has an invalid length. [ 162.985305][ T12] bond3 (unregistering): (slave gretap1): Releasing active interface [ 163.000643][ T12] bond2 (unregistering): (slave geneve2): Releasing active interface [ 163.043757][ T12] bond0 (unregistering): left promiscuous mode [ 163.050003][ T12] bond_slave_0: left promiscuous mode [ 163.056001][ T12] bond_slave_1: left promiscuous mode [ 163.065810][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.075538][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.084862][ T12] bond0 (unregistering): Released all slaves [ 163.093782][ T12] bond1 (unregistering): Released all slaves [ 163.104296][ T12] bond2 (unregistering): Released all slaves [ 163.113027][ T12] bond3 (unregistering): Released all slaves [ 163.122160][ T12] bond4 (unregistering): Released all slaves [ 163.130465][ T12] bond5 (unregistering): Released all slaves [ 163.138945][ T12] bond6 (unregistering): Released all slaves [ 163.151033][T11614] team0: Port device dummy0 added [ 163.171953][T11553] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.186201][T11553] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.196985][ T12] tipc: Left network mode [ 163.201384][T11553] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.210743][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2813'. [ 163.219970][T11630] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2813'. [ 163.224968][T11553] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.310341][T11632] Falling back ldisc for ttyS3. [ 163.312415][T11553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.325186][ T29] audit: type=1326 audit(1751145921.891:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11641 comm="syz.4.2817" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4d492e929 code=0x0 [ 163.349655][ T12] batadv_slave_0: left promiscuous mode [ 163.363022][ T12] batadv_slave_1: left promiscuous mode [ 163.370616][ T12] hsr_slave_0: left promiscuous mode [ 163.377431][ T12] hsr_slave_1: left promiscuous mode [ 163.383674][T11647] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 163.392112][T11647] audit: out of memory in audit_log_start [ 163.399759][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.407442][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.491721][ T12] team0 (unregistering): Port device team_slave_1 removed [ 163.514760][ T12] team0 (unregistering): Port device team_slave_0 removed [ 163.578818][T11553] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.591829][ T4825] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.599008][ T4825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.629826][ T4825] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.637004][ T4825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.653539][T11553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.664032][T11553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.734681][T11553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.804056][T11553] veth0_vlan: entered promiscuous mode [ 163.820837][T11553] veth1_vlan: entered promiscuous mode [ 163.839094][T11553] veth0_macvtap: entered promiscuous mode [ 163.847931][T11553] veth1_macvtap: entered promiscuous mode [ 163.859327][T11553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.881462][T11553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.896377][T11553] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.905481][T11553] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.914521][T11553] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.923409][T11553] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.947711][ T29] audit: type=1400 audit(1751145922.471:4979): avc: denied { mounton } for pid=11553 comm="syz-executor" path="/root/syzkaller.4dg9LK/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 163.973370][ T29] audit: type=1400 audit(1751145922.471:4980): avc: denied { mount } for pid=11553 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 164.001120][ T29] audit: type=1400 audit(1751145922.471:4981): avc: denied { mounton } for pid=11553 comm="syz-executor" path="/root/syzkaller.4dg9LK/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 164.028835][ T29] audit: type=1400 audit(1751145922.471:4982): avc: denied { mounton } for pid=11553 comm="syz-executor" path="/root/syzkaller.4dg9LK/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=33865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 164.056802][ T29] audit: type=1400 audit(1751145922.471:4983): avc: denied { unmount } for pid=11553 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 164.077479][ T29] audit: type=1400 audit(1751145922.527:4984): avc: denied { mounton } for pid=11553 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 164.109295][T11667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2791'. [ 164.290763][ T3316] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 164.301738][ T3316] CPU: 0 UID: 0 PID: 3316 Comm: syz-executor Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 164.301838][ T3316] Tainted: [W]=WARN [ 164.301844][ T3316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 164.301853][ T3316] Call Trace: [ 164.301937][ T3316] [ 164.301945][ T3316] __dump_stack+0x1d/0x30 [ 164.301965][ T3316] dump_stack_lvl+0xe8/0x140 [ 164.302002][ T3316] dump_stack+0x15/0x1b [ 164.302018][ T3316] dump_header+0x81/0x220 [ 164.302044][ T3316] oom_kill_process+0x334/0x3f0 [ 164.302069][ T3316] out_of_memory+0x979/0xb80 [ 164.302104][ T3316] try_charge_memcg+0x5e6/0x9e0 [ 164.302127][ T3316] charge_memcg+0x51/0xc0 [ 164.302155][ T3316] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 164.302204][ T3316] __read_swap_cache_async+0x1df/0x350 [ 164.302272][ T3316] swap_cluster_readahead+0x376/0x3e0 [ 164.302301][ T3316] swapin_readahead+0xde/0x6f0 [ 164.302358][ T3316] ? __filemap_get_folio+0x4f7/0x6b0 [ 164.302387][ T3316] ? swap_cache_get_folio+0x77/0x200 [ 164.302452][ T3316] do_swap_page+0x301/0x2430 [ 164.302545][ T3316] ? finish_task_switch+0xad/0x2b0 [ 164.302569][ T3316] ? __pfx_default_wake_function+0x10/0x10 [ 164.302593][ T3316] handle_mm_fault+0x9a5/0x2be0 [ 164.302694][ T3316] ? mas_walk+0xf2/0x120 [ 164.302727][ T3316] do_user_addr_fault+0x636/0x1090 [ 164.302788][ T3316] ? fpregs_restore_userregs+0xe2/0x1d0 [ 164.302815][ T3316] ? switch_fpu_return+0xe/0x20 [ 164.302914][ T3316] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.302937][ T3316] exc_page_fault+0x62/0xa0 [ 164.302998][ T3316] asm_exc_page_fault+0x26/0x30 [ 164.303017][ T3316] RIP: 0033:0x7f98340a11a5 [ 164.303030][ T3316] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 9e 43 1c 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 164.303044][ T3316] RSP: 002b:00007ffd71b0f788 EFLAGS: 00010246 [ 164.303058][ T3316] RAX: 0000000000000000 RBX: 0000000000000590 RCX: 00007f98340a11a3 [ 164.303068][ T3316] RDX: 00007ffd71b0f7a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.303122][ T3316] RBP: 00007ffd71b0f80c R08: 0000000018454bad R09: 0000000000000000 [ 164.303132][ T3316] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 164.303145][ T3316] R13: 00000000000927c0 R14: 0000000000026012 R15: 00007ffd71b0f860 [ 164.303165][ T3316] [ 164.303171][ T3316] memory: usage 307200kB, limit 307200kB, failcnt 1596 [ 164.546661][ T3316] memory+swap: usage 310824kB, limit 9007199254740988kB, failcnt 0 [ 164.554993][ T3316] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 164.562269][ T3316] Memory cgroup stats for /syz2: [ 164.563021][ T3316] cache 0 [ 164.571038][ T3316] rss 0 [ 164.573840][ T3316] shmem 0 [ 164.576774][ T3316] mapped_file 0 [ 164.580073][T11691] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2832'. [ 164.580390][ T3316] dirty 0 [ 164.580399][ T3316] writeback 0 [ 164.597007][ T3316] workingset_refault_anon 384 [ 164.601684][ T3316] workingset_refault_file 1260 [ 164.606488][ T3316] swap 3710976 [ 164.609912][ T3316] swapcached 4096 [ 164.613560][ T3316] pgpgin 215859 [ 164.617066][ T3316] pgpgout 215858 [ 164.620616][ T3316] pgfault 230704 [ 164.624265][ T3316] pgmajfault 274 [ 164.628569][ T3316] inactive_anon 0 [ 164.632213][ T3316] active_anon 4096 [ 164.635965][ T3316] inactive_file 0 [ 164.639742][ T3316] active_file 0 [ 164.643197][ T3316] unevictable 0 [ 164.646713][ T3316] hierarchical_memory_limit 314572800 [ 164.652138][ T3316] hierarchical_memsw_limit 9223372036854771712 [ 164.658779][ T3316] total_cache 0 [ 164.662224][ T3316] total_rss 0 [ 164.665486][ T3316] total_shmem 0 [ 164.668944][ T3316] total_mapped_file 0 [ 164.672910][ T3316] total_dirty 0 [ 164.676409][ T3316] total_writeback 0 [ 164.680212][ T3316] total_workingset_refault_anon 384 [ 164.685424][ T3316] total_workingset_refault_file 1260 [ 164.691130][ T3316] total_swap 3710976 [ 164.695116][ T3316] total_swapcached 4096 [ 164.699305][ T3316] total_pgpgin 215982 [ 164.703746][ T3316] total_pgpgout 215981 [ 164.707787][ T3316] total_pgfault 230825 [ 164.711847][ T3316] total_pgmajfault 274 [ 164.715897][ T3316] total_inactive_anon 0 [ 164.720033][ T3316] total_active_anon 4096 [ 164.725171][ T3316] total_inactive_file 0 [ 164.729385][ T3316] total_active_file 0 [ 164.733389][ T3316] total_unevictable 0 [ 164.737461][ T3316] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2819,pid=11648,uid=0 [ 164.752210][ T3316] Memory cgroup out of memory: Killed process 11648 (syz.2.2819) total-vm:93620kB, anon-rss:936kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 164.778517][T11691] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2832'. [ 164.855351][T11703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.864998][T11703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.352508][T11733] veth15: entered promiscuous mode [ 165.946061][T11748] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 166.687445][T11779] netlink: 'syz.2.2857': attribute type 10 has an invalid length. [ 166.702204][T11782] __nla_validate_parse: 3 callbacks suppressed [ 166.702265][T11782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2858'. [ 166.717542][T11782] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2858'. [ 166.730138][T11768] lo speed is unknown, defaulting to 1000 [ 166.755410][ T4825] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.794795][T11788] netlink: 'syz.3.2861': attribute type 13 has an invalid length. [ 166.808487][ T4825] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.828742][T11788] gretap0: refused to change device tx_queue_len [ 166.835184][T11788] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 166.850956][ T36] lo speed is unknown, defaulting to 1000 [ 166.856749][ T36] syz0: Port: 1 Link DOWN [ 166.878746][ T4825] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.919915][T11768] chnl_net:caif_netlink_parms(): no params data found [ 166.933521][ T4825] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.984005][T11768] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.992067][T11768] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.999862][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2861'. [ 167.000320][T11768] bridge_slave_0: entered allmulticast mode [ 167.017784][T11768] bridge_slave_0: entered promiscuous mode [ 167.026428][T11768] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.033629][T11768] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.040930][T11795] Falling back ldisc for ttyS3. [ 167.046254][T11768] bridge_slave_1: entered allmulticast mode [ 167.055567][T11768] bridge_slave_1: entered promiscuous mode [ 167.087417][T11768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.102943][T11768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.139102][T11768] team0: Port device team_slave_0 added [ 167.145618][T11768] team0: Port device team_slave_1 added [ 167.152503][ T4825] bridge_slave_1: left allmulticast mode [ 167.158164][ T4825] bridge_slave_1: left promiscuous mode [ 167.163880][ T4825] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.173653][ T4825] bridge_slave_0: left allmulticast mode [ 167.179465][ T4825] bridge_slave_0: left promiscuous mode [ 167.185878][ T4825] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.237938][ T4825] bond2 (unregistering): (slave gretap1): Releasing active interface [ 167.253072][ T4825] bond1 (unregistering): (slave geneve2): Releasing active interface [ 167.263696][ T4825] tipc: Disabling bearer [ 167.400243][T11785] syz.2.2860 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 167.411326][T11785] CPU: 0 UID: 0 PID: 11785 Comm: syz.2.2860 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 167.411379][T11785] Tainted: [W]=WARN [ 167.411386][T11785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.411399][T11785] Call Trace: [ 167.411406][T11785] [ 167.411415][T11785] __dump_stack+0x1d/0x30 [ 167.411435][T11785] dump_stack_lvl+0xe8/0x140 [ 167.411451][T11785] dump_stack+0x15/0x1b [ 167.411539][T11785] dump_header+0x81/0x220 [ 167.411574][T11785] oom_kill_process+0x334/0x3f0 [ 167.411669][T11785] out_of_memory+0x979/0xb80 [ 167.411732][T11785] try_charge_memcg+0x5e6/0x9e0 [ 167.411827][T11785] charge_memcg+0x51/0xc0 [ 167.411856][T11785] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 167.411970][T11785] __read_swap_cache_async+0x1df/0x350 [ 167.412005][T11785] swap_cluster_readahead+0x277/0x3e0 [ 167.412086][T11785] swapin_readahead+0xde/0x6f0 [ 167.412118][T11785] ? __filemap_get_folio+0x4f7/0x6b0 [ 167.412150][T11785] ? swap_cache_get_folio+0x77/0x200 [ 167.412184][T11785] do_swap_page+0x301/0x2430 [ 167.412205][T11785] ? css_rstat_updated+0xcd/0x5b0 [ 167.412247][T11785] ? __pfx_default_wake_function+0x10/0x10 [ 167.412360][T11785] handle_mm_fault+0x9a5/0x2be0 [ 167.412427][T11785] ? mas_walk+0xf2/0x120 [ 167.412522][T11785] do_user_addr_fault+0x636/0x1090 [ 167.412551][T11785] ? fpregs_restore_userregs+0xe2/0x1d0 [ 167.412582][T11785] ? switch_fpu_return+0xe/0x20 [ 167.412613][T11785] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 167.412639][T11785] exc_page_fault+0x62/0xa0 [ 167.412667][T11785] asm_exc_page_fault+0x26/0x30 [ 167.412701][T11785] RIP: 0033:0x7f9833f4538c [ 167.412718][T11785] Code: 66 0f 1f 44 00 00 69 3d 26 03 e8 00 e8 03 00 00 48 8d 1d 27 0c 35 00 e8 02 95 12 00 eb 0c 48 81 c3 e0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 e0 00 00 [ 167.412754][T11785] RSP: 002b:00007ffd71b0f5b0 EFLAGS: 00010202 [ 167.412769][T11785] RAX: 0000000000000000 RBX: 00007f9834295fa0 RCX: 0000000000000000 [ 167.412783][T11785] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555579530808 [ 167.412796][T11785] RBP: 00007f9834297ba0 R08: 0000000000000000 R09: 7fffffffffffffff [ 167.412809][T11785] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000026f8e [ 167.412823][T11785] R13: 00007ffd71b0f6a0 R14: ffffffffffffffff R15: 00007ffd71b0f6c0 [ 167.412869][T11785] [ 167.412877][T11785] memory: usage 307200kB, limit 307200kB, failcnt 1787 [ 167.658137][T11785] memory+swap: usage 310828kB, limit 9007199254740988kB, failcnt 0 [ 167.666567][T11785] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 167.673866][T11785] Memory cgroup stats for /syz2: [ 167.674313][T11785] cache 0 [ 167.682218][T11785] rss 0 [ 167.685384][T11785] shmem 0 [ 167.688509][T11785] mapped_file 0 [ 167.692118][T11785] dirty 0 [ 167.695089][T11785] writeback 0 [ 167.698442][T11785] workingset_refault_anon 430 [ 167.703110][T11785] workingset_refault_file 1469 [ 167.707991][T11785] swap 3715072 [ 167.711341][T11785] swapcached 0 [ 167.715116][T11785] pgpgin 216318 [ 167.718566][T11785] pgpgout 216318 [ 167.722101][T11785] pgfault 231334 [ 167.725866][T11785] pgmajfault 308 [ 167.729410][T11785] inactive_anon 0 [ 167.733120][T11785] active_anon 0 [ 167.736657][T11785] inactive_file 0 [ 167.740334][T11785] active_file 0 [ 167.743940][T11785] unevictable 0 [ 167.747984][T11785] hierarchical_memory_limit 314572800 [ 167.753414][T11785] hierarchical_memsw_limit 9223372036854771712 [ 167.759680][T11785] total_cache 0 [ 167.763116][T11785] total_rss 0 [ 167.766378][T11785] total_shmem 0 [ 167.769828][T11785] total_mapped_file 0 [ 167.773787][T11785] total_dirty 0 [ 167.777221][T11785] total_writeback 0 [ 167.781467][T11785] total_workingset_refault_anon 430 [ 167.786710][T11785] total_workingset_refault_file 1469 [ 167.791987][T11785] total_swap 3715072 [ 167.795867][T11785] total_swapcached 0 [ 167.799741][T11785] total_pgpgin 216441 [ 167.803747][T11785] total_pgpgout 216441 [ 167.807805][T11785] total_pgfault 231455 [ 167.812391][T11785] total_pgmajfault 308 [ 167.816534][T11785] total_inactive_anon 0 [ 167.820772][T11785] total_active_anon 0 [ 167.824808][T11785] total_inactive_file 0 [ 167.828979][T11785] total_active_file 0 [ 167.832968][T11785] total_unevictable 0 [ 167.836982][T11785] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2860,pid=11785,uid=0 [ 167.852158][T11785] Memory cgroup out of memory: Killed process 11785 (syz.2.2860) total-vm:93620kB, anon-rss:932kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 167.872412][ T4825] team0: Port device bond0 removed [ 167.880275][ T4825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.890303][ T4825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.901091][ T4825] bond0 (unregistering): Released all slaves [ 167.910527][ T4825] bond1 (unregistering): Released all slaves [ 167.921601][ T4825] bond2 (unregistering): Released all slaves [ 167.930872][ T4825] bond3 (unregistering): Released all slaves [ 167.939900][ T4825] bond4 (unregistering): Released all slaves [ 167.948430][ T4825] bond5 (unregistering): Released all slaves [ 167.958179][ T4825] bond6 (unregistering): Released all slaves [ 167.966988][ T4825] bond7 (unregistering): Released all slaves [ 167.990238][T11768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.997321][T11768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.023294][T11768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.039202][T11768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.046553][T11768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.073374][T11768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.089442][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 168.089456][ T29] audit: type=1400 audit(1751145926.352:5118): avc: denied { unmount } for pid=11553 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 168.130347][ T29] audit: type=1400 audit(1751145926.390:5119): avc: denied { create } for pid=11807 comm="syz.3.2867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 168.150744][ T29] audit: type=1400 audit(1751145926.390:5120): avc: denied { create } for pid=11807 comm="syz.3.2867" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.151856][ T4825] tipc: Left network mode [ 168.171619][ T29] audit: type=1400 audit(1751145926.399:5121): avc: denied { create } for pid=11811 comm="syz.0.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.199636][ T29] audit: type=1400 audit(1751145926.399:5122): avc: denied { write } for pid=11811 comm="syz.0.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.220522][ T29] audit: type=1400 audit(1751145926.399:5123): avc: denied { nlmsg_write } for pid=11811 comm="syz.0.2866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 168.241564][ T29] audit: type=1400 audit(1751145926.399:5124): avc: denied { write } for pid=11811 comm="syz.0.2866" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 168.264516][ T29] audit: type=1400 audit(1751145926.399:5125): avc: denied { create } for pid=11809 comm="syz.4.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.284973][ T29] audit: type=1400 audit(1751145926.399:5126): avc: denied { setopt } for pid=11809 comm="syz.4.2868" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 168.306775][ T29] audit: type=1400 audit(1751145926.521:5127): avc: denied { read } for pid=11809 comm="syz.4.2868" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 168.349640][T11768] hsr_slave_0: entered promiscuous mode [ 168.372421][T11768] hsr_slave_1: entered promiscuous mode [ 168.380197][T11768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.389081][T11768] Cannot create hsr debugfs directory [ 168.454725][ T4825] batadv_slave_0: left promiscuous mode [ 168.461249][ T4825] batadv_slave_1: left promiscuous mode [ 168.474411][ T4825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.481936][ T4825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.493482][ T4825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.501110][ T4825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.515006][ T4825] veth1_macvtap: left promiscuous mode [ 168.521348][ T4825] veth0_macvtap: left promiscuous mode [ 168.527639][ T4825] veth1_vlan: left promiscuous mode [ 168.533146][ T4825] veth0_vlan: left promiscuous mode [ 169.543829][ T4825] team0 (unregistering): Port device team_slave_1 removed [ 169.559841][ T4825] team0 (unregistering): Port device C removed [ 169.769921][ T4825] team0 (unregistering): Port device dummy0 removed [ 169.981154][T11854] netlink: 'syz.0.2880': attribute type 13 has an invalid length. [ 170.035234][T11854] gretap0: refused to change device tx_queue_len [ 170.039421][T11855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2880'. [ 170.041641][T11854] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 170.504795][T11768] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 170.565920][ T4825] IPVS: stop unused estimator thread 0... [ 170.574221][T11768] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 170.872644][T11768] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 170.887434][T11768] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.017653][T11768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.132792][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2887'. [ 171.142006][T11880] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2887'. [ 171.159235][T11768] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.180731][ T4812] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.187845][ T4812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.223657][ T4812] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.231099][ T4812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.271526][T11768] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.282805][T11768] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.389304][T11768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.458087][T11890] Falling back ldisc for ttyS3. [ 171.481052][T11768] veth0_vlan: entered promiscuous mode [ 171.505480][T11768] veth1_vlan: entered promiscuous mode [ 171.536507][T11768] veth0_macvtap: entered promiscuous mode [ 171.571759][T11768] veth1_macvtap: entered promiscuous mode [ 171.616009][T11768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.644314][T11768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.663195][T11768] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.672233][T11768] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.681029][T11768] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.690218][T11768] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.772494][T11927] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2897'. [ 171.781899][T11927] unsupported nla_type 65024 [ 171.802335][T11927] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2897'. [ 172.184830][T11938] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2854'. [ 172.250520][T11947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2854'. [ 172.329205][T11946] smc: net device bond0 applied user defined pnetid SYZ2 [ 172.339345][T11946] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2 [ 172.349489][T11946] smc: net device bond0 erased user defined pnetid SYZ2 [ 172.366732][T11946] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ2 [ 173.274746][T11981] lo speed is unknown, defaulting to 1000 [ 173.691350][T12008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2929'. [ 173.700487][T12008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2929'. [ 173.776407][T12010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2930'. [ 173.786171][T12010] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2930'. [ 173.804286][T12014] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2931'. [ 173.844894][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 173.844943][ T29] audit: type=1400 audit(1751145931.739:5327): avc: denied { create } for pid=12022 comm="syz.1.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 173.884152][T12024] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2931'. [ 173.903886][ T29] audit: type=1400 audit(1751145931.739:5328): avc: denied { setopt } for pid=12022 comm="syz.1.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 173.949626][T12035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2938'. [ 173.981300][ T29] audit: type=1400 audit(1751145931.852:5329): avc: denied { create } for pid=12037 comm="syz.4.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 174.001521][ T29] audit: type=1400 audit(1751145931.852:5330): avc: denied { create } for pid=12037 comm="syz.4.2939" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 174.048772][ T29] audit: type=1400 audit(1751145931.917:5331): avc: denied { open } for pid=12037 comm="syz.4.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 174.068179][ T29] audit: type=1400 audit(1751145931.917:5332): avc: denied { perfmon } for pid=12037 comm="syz.4.2939" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.089356][ T29] audit: type=1400 audit(1751145931.917:5333): avc: denied { kernel } for pid=12037 comm="syz.4.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 174.109004][ T29] audit: type=1400 audit(1751145931.917:5334): avc: denied { tracepoint } for pid=12037 comm="syz.4.2939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 174.129049][ T29] audit: type=1400 audit(1751145931.926:5335): avc: denied { map_create } for pid=12045 comm="syz.2.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.148312][ T29] audit: type=1400 audit(1751145931.926:5336): avc: denied { map_read map_write } for pid=12045 comm="syz.2.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.305450][T12067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2951'. [ 174.383783][ T36] kernel write not supported for file /sg0 (pid: 36 comm: kworker/1:1) [ 175.569208][T12115] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.641833][T12117] lo speed is unknown, defaulting to 1000 [ 175.697071][T12136] program syz.0.2972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.990207][T12159] Falling back ldisc for ttyS3. [ 176.642837][T12192] Falling back ldisc for ttyS3. [ 177.040980][T12218] ================================================================== [ 177.049104][T12218] BUG: KCSAN: data-race in getrusage / try_to_unmap_one [ 177.056060][T12218] [ 177.058373][T12218] write to 0xffff88811b3cf9f0 of 8 bytes by task 12220 on cpu 1: [ 177.066078][T12218] try_to_unmap_one+0xf63/0x21d0 [ 177.071009][T12218] __rmap_walk_file+0x1e9/0x2b0 [ 177.075848][T12218] try_to_unmap+0x1ae/0x1e0 [ 177.080336][T12218] shrink_folio_list+0x11b9/0x2560 [ 177.085441][T12218] reclaim_folio_list+0x83/0x2b0 [ 177.090375][T12218] reclaim_pages+0x215/0x270 [ 177.095055][T12218] madvise_cold_or_pageout_pte_range+0xd0d/0xd80 [ 177.101376][T12218] walk_pgd_range+0xa47/0x14e0 [ 177.106133][T12218] __walk_page_range+0xdd/0x340 [ 177.110980][T12218] walk_page_range_mm+0x352/0x4a0 [ 177.116005][T12218] walk_page_range+0x56/0x70 [ 177.120592][T12218] madvise_do_behavior+0x1a45/0x1f20 [ 177.125867][T12218] do_madvise+0x103/0x190 [ 177.130184][T12218] __x64_sys_madvise+0x64/0x80 [ 177.134943][T12218] x64_sys_call+0x2455/0x2fb0 [ 177.139611][T12218] do_syscall_64+0xd2/0x200 [ 177.144190][T12218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.150133][T12218] [ 177.152539][T12218] read to 0xffff88811b3cf9f0 of 8 bytes by task 12218 on cpu 0: [ 177.160163][T12218] getrusage+0xa52/0xbb0 [ 177.164407][T12218] io_sq_thread+0x5dd/0x1180 [ 177.168988][T12218] ret_from_fork+0xda/0x150 [ 177.173479][T12218] ret_from_fork_asm+0x1a/0x30 [ 177.178233][T12218] [ 177.180541][T12218] value changed: 0x00000000000021b8 -> 0x00000000000025a2 [ 177.187631][T12218] [ 177.189941][T12218] Reported by Kernel Concurrency Sanitizer on: [ 177.196079][T12218] CPU: 0 UID: 0 PID: 12218 Comm: iou-sqp-12215 Tainted: G W 6.16.0-rc3-syzkaller-00190-g67a993863163 #0 PREEMPT(voluntary) [ 177.210414][T12218] Tainted: [W]=WARN [ 177.214287][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.224334][T12218] ==================================================================