last executing test programs: 38.66896887s ago: executing program 4 (id=51): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, 0x0, 0x70}}], 0x1, 0x240440d1) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005900)={0x5, 0x21b, 0x0, {}, {0x0, 0x2710}, {}, 0x2}, 0x48}, 0x300}, 0x20000000) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) 38.636429294s ago: executing program 4 (id=53): perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x10, 0x0, 0x0, 0x3, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6694380b}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x3000, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x5daa, 0x400) write$hidraw(r0, &(0x7f0000000040)="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", 0xfa) 38.553280985s ago: executing program 4 (id=57): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000006800e95800000000000000000a00000000000000040004"], 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, r6, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000680)={0x7, 0x7fffffffffffffff, 0x80, 0x2, 0xfffffffffffffffb, 0xca, 0x3}, 0x0, &(0x7f0000000700)={0xf, 0x8, 0x40, 0x5, 0xffffffffffffffff, 0xac, 0xed6f, 0xe21}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 37.596752828s ago: executing program 4 (id=71): set_mempolicy(0x4005, 0x0, 0x9) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x47f, &(0x7f00000004c0)="$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") timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000340)=@nfc, &(0x7f00000000c0)=0x80, 0x800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={r4, 0x8000, 0x3f1d81cf, 0x4, 0x7, 0x6, 0xc, 0x5, {r4, @in6={{0xa, 0x4e22, 0x0, @loopback, 0x9}}, 0x4, 0x8, 0x7fff, 0x3, 0xa32}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x90, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e22, 0x9, @mcast1, 0x7fff}, @in6={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10000}, @in6={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x19a}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x10, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}]}, &(0x7f0000000480)=0x10) wait4(r1, 0x0, 0x20000000, 0x0) ptrace(0x10, r1) unshare(0x26020400) wait4(r1, 0x0, 0x8, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d7, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) close(r8) close(r5) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 36.508947408s ago: executing program 4 (id=83): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x4, 0x4005, 0xb, 0x0, 0x1, 0xfffffffe, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x400, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x7f36, 0x2, 0x4, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000980)=@IORING_OP_RECVMSG={0xa, 0x11, 0x0, r3, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000540)=""/217, 0xd9}, {&(0x7f0000000100)}, {&(0x7f00000001c0)=""/46, 0x2e}, {&(0x7f0000000640)=""/209, 0xd1}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000740)=""/122, 0x7a}], 0x6, &(0x7f0000000840)=""/230, 0xe6}, 0x0, 0x10040, 0x2, {0x1}}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x2, 0x0, 0x20008000}, 0x10) r5 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x2, @loopback={0xfec0ffff00000000}, 0x20}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="b9", 0x1}], 0x1}, 0x40844) io_uring_enter(r0, 0x7a73, 0xd5ed, 0x9, &(0x7f0000000100)={[0x6]}, 0x8) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) io_uring_enter(r6, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000a00), &(0x7f0000000a40)=0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000a80)={'wlan0\x00', {0x2, 0x4e24, @remote}}) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) r10 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000380)={'fscrypt:', @auto=[0x66, 0x33, 0x51, 0x63, 0x62, 0x35, 0x8e03762c681134d4, 0x37, 0x31, 0x35, 0x37, 0x39, 0x35, 0x31, 0x61, 0x66]}, &(0x7f00000004c0)={0x0, "279d9208248a28b2f3f14f73bd6557865c2177c19518d33d1c641f7be50f99d71a927cf4fa1f34047aea2f89e37cf8fa4b2ca043895ca1607d4822dff94ace4f", 0x30}, 0x48, 0xfffffffffffffffe) r11 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r10, r11) syz_io_uring_setup(0x351c, &(0x7f00000000c0)={0x0, 0x79af, 0x3380, 0x2, 0x40024a}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x21, 0x6000, @fd_index=0x4, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0x0, {0x1, r14}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x80, &(0x7f00000009c0)=0x4, 0x0, 0x4) 36.028109189s ago: executing program 4 (id=89): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x7, 0x0, 0x0, 0x6, 0xa401a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x100420, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x6, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0xfffffffc, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) getpriority(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x0, 0xcbb, 0x4, @mcast1, @mcast1, 0x0, 0x10, 0x0, 0xd65}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1ff, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x630, 0x460, 0x460, 0x320, 0x460, 0x0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [0xff, 0xffffffff, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'pimreg0\x00', 'macsec0\x00', {}, {}, 0x2, 0x8, 0x4, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8000, 0x78e, 0x1}}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xff000000, 0xffffffff], [0xffffffff, 0x0, 0xff, 0x4a25e9edf1a2a8f7], 'pimreg0\x00', 'syzkaller1\x00', {0xff}, {}, 0x2, 0xb, 0x0, 0x1}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x23, 0x10, 0xe, 0x39, 0x6d7, @local, @local, @mcast1, [0x0, 0xffffff00, 0xffffff00, 0xff000000], [0x1feffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 0x240, 0x4130}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@empty, 0x6, 0x3d, 0x8}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@local, 0x27, 0x8}}}, {{@ipv6={@mcast1, @mcast1, [0xff, 0x0, 0xffffffff, 0xffffff00], [0x0, 0xffffff00, 0x0, 0xff000000], 'rose0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x6c, 0x3, 0x2, 0x8}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x8, 0x0, 0x2}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettimeofday(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0x1, 0xf3, 0x2, 0x63cdaba}, {0xff, 0x9, 0x7, 0x6}, {0x6, 0xf4, 0x8, 0x8}]}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0x1401, 0x4, 0x3, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004005}, 0x20000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) 35.958264788s ago: executing program 32 (id=89): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x7, 0x0, 0x0, 0x6, 0xa401a, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x100420, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x6, 0xffffffffffffffff, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0xfffffffc, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) getpriority(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x0, 0xcbb, 0x4, @mcast1, @mcast1, 0x0, 0x10, 0x0, 0xd65}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x1ff, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x630, 0x460, 0x460, 0x320, 0x460, 0x0, 0x588, 0x588, 0x588, 0x588, 0x588, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @local, [0xff, 0xffffffff, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff, 0xff, 0xff000000], 'pimreg0\x00', 'macsec0\x00', {}, {}, 0x2, 0x8, 0x4, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8000, 0x78e, 0x1}}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xff, 0xff000000, 0xffffffff], [0xffffffff, 0x0, 0xff, 0x4a25e9edf1a2a8f7], 'pimreg0\x00', 'syzkaller1\x00', {0xff}, {}, 0x2, 0xb, 0x0, 0x1}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@srh1={{0x90}, {0x23, 0x10, 0xe, 0x39, 0x6d7, @local, @local, @mcast1, [0x0, 0xffffff00, 0xffffff00, 0xff000000], [0x1feffff00, 0xff000000, 0xffffffff, 0xffffffff], [0xffffffff, 0xff000000, 0xff, 0xffffffff], 0x240, 0x4130}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@private1, @ipv4=@empty, 0x6, 0x3d, 0x8}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@local, 0x27, 0x8}}}, {{@ipv6={@mcast1, @mcast1, [0xff, 0x0, 0xffffffff, 0xffffff00], [0x0, 0xffffff00, 0x0, 0xff000000], 'rose0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x6c, 0x3, 0x2, 0x8}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x8, 0x0, 0x2}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) gettimeofday(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, 0x0, 0x0) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x3, &(0x7f0000000080)=[{0x1, 0xf3, 0x2, 0x63cdaba}, {0xff, 0x9, 0x7, 0x6}, {0x6, 0xf4, 0x8, 0x8}]}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0x1401, 0x4, 0x3, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004005}, 0x20000000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) 20.012871578s ago: executing program 0 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = syz_io_uring_setup(0xae9, &(0x7f0000000180)={0x0, 0x8969, 0x400, 0xfffffffd, 0x4, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000200)) r3 = io_uring_setup(0x37e3, &(0x7f0000000100)={0x0, 0x9c39, 0x8000, 0x2, 0x160, 0x0, r2}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, &(0x7f0000000040)=0x46) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) read(r6, &(0x7f00000001c0)=""/155, 0x9b) listen(r4, 0x0) r7 = accept(r4, 0x0, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) openat$cgroup_ro(r8, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) close_range(r3, r7, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040), 0x4) 19.155839818s ago: executing program 0 (id=307): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x1, 0x1}, 0x8) (async) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read(r1, &(0x7f00000000c0)=""/164, 0xa4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f8, 0x4, 0x70bd25, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0xc000808) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000280)={0x0, 0x8000000000000001, [0x80000000, 0xfffffffffffff2c0, 0x3, 0x7, 0x3b9d, 0xfffffffffffffffd]}) sendmsg$qrtr(r0, &(0x7f00000006c0)={&(0x7f00000002c0)={0x2a, 0xffffffff, 0x7ffe}, 0xc, &(0x7f0000000540)=[{&(0x7f0000000300)="d31018330033db31821c87413d733c67989d9203ea99332cf21b01f94953570cff2a2839136b8feb8e32527bcdda5f3058c72af4f05ceb83df1fd5505c4722c19d59ae4f625876710ba4f8b2494249030dc35bccc57b379d7ade732bbcb33768b3f707848eb31519bf6b8f63bc021a12af27dddb629c5159d22df9ee269e7d1bf2b590fffb8d9baecbaa604743038daeea51e9d6b1e633ab52826a4b4f8b29fe6d7d6aacd4290315f4949445050b7e93dfc784249b7e3c48eb1d4ca57114c5843a452bf9e1c5", 0xc6}, {&(0x7f0000000400)="934318c87bed9131b3499e1c9bb6c24aaa44ec6f1af5cd1d2077421ebfac54242db718364fdcc5877dec6fcc569d13a4ae392cb9107843c707e1f6eaa14f978c407860e0c62790e9c646", 0x4a}, {&(0x7f0000000480)="74f172431e1696d960841daf4e6862cb49242cd9561168f89ddb006809bc914553857f7c05ac44a2e2ad016db7752fcd9af7507d235dc3355bbc8c9a8f9a3bb9e4d62769d0798a9f9f7b60d2814971c03930c2c2d743f0690e023b6010be99ff8fc3c2ac870bcef065d724ac03f39d5dfd9194673a", 0x75}, {&(0x7f0000000500)="f69f94cb8326ee55def6", 0xa}], 0x4, &(0x7f0000000580)=[{0x18, 0x116, 0xffffff74, "bc24dc68"}, {0x108, 0x103, 0x10001, "31ea5cda28739a9b84c377d204ef5fdab88da79368cafc7b8f4f52059dbb965066cf3f6466b165767698b06c8ca8f68d7ada5a61a2faac4dcd3172d24c37eeec9d6be7e27c3b2e4bc3180ae0cdbc2ea505ac36ee2fc40a22a73f7572c8da875fb1445245488f39cdae3c56a0c3337faaf17f83481278619ba68bcf1920d977a18fe83de7cf86adadfdec87341a396f2a9dcba32f7c69de9113ba78affbe05950608d600db5cdfc2fcca5ce8fce17ea67f2afaa0eedc6073719f2d56ce2a4ed2b4bc3bc219748750d2c6499232a28eb1ef6152754e52e20be9f4fa1f34f89e1ddb06ab7978ab3cb93f9421ae67e65c7ea9b973aa649d48d"}], 0x120, 0x4040000}, 0x38) (async) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$selinux_context(r3, &(0x7f0000000740)='system_u:object_r:crond_initrc_exec_t:s0\x00', 0x29) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000780)={'sit0\x00'}) (async, rerun: 32) r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)=@getlink={0x8c, 0x12, 0x20, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x200}, [@IFLA_NET_NS_FD={0x8, 0x1c, r4}, @IFLA_PHYS_SWITCH_ID={0x15, 0x24, "36216b81f7db723b79f5ca55366bf26308"}, @IFLA_MAP={0x24, 0xe, {0x5, 0x2, 0x5, 0x8, 0x0, 0x5}}, @IFLA_NUM_RX_QUEUES={0x8}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_IFALIAS={0x14, 0x14, 'virt_wifi0\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000885}, 0x4000840) (async, rerun: 32) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000980)=0x1, 0x4) (rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), 0xffffffffffffffff) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000a40)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000a80)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000ac0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000b00)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000b40)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000b80)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000bc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000c00)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000c40)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000d40)={&(0x7f00000009c0), 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x64, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}]}, 0x64}, 0x1, 0x0, 0x0, 0x8010}, 0x4008080) write$selinux_context(r0, &(0x7f0000000d80)='system_u:object_r:syslog_conf_t:s0\x00', 0x23) getsockopt$sock_buf(r5, 0x1, 0x37, &(0x7f0000000dc0)=""/224, &(0x7f0000000ec0)=0xe0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000f40)={0x1, &(0x7f0000000f00)=[{0x9, 0x9, 0x88, 0x9}]}) 19.13938885s ago: executing program 0 (id=309): mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000000)=0x4, 0x5, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x17, 0x7ffc1ffd}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001cc0)={{r1}, &(0x7f0000001c40), &(0x7f0000001c80)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001d00)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008018}, 0x4020080) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x300000000000000, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x8, 0x8146000000000000}, 0x0, &(0x7f0000000240)={0x1b, 0x3, 0x8000, 0x800, 0x1000000002, 0x2, 0x0, 0x6}, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x958b4000) remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) 18.216852139s ago: executing program 0 (id=334): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100), 0x1, 0x519, &(0x7f00000009c0)="$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") mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f00000021c0)='./file0\x00', 0x0, 0x20, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file2\x00', 0x105000, 0x141) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x3c, 0x40, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x3, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x0, 0x3c, 0x40, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x3, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x3920e, r0, 0x8000000003, 0x80001, 0x3, 0x6}) 17.778021885s ago: executing program 0 (id=341): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="4f1550b4bda327c8d89855c334ac0eae", 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000016c0)='/sys/kernel/uevent_seqnum', 0x3, 0x100) vmsplice(r1, 0x0, 0x0, 0x4) 17.536760726s ago: executing program 0 (id=353): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x6, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_RATE={0x14, 0x6, {0xf4d, 0x1c13, 0x6, 0x80000f}}]}}}]}, 0x60}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) close(0x3) 17.478983493s ago: executing program 33 (id=353): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x6, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000005f0001"], 0x20}], 0x1}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0xe0b, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1ff, 0x6, 0xfffffffd, 0x0, 0xfffffffd, 0x32d}, [@TCA_NETEM_RATE={0x14, 0x6, {0xf4d, 0x1c13, 0x6, 0x80000f}}]}}}]}, 0x60}}, 0x0) sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0x36, 0x0, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) close(0x3) 3.237285993s ago: executing program 1 (id=633): r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000014}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000140), 0xa, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={r3}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40041}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r5, 0x5452, &(0x7f0000001840)=0x5d4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@var={0x1, 0x0, 0x0, 0xe, 0x4, 0x2}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x66, 0x0, 0xe, 0x5}, @enum={0xc, 0x5, 0x0, 0x6, 0x4, [{0x1, 0xa}, {0x4, 0x5}, {0x4, 0x9}, {0x10, 0x40}, {0x1, 0xffffff81}]}]}, {0x0, [0x5f, 0x61, 0x5f, 0x2e]}}, &(0x7f00000001c0)=""/239, 0x72, 0xef, 0x0, 0x1, 0x10000, @value=r5}, 0x28) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x3, 0x280, 0xe8, 0xb, 0x148, 0x0, 0x148, 0x1e8, 0x230, 0x242, 0x1e8, 0x215, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0xff0f000000000000}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x8}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xffffffff, 0xff000000, 'bond0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x1, 0x2, 0x3}, 0xec010000, 0x98, 0x100, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x2, 0x1, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x8, 0x10, 0x8, 0x1, 'snmp_trap\x00', 'syz1\x00', {0x3e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000810200000000000095"], &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 2.437032246s ago: executing program 6 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x639, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xf802, 0xe280}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x5}]}, 0x28}}, 0x24000000) 2.356686166s ago: executing program 6 (id=656): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x321c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2d7, &(0x7f0000000a00)="$eJzs3b+LHFUcAPDv7G1mR6PsFVYiZMEUVsFLJzZ7SALiVYYt1EIPk4DcLkICB/7AMZWlNhYW/gWC4B+Sxv9AsBXsjBAYeTOzt7PnutmTbMTc59PcY973+973zY+7uWLffvDS7OjmKG7f+/yXKIoseuMYx4MsdqPXj9aXsWT8TQAA/2cPqip+rxpnycsiotheWQDAFm3297+/aP70RMoCALboxjvvvrV/cHDt7SKKuD776niS/rNPP5v+/dvxUUzjVrwaw3gYUb8oXIj6bSE1r1dVVfZHyW5cnpXHk5Q5e/9+O/7+bxF1/l4MY7c+dPK2Uee/eXBtb9To5Jepjmfb+ccp/2oM44WT5KX8qyvyY5LHKy936r8Sw/j5w/g4pnGzLmKR/8XeaPRG9e0fn72Xykv5WXk8GdRxC9XOE740AAAAAAAAAAAAAAAAAAAAAAA8xa60e+cMYnQpLs/avXXK8niy8zDyFNEG9CKW9+dp8rP5QN39gdIIVXzf2VJwVLWBi/x+vNjvbiwIAAAAAAAAAAAAAAAAAAAA59fdTz49OpxOb915LI35bgD9iPjzRsS/HWfcOXIpFl3PPd+M3w0etHMeTqe9trk04P28eyR25jFZxNoy0iIe02l5VOOZ0zXPGz/8mBb46HG+PkkvOl2vrV7ghe2vK4rmJB8dZqvnGsT8SNHeJN/lEYuYPDacK/+nrqq+JS5uWHO+smt45rXnF+tGuSYmsnXPxeu/Lt3hWZwKzuuz2sy19AinyCbm9AOSGukOOyw2uu7p2tVPyt9k9W4dg638HgIAAAAAAAAAAAAAAAAAALqf/1/ReW9taq/yUWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnhKL7/8/Q6NskzcIzuPO3f94iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwDfwUAAP//0rtUyg==") r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690ba, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffff428}, 0x0, 0x400000000, 0xffffffffffffffff, 0x3) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x3}, 0x0, 0x0, 0x10000001, 0x4, 0x2, 0xfd, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000144000/0x3000)=nil, 0x3000, &(0x7f0000000040)='blkio.bfq.io_merged\x00') ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="720ac4ff000000007110ab0000000000b7080000000000007b8af8ff00000000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="00000000000000b7050000084e32c8f5856000000085000000a565bb38b7ae"], &(0x7f0000000480)='GPL\x00'}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.356049997s ago: executing program 5 (id=657): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xe8) statx(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400, 0x934, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10, 0x800) (async) r4 = socket$caif_stream(0x25, 0x1, 0x4) (async) r5 = syz_usbip_server_init(0x5) (async) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) (async) r10 = fcntl$getown(0xffffffffffffffff, 0x9) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) (async, rerun: 64) r12 = getpgrp(0xffffffffffffffff) (async, rerun: 64) getresgid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) (async, rerun: 32) r14 = gettid() (rerun: 32) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_clone3(&(0x7f0000000ec0)={0xe0002880, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)=0x0, {0x12}, &(0x7f0000000d00)=""/102, 0x66, &(0x7f0000000d80)=""/249, &(0x7f0000000e80)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x7}, 0x58) (rerun: 64) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000f40)=0x0) fstat(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r20 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) r21 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 64) r22 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) (async) r23 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001040), 0x4) r24 = socket$key(0xf, 0x3, 0x2) r25 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001080), 0x600000, 0x0) (async, rerun: 64) r26 = socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) r27 = open$dir(&(0x7f00000010c0)='./file0\x00', 0x180, 0x144) (async, rerun: 64) r28 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) sendmmsg$unix(r0, &(0x7f00000012c0)=[{{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)="b3f18f7ae219a46099654df9e64420ab7da716e991e5ddda8213d63dfd6d5105173e5bfb9397b80afb8b6531b4437c677a3ae32d4c1f20f51f9d565139b79af8d1c15245e21e2fb8af43c31178e58eeda3f5386d4e052059a5cdfcdeed9ce7567bb84685aaa9aca72d5f11642e", 0x6d}], 0x1, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r1, r2}}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @rights={{0x1c, 0x1, 0x1, [r4, r5, r6]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xee00, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}], 0xd8, 0x20000800}}, {{&(0x7f00000009c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000a40)="6533eb5e4b1439819417c9c7ce5192e1c2f2b5025cb7305b35e40260e0c1cc9a4c6911875694b6159f843f50ed62f8a9a9efbba51b68034d147ac0febf559232e8bbc7602a2c203120284b55a127ced9147a439825847c78b44f8b3afe9850d60aa526da7a143e702e1907856f127d36f0b0", 0x72}, {&(0x7f0000000ac0)="188e12ee657f3dd7d1db4bacad05804ee1642c2e39a099370f188114ea58f0123d88865731c848aeddeb64815b060f1d79c7b3ca537b59b90639622193f9f1f89720af25422e3c6c8d3cc9be423394739bd5d513bf0b0826e217fec4220e262f0e2b59339dbd5b305402", 0x6a}, {&(0x7f0000000b40)="681c89cda10c3929c486f25dfc6528d9f109045f8e81333259ef2a699ae5fa8a2b32e8d1c18f261ad5bb332b197fc39e", 0x30}, {&(0x7f0000000b80)="1dd68cc67635f87f7d9556f23ad843f000ad68c983ea23ba868fc9783905f9ddd24cfc9a4a2eecf71bc1090dd885c008f0ac18f7e35e506673eab7f5066f49919f9639f370c927a85e8c7530686bbac6b755581e16d3", 0x56}], 0x4, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r20, r21, r22, r23, r24, r25, r26]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r27, r28, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x8010}}], 0x2, 0x8000004) 2.32850419s ago: executing program 1 (id=658): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x34, r1, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r5, @ANYBLOB="080003"], 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@setneightbl={0xa4, 0x43, 0x10, 0x70bd2a, 0x25dfdbfe, {0x7}, [@NDTA_THRESH1={0x8, 0x2, 0x8810}, @NDTA_PARMS={0x38, 0x6, 0x0, 0x1, [@NDTPA_MCAST_REPROBES={0x8, 0x11, 0x6}, @NDTPA_IFINDEX={0x8, 0x1, r5}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0xc}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0xffffffff}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x9}, @NDTPA_APP_PROBES={0x8, 0x9, 0x6}]}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x10001}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x9}, @NDTA_PARMS={0x1c, 0x6, 0x0, 0x1, [@NDTPA_PROXY_QLEN={0x8}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0xfffffff7}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0x9}]}, @NDTA_THRESH1={0x8, 0x2, 0x3915}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x9}, @NDTA_THRESH3={0x8, 0x4, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2404401e}, 0x4000080) 2.306629213s ago: executing program 5 (id=659): r0 = socket(0x10, 0x803, 0x0) (async) socket$unix(0x1, 0x1, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) fcntl$addseals(r1, 0x409, 0x20) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) unlinkat(0xffffffffffffffff, &(0x7f00000291c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x64, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf, 0x1}, {0x0, 0xc}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0xce64, 0x6}}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x64}}, 0x24040084) 2.241133361s ago: executing program 1 (id=660): r0 = eventfd2(0x8001, 0xc5a5845409375f0e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) read$eventfd(r0, &(0x7f0000000040), 0x8) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='context']) 2.240807601s ago: executing program 5 (id=661): syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800140600fc000000000000000000000000000001fe8000000000000000000000000000aa00", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="780000c353000000"], 0x0) r0 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000100)=0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="05a300000000000800000d00000008000300", @ANYRES32=r3], 0x1c}}, 0x10000000) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3c, r3}) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@RTM_GETMDB={0x0, 0x56, 0x200, 0x70bd2d, 0x25dfdbfd, {0x7, r5}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x92) 2.239791232s ago: executing program 2 (id=662): socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xb}, {0xa, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000101010200000000000000000a0000000400028008001a40000000060c001b"], 0x34}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x503, 0x70bd2d, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 2.231815923s ago: executing program 5 (id=663): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000500)={0x4, 0x80, 0x27, 0x6, 0x0, 0x4, 0x0, 0x9, 0x794bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x13b}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x1) r1 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x83) r3 = openat(r2, &(0x7f0000000040)='.\x00', 0x101002, 0xa2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r4, 0x24, &(0x7f0000000080)={0x1, 0x2, 0x2008, 0xfffffffffffffffc}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0x1, 0x2, 0x11, "8003e3ffff072000"}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4c840}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc, 0x0, 0x4}, 0x4000810) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1ff}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x4000000, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r10 = syz_open_pts(r5, 0x0) r11 = dup3(r10, r5, 0x0) ioctl$TIOCSTI(r11, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000080)=0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) syz_open_dev$ptys(0xc, 0x3, 0x0) 2.166769331s ago: executing program 2 (id=664): r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040}) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @multicast, 'veth0_to_team\x00'}}, 0x1e) sendmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000600)="93", 0x1}, {0x0}], 0x2}, 0x80) 2.100938169s ago: executing program 2 (id=665): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) unshare(0x6a040000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000540)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @initr0, @exit, @printk={@u, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="180000006a000903"], 0x18}, 0x1, 0x0, 0x0, 0x20000010}, 0x24040800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x81, 0x3fff8000}, 0x404, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) readlink(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgsnd(0x0, &(0x7f0000000140)={0x3, "60391a1381b6e0d4f5d8c4f9305b029ffe017556f4a8517ad0f6d87b67dc904d515b3a83b7f18212ff6048fb19d65fc513f8143b915b577d845193fecb1fa9c4d987e2c8d9954168d2eef696d5b7b75475c0e4c306596efda6f024793b8ea71cdea28bab4ea5cc6e7a048deed803206cacbb8b040edbd957ab"}, 0x81, 0x800) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xf, 0x10, 0xfffffffffffffff6, 0x1}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)={r4, 0x200}, &(0x7f0000000200)=0x8) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) 2.008618221s ago: executing program 2 (id=666): r0 = syz_clone(0x9011, 0x0, 0x44, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0xfffffffd, {0x7, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @local}, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7, 0x5, 0x8}) (async, rerun: 32) exit(0x9) (async, rerun: 32) ptrace(0x10, r0) tkill(r0, 0x12) 1.498893667s ago: executing program 6 (id=670): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4600040000ff7f08000000000002003e00ecffffff98030000000000004b000000000000005600000000000000000000000000380001"], 0x78) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r1, &(0x7f0000003740)=[{&(0x7f00000002c0)='deny', 0x4}], 0x1) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) fcntl$setlease(r3, 0x400, 0x1) syz_pidfd_open(r2, 0x0) close(r0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x2000775) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 1.388159591s ago: executing program 1 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x2, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) writev(r2, &(0x7f0000000100), 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r1, r2, 0x0) getsockopt$netlink(r0, 0x10e, 0x8, 0x0, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file4\x00', 0x1, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000000c0)={0x12981, 0x0, 0x20}, 0x18) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f00000002c0)={0x40000, 0x0, 0x22}, 0x18) syz_emit_ethernet(0x5e, &(0x7f0000000100)=ANY=[@ANYRES16=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESOCT, @ANYRES64=r0], 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000280)=0x8) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x6, 0x5, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_pidfd_open(0x0, 0x0) process_madvise(r4, &(0x7f0000000200)=[{&(0x7f0000000000)="2debe4ac946a02452402c045429d3d3c2706a50938d671d51781277eff5cea39304cbc79737fc5f59192d3f9d23dda1ce998bdcb82d599af4c", 0x39}, {&(0x7f0000000040)="e2a4767055516c0ed09fc82943346f6ac97638a9d01653ea89beb4b245db091e0306e2b58f27f4616e7f91c4e87e550c3fb4742a67e2a1e1a73fa5bf691f7f434be36cdfc0ef92aa45b27d89354c42d467366aaf22dc", 0x56}, {&(0x7f00000000c0)="72bd824fb5bdc9719efbe3ef73d71680901eefa924524ae255b9b8374ea8a71ed5097cbb64527a69c349f977bd1decb8f0ab", 0x32}, {&(0x7f0000000140)="8910fdbc6943ae87c3cd9bfddf5d8e778e901164eb6c4bf98bba46b596a7183753962f390fef98ecb32e4b30221e7fffa0d7b1ea977a207e780d3f35681fad9c3375b9d6e7db363c12299ba7449c5d268b4bc9da9049740e4c098de4a1cd577e49daefae60ff44e76e495ec0e8f0b48b8c071da3c2cfba95094a70e2c4da538e23cb9a04987b195390ce6726ba67154076cfaec9b8cb74c902bee03cb133a7d0f2a65f7a4b183ffbc81dd66a", 0xac}], 0x4, 0x4, 0x0) 1.315547741s ago: executing program 5 (id=675): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="9a21b617ee3acfd6bcac3ac5221e0833921f0357fa76677a5088f065ee9db398e0a3d7c243c33a78c3d4342fbe6efeaab3cb95031449c21b99f2760731e91620ec10b8429457941979603f8d56c9eac36d8b0f88eb3c483380393711de4cc707e87d216bdc0014fc291105051d6c31beb8d997e36e8e85ce6782c4a79324080507c41e5bea68cfdc34fb90a100b7dd93d0fc100ea57a0d3f2bf3e2abd1334ae4e1c6afcf40", 0xa5}, {&(0x7f0000001740)="f96646111f05065b985faa0e083e6c93ffdf7985505e7e0d665736db3d1dbca8ff4f3219d054bc1505e70d25f4e23ac078e28f88c90c90c9d3d3028a62dee7d1a924d0113063e427095edc1f9a25128be4470954f1326205d75548ef14595372b45c7d1f749fc74f18621d46bd78dbc60199715bda6bd23e10dbcf06d8bc12186247de099d4d7236f94ef31967fa15deb994dbdb98176af425142a04297e6c06cfaf00b7a5c148c6c4e467aacc013e10a7c1a73b9491aba8fe1ef065eaed2ea651f50552c5755ccfc566705dc530d57da28da80dc93da7f8addbe110c706f59f4918137de5fb83185a266991a8d95c7c6b1e982bd59206614935a565e7a39f8cc175e58db24876895cfba676c409865588af95d49e39aae3ca9f8cdf9bd2aff25cf483886ff58be22201b5e665a1d004e259cdce30c823a0079d98abea563d42639112c40e28f92218c6295d3a762e85a05dac6af4c249a909e9cb991a1a8bb698f59f78a6356a91916e7aa4c4b17c0ce703f5ae71ff7d1854eb0d2089a049161f69543aeb3ddae331f078ca42fea9ec5e3e60ec752c67ef85689a6e8876f2ab8bf3392784c44b6afc727bd4984afa0157d8d7ac730a88d11114c9e5d69de71794e3bb7f5e67230e8a46111bf41256ed72db7e55113df27c16fd329e28b5ef34bc26e208af7a9bb8a55cdb29f9ee4ab12352e0e41d3864387a9413a3f67c064baf5c10e45bb265e232562aac15983f6478117bb7ed20e8ae9b23614237168de4999003cebf92e0f4eb592b295adfd66e212e49a82072bfdc0fd39b8d4d8cf0525aefa42097cff3f6ad4b20440a0734cfa00ea9a41ae8d2b9099c7f1c64b4f628ebe66fcc6ffb1de209b4f8d4d886ae8a96117bf0d62443d0e8c749b7c2805a7b5b191cc6032d15830062110103c461c1f8aff21e477c06adb6347bdba92ad053112e4f91505954704e618834949b02d6f294482a59e7ca22bf4562902debbdae5dd4f74c4b3b59a0342f5b865db263e8b1063f95eb31a634e95a4ce9d7062ab83450e51ca28473ecca0a1699983d93a8c897017a201a6ec0cdcf6105a866f51a60230985a666ff291ce23fdfa4348cad0c5698a575065a640122bc1599443f905a7e64402d49efae140b8127720d943071419ecd0c678b8dd0cc69f22f507f1f8634ab2fa3a48a1a0279644366a9095b70f31b79b29e303d2b53b008e8aa94f545859c5ced90722eb4af124426ea097ed881ba0e0519dee781969393a687780a7e199aeae6610665d19daeae5992853dd529e84c8f26ce1c20990dfb584007c5520b740046409f1f74df91b651d8af70b1bd9944539a025e591afba34f1f519acc920dee60c4785b9039e92641a9f8a4b25383694bc953ae8c414fe427a7c8835205412bd3c514d72562258fe881f289f7953d5a480974f95564789f108ae91f9c01bf863f6c846b3348a3fa4fa3684df238d07d8f2e38113ee6c7167c8c4c2191c7d6f60d9915e5aa123db027f031b16cd8d3767d1fc606ac47aaa9dd62415056534a4e47a72031eaacf663e17a01a2726619c96708dc04ae151d5bbf6df4b8b780d8772b1880629456ffc6a0280e0d07c03c897cd63f0e5216f14a5ab4cfa30fdb507aa1e50ec940acbfed737df69a39c8c2bb5da53e16386d2afb3b49e4e02d7949801c821d7b6740de17038c10a7d3fcaf8fe919faa8bcf4fcf66a48009b57208a083f717c0c1251efd32afda9e7ac4783e312a3956123daf0aba79c2554becf1a8697614c54109d4353a98868c133442388a7d973cb0ca03eceb9b8d403b846268db49d7ac35add990c3a1261dcb4e42b186d0a8f44b095d8d1e50c51c621e9841cb8e9cf6c40996c25c8e074fd27d05dc127b3cdfe3ff7fc15b752a9660152f475faf10c9010c3e042e7710a09e858ce6b68b667ed014bb19ec9d79461c57cecbf2f6731f9e6edf5c2904c1a010f50264d7e857d8285506b990ae0b8698b6b0169d36c84541ad33e6457efe440e4ada95ce22d73df96aa9fef3ef29c7ccee4f7655fe7c0408f9db091a444a455d448f3fc1e4dbf48ce1749c6c29782552d6f589d205c48ae57ce3822e074c6d81d122f90221d58fea2a6e5965ba308280146326945180867fed1884a3e2dd9fa7da61ca9ac667d6cee1e999c93b04dbbcca8446ac947f9e8ab9e5790a7692985c1518a7a28b7fbd3dd5681e92b8cad2d6fc1d28cdde566207e99bc1a7bdeb1041aa453d0e50c975bae907e94cc9164c70368fb30873c8bf2616486e497a9dca0fb3ead3d7f6eea62f48962f1cdd190a70aa7de0ed8ed219a35a54501413224869a96f97cee68786fdfae03714edc6dabc9e54633e7936a2795c30093893c9125425fe27f899972319bc47d1bc6993f3a942ffcf103025e5d8b8c0d81693f950fe3e8ae5f6d3cec6e56adf870ff99fd5cd6acc01f159fb0539fceddeaeed1a58a1669f9d573606a9ac5491993d6af17d6b46d8dd07631e799aa61945913513d41f0c4018f0f832e41d429cdc393230e0674c627382bc9e1e5adcc359c28a45721b87c372e84c3efb5dca794c1d8a80580a64c5ac9eba5c30e25cd", 0x72a}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x842080, &(0x7f0000000380)={[{@grpquota}, {@inode64}, {@mpol={'mpol', 0x3d, {'local', '=static', @void}}}], [{@flag='rw'}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, '-'}}, {@subj_type={'subj_type', 0x3d, ','}}]}) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x20000000000002}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0xb0}, 0x20000000) (async) sendfile(r1, r0, 0x0, 0x7fffeff9) 1.223926382s ago: executing program 6 (id=676): io_setup(0x7, &(0x7f00000000c0)=0x0) r1 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000480)='%\x00') socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000ff00000900020073797a31000000000500010007f2ff001c0007800c00018008000140fffffffe0c0002800800014004"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES16], 0xdf, 0x2d5, &(0x7f0000001140)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESHEX, @ANYBLOB="18000000ed074479000000000000000018000000", @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000e80)=[{&(0x7f0000000940)="96eae7a42b5324610dfa5aa110a9b25d43f67de65be60df6eff95342a28540a03732fd506f9024803e6e61b9d7ce49a244afbaabd0a36061ff0580100e4eb787d46d6f74047a676b4ab549c13b40", 0x4e}, {&(0x7f0000000a00)="eaa5f7aaa6390bcdc7ac75fe7a2fdefb5a242f80b575a13eb47882c05562dac023ec38209ceb0606a121631d86ee5446aa17a6b2f2273eda11b832f89583dd1e3d17113ce7455b7197b2a6ecf353d583d9f29d7cf066ab0db9011eb8ad696fba61a90809fa8432aca885aa6b7f6ad85f235863b246f14d2bcbbde6b37d5a1ab8c124b668f7e19eee5c69d6b1815dfb199795d0beb6", 0x95}, {&(0x7f0000000ac0)="2df4199a2487146fec0b990127e7f48fa8e63269f7fba0edfffee88cfb307969531f16bd61b70845af5826e1394d1f08a88a22e9e13f1effca13dba00e5b2ae1e16a792e63e16efb8725a8717c61cb073e0069e9a3568eb2bb0cf36719d15548616296b0a288d1b097f61a0239bcf41ccecf1b8cfd8a6b2dc520ab681b8f40d21d45302e55fd95e8bae76ddcfd6610892a3089f424a6b6", 0x97}, {&(0x7f0000000b80)="d7674624d17f5f34dfcb334acc99c5e242686102d98a14290308b87f652efaa6892dc900e9bb2e5a76e820976f72c6f334a185d4f1a858379d33c4c8715e919dae91c8537afae8d00f94284d4b1b8d08f213c7bdc2b947cea3dfe0c29b969645247cf90d", 0x64}, {&(0x7f0000000c00)="dab0e11b9929020fcb39149bb39dd9a6c42a89a151f5c53dfcd3349491882977c0efe6ce4a5c422829ccab5d5a16e8070555ce1cd4398dbebae12b3421451e6368d1417ba3119ed54313", 0x4a}, {&(0x7f0000000c80)="e72a712b27e15d1d0e62a398bf4208cf39d70c30128ac5afde206ffbf8b799b8ba41cc08c47965f01fbc983c216e279acaee766fe0c43e5bcd62aaab7c9275127f3a255fe8b56ff535c7e50a", 0x4c}, {&(0x7f00000001c0)}, {&(0x7f0000000d00)="eae407583ec6ea6572b0347ac7a824d6ff6f422d82bb1f3a093ae6bccfcd4d8fd3d565446ded144fd3f2513067d5cdb168a459f018fe92ca97f573ea172612a621dbf7f3969f88944bcabe4b7dcf5a1b1c4bee95827c94f53233bae53b0597d47279c73962bde0d8aea7810cc2557faadbf0c7a435f11d02f5ac482a7a47c1", 0x7f}, {&(0x7f0000000d80)="7dd8f3110b576f4505cdb8c63d30af212b6e50a6aa809b8bdb129cab86e1a6edb8d328378cfab27522d90cd20fa187391a539f77bca933a601c967cce4151f8bc54b69728dfb6d3d9ae72afd5fe2bd3f990986669cde1f5788f4e813220d60e2c525306e36ce14bf1d5abb46a372789858c2045d5a9875864c8aeea0f361a59e8e4b97ddf1bced8d7cd35ecc86e28054cdabaecc78a57166184e4c1cf18639951fe4b6546bb630233c1f79c4e91b5fee6262ced91bd9707f5a6dc0a8a7ebf698d3aeeeade6", 0xc5}], 0x9, &(0x7f0000000f40)=[@ip_retopts={{0x5c, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xb5, [@broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x23}]}, @generic={0x94, 0x12, "827fb8c8ecdb7f37d54b0cab11ae0551"}, @noop, @ra={0x94, 0x4}, @cipso={0x86, 0x23, 0x615b55f034ae5e61, [{0x2, 0x5, "32c025"}, {0x5, 0x8, "37888e9fa3cf"}, {0x2, 0xb, "96c4ce2240d7f11ce7"}, {0x0, 0x5, "ecc87a"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x297}}], 0xa8}, 0x40080) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f0000000340)=[&(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x2, r7, &(0x7f0000001280)='3', 0x1}]) io_destroy(r0) 1.064963873s ago: executing program 2 (id=678): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000100)={0x0, 0x0, 0x60d3, 0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x2, 0x4}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000300), 0x24841, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) madvise(&(0x7f00001ea000/0x4000)=nil, 0x4000, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000001c0), r5, 0x0, 0x2, 0x4}}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, &(0x7f0000001f80)=""/4104, 0x1008) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000002c0)='gretap0\x00', 0x10) 778.407049ms ago: executing program 2 (id=680): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x4000, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") syz_read_part_table(0x5d9, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) getsockname$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000006c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)=@bridge_getneigh={0x64, 0x1e, 0x200, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r1, 0x10900, 0x620}, [@IFLA_PHYS_SWITCH_ID={0x20, 0x24, "640475d1d55dbb64d998ae5e98efac06b7619dfaf816eed79643ec3f"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'caif0\x00'}, @IFLA_EVENT={0x8, 0x2c, 0x10}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4041}, 0x4) stat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/meminfo\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000080)=0x8, 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r5, 0x40049421, 0x3) exit(0x2616) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) ioctl$EXT4_IOC_MIGRATE(r7, 0xff08) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000600)=0x9) 591.468193ms ago: executing program 3 (id=681): socket$nl_route(0x10, 0x3, 0x0) 562.766387ms ago: executing program 3 (id=682): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x2, [{0x4, 0x4, 0x7}]}]}, {0x0, [0x61, 0x30]}}, 0x0, 0x34, 0x0, 0x1, 0x1}, 0x28) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), r0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)="ef", 0x1}], 0x1}}, {{&(0x7f0000000680)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000ac0)=[{&(0x7f0000000700)="b5", 0x1}], 0x1}}], 0x3, 0x1005) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0xfffffe89, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r7], 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x804) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x60, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x44, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x0, 0x0, 0x0, {0x0, 0x6, 0x0, 0x9, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x20}}, @void, @void, @void}}]]}, 0x60}}, 0x0) close(0x3) 472.774719ms ago: executing program 3 (id=683): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03050000000000001800128008000100677470000c00028008"], 0x38}}, 0x20000080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xb, 0x3, 0xf4, 0x2}]}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0xb, 0x3, 0xf4, 0x2}]}) 318.952208ms ago: executing program 3 (id=684): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70c0000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000000000008000400810000000500240001000000050016000100000005002c"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0x12) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) statx(r6, &(0x7f0000000340)='./file0\x00', 0x1000, 0x20, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYRESOCT=r5, @ANYRESOCT=r8, @ANYRES8=r8, @ANYRESHEX=r7, @ANYRES16=r8, @ANYRESDEC, @ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@dev={0xac, 0x14, 0x14, 0x2e}, @in6=@mcast2, 0x4e22, 0x9, 0x4e23, 0x0, 0x2, 0xa0, 0x80, 0x3a, r3, r8}, {0x8000000000000001, 0xffff, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x7, 0x7}, {0x287, 0xe04, 0x3, 0x7}, 0x8e80, 0x6e6bbf, 0x2, 0x0, 0x4, 0x966cc3d6a2ddfae9}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d6, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x3, 0x2, 0x10, 0x5, 0x7}}, 0xe8) 304.57428ms ago: executing program 5 (id=685): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x4}, 0x100050, 0x10000, 0x80, 0x1, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(0x0, 0xa4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002c80)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r2, r2) lstat(0x0, &(0x7f0000002d40)) syz_clone(0x800500, &(0x7f0000002dc0), 0x0, 0x0, &(0x7f0000003e00), 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003f40), 0x0) lstat(0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2000c050) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) 252.642907ms ago: executing program 3 (id=686): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x1121815, &(0x7f0000001300)=ANY=[], 0x1, 0x379, &(0x7f0000002840)="$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") (async) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x20, &(0x7f0000001840)=""/4066, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000400)) (async) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x210202, 0x1b0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff000000cb000000000000100000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000002bc0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYBLOB="c51b992b435df0385e8c600a3d7b54e61fc37fe5c7963290350685e2eeb64c42999c08c2e1e7e0207800651e1045d930516f34c7f8e979c7805995aa1d2354e3ffeb4b904609491fbf7bdf7d30ad472988abf3abdf6f711e615440070ce55b0fcf002bbb579fa939eac51e4ffe3b3a19660078def2ee26004db8dcca2de71813f4b4e7e990f6ab5d497240cf69c41d8936ef06b7ff8b4dc4ae0835a841785f68222fe376a93d4b1cf1efb3e7bc7bdaca6a33ff815375da69a7d539458c67ed5808385a8ff8e92b2b5d276729254c936e14ed4056599375946c3a3c6c0efd35eb048b62c7dbe5e73216621f61348f203576fd9e9afc38bf466840ddb0d89e50f07217ef6202912b156dc00c5658eafcef718ad9188e496e27c889fc0f294242a5b2be83efe666b2430e5683a6dcce2f186a56bb08d2a9cbcae98e1b9d21c2d06c4aaf413d29cf5820910113c4cbd965870007b201359d97a9c2edb928811d2e75ebf5450c783da8a6acd3772bf78f33c32e6bab7af35664f4e00fa19f5c74047b608641bcbc96d986c512b7ab1480f89e0d2b42b5e1f515792cd37d7b993a87457a408597f8240a6278b624795240916f45db232fe51d4691f7c986e0384bcf89910d33a4d9adbdb3e76ba0b6282bb8662f4f57b226d143561354ad823859158260ff9a54e233366806b1a09742c6c3786bd6d6beeba5401840aa98efb1a9158e5538b0952270eca8b4a08ef2ecbca0d3d7316cd0de4274c0c589dbe9bf4f1344d1b05940309f57e016d784801b160811499d630a0a85ec2e5ed80417507961920fd91be09cf969d47613178ebfb91b912c922ab911de7d6ef407e279c0f80f2aa39a33f55f26d5f53622f8f7a4d6044e396ada0da2aacdddac31b665e144d2cc5f362d8d61d377dcf5452db1e536a455eb954e39a5365d5adf5bbcd5ce6963f78959bb89be2a15d5f40b51ad29e16310f16eec65066a426cb7b9bd305ead50616f70967bce8e5730571519841c736436890aec2692ffad0a6bc436cd9e403fad1a1738e7a9d12e8dc85423164755e24c7266b799e030f7e4703c59e10fa22ee5a74e4d7ffc37c13108f491546b8b7380c254b9040bfdda937deee61a5ada14a80c32c165ba096dd1e82cb3013653be27311206b2d3a533c41b5243927d51020d9dac653ff0f2b702917e3938a670aed78fae7318195b3fd21553c4ef2c0fa98ea91bf52d4a3cf3ea2e005d3a63bce781b47cb2c13fce4d9d7e33322139e67cb60cbd5ac07455eedc3330d89234105d3c231a3fff362d9e606b10e34f73b6a3ef052cd27709fd57ee5cf21f87ae34f164ff3b5af12656d4d8c2ae34d3cb58574f05377b65a2af10ef402ee4b5bf91707fcc1beb8ad233823840f8b575f920efc5bccbc6a9bc6c85721d236f4b4d97df4dd95dcc19ddbf4a5b6145d0bc50cf9b5d8df8feb0beeb93709a94b5ab22a11174c1cb7d329c42c8b9fb8ed5caa03a14058ef5f992b1c9b0c1fe1da50e46134044f863e5e737fe60812595afeb5a4cd51e27cc66e9e60a0d3976bbea865840c96de4736a51e4300af8ad296deae1bcfe040f404396880603f473a346b0abcce381c015ebd46fbffdb9740ae91d8a7601b9310ebde36197ae637403b34d3842f8c65470c8644660844db43747280c95a36c153efbdbf89f011474839ea2098f47cf8130e5e455866c4bf63e6cdf80bd5f94fe3230ba17fb4b0afabaa5d8a9cfa691b9e0441d10708cbd20f694c6fa915ed0b6faa84d5e4910777d6eaa9aac9d76da5a0b056cdf19c765ced9f83eb4b08f68a695e68b44f2953f66b2f3f99eb4e08dcc7a5d051a00584a2a58c51359720381e557464cc0f47220ce1413f13e04709e0f7a1b8c925fd31c8635ea434f85c15a5c304b8eb9658b28d549abf7413d994785de664719ddee7e76cf9cfa29872671bc32f26688a66213ed3e7ed875553cc058c8444e94629981e259bda18ac075efb3817ba6dedc91e5e5270b2071489e33cb37c09188955bc9b6b895309e3b509572b9afb856fe6315cbee70ed98ba6c321a89561537387117683872cbb1b31ef0ea775d302149719a4b5378d09c683e1411b1f46f886598ca3e2cdcdfbf2686b34e13a0b873fe4cc0eef988c8d758ce82eaf5fadf7afcaa7c8861bd1e504f8d7c062d820e6a37082358ed61a772a5158ea401860de118ca58ed9b85be52f503e5c447df00b42bef98780e0e85a5caf2cf9dd0e21980432cb218838a0d122dc92d69d624d8f818d2f140f58038db2ed39ab7294a284e04c1ec6da506fcc6dc9b273f848f2433ad4e89132b7bbe9b3afbe73c39658fa8515f5da2c3091e138a5acab6515bf6174524989f876703b5cb056d539868b2a43e5db77a9513666c4667c5ff3220a69b96cfd285a03eed7168a83508dc0a93e961f7103f38d952aa97bf7c735e20df1b3b2de4baafe91e979534de06d64bcdef1e02e6a5357102479d227022cf94560637c80dcdf17a1522b7ecda231778e719f84b01f83621955e7ac4e3c1e6d1f27f7c111eff2604c6ae981e0eacec11d795d682fe61c4cde265d13a13c1d4bb9e082d23c51293742f8ef887bdc60865ef7141e8108e0cd50917049aa9ca461e406290baaa20c31e36ab880723386e4304f2c07ea0cb383434e96a9779309eb58f1ae343279f619fa4b1a66a68a19d8aa9258bf778e2d93ed5319fbce03f838625831b712d71b6b5472384286a45d2ddee55eb61aacd89cbb7897725629e9e27221830663300268c54a4068eeda4657a3a848a1545a2219a677597d96567fb4393394b74e54fbd114ea7e6581745b8acb442b5bc103e775173df0c84e85f817c29a98004e80eb055e24ae5d0eea7e2601deb62017ec563211850724c5e93d2cfcee57c0e16f06823ba50caaddf6d17fb082bf193795771f2b679cc8909850a1c33210671cd52d995694ba4e64cc5b6444403a1f861f1ef72335514abd5d067c1d9edbe02d60917d5ac61e586859fc425983d0d0c420bdee16f8638040e51bb7dae3bfae3d68d2de0a6dafef93b7bb6ab97a7e53b31c32420f19ab58c2faf819e3fd415237087f15ee49f246e59b1219c0668afce8ab1fcc3c774ecb2914069aad60627dca1a04ec1a6e65c11dd8be9c67626d91dd4d806225331402dce72338aade7d31429701de036a2707e159ecc8bece498a816a858dc25d902b10e69a0aec3f9664d5b97a67b063ee57ad881c833216707387f7e2117c229b2aad020c889fcb4ba34861f04509380f9a8553b9e66b830dd8c4d4fc9bbce520f47203d8df7174358d64d294090894baeab8fdfd0d70b5223ed1702c4dcdc066d14081c590c4b7ccbaec6526c0494ea41efcfed484edad138bffa0c2bac332626c9476c70b6a5154e2c0b6910a58f08a446b1fa63921285bdf9449b5a0f45781511ba103755b4c4cbaa4ec43753aeea2172523715700f81bd25b27d5cfa75e83acd389fcf62ff97235aef4dd0326e507c10eb00836d9d9684c7a8dad482ab117dd6417b4178e1596a01bc3577abd4fa9ba8cf6bfcddaf38df4bf602aff311d65e51bd9925f20e0755c61acc5da0ffa9016cf6e0468e03af5b111be5635d047d64471876a9eb4c51cd3a38a50a75bbc8b79f4e369b030d87c9ffd7a8ba6cc52a5a5e10507e319f03a5c2db0a601862b4aa268cd8ea4139cc006814c57ab46f96d0970a115cf9818c560cfbc858a627c1d75bbceb7d77f7ae7e4a742974845407369f83a1bc173456df4faf6330e6fcfed406365f6879e296a9c8837d5bc61e5b91aeccbc1796b419f68b4c1e30c35ae95e61d770547b5855bd2c9c3d376aa8c396f743b9f9ee5ecd83942fc952095c5b6fbf6dfcc5689f0ca46665cd2e3fb8a6558b62a67e31a997795b55d5ba7b5da90ab851f827d81fc7959cc4e05569458987ca5850093bb2c45c4fd3e86093923644b802df352c5bbed5e07717902414ec5b93ac608b1d952b8cfcb169a70a43608f42d3023d1f11256ea1133fc85ea6fbf5851181c048ebe09bf36ff488f10e36a86ffddcdb6a1538acbb6a34e785f16465b88f2c87ae3b9f195b00ba4081f25411a818d3457d6088c4d68a1cdf1acfd96ba87c8574792bb1e3056a787a07054db08cdb2107754812e32d9e791efe380b45f544c3567fbd3b6cf7f1c30de511cd06218d9d9323e9d8060e8e10fb0ccac8fd677e307da0f82404847f0942cc54eab365e48c08d3c0978c7da15b7686308224b62cdeb36a7eee38b0d07572be475ded0686c53990b76791bef6b0e5fff372bbc5c8884ddb9deb72e361fb34045367fbd9026dc119bc6fe90ecc30e2d67ccd047d57d24135c47f18c42d4849fe7591fd469430ce28b319f334d785ec521bc036d1be147a1e797c262ad78aea9d5942a3c4f10e5e6f81ca2c92f51ee89ac76c87660922cfea726bfec788c8d4e62ff2d05b99d6bb8b5d96b03541631845fe579c291ec1be91cf2ec3fd7c95929ae28779badf17888201f5b1baad25e440325facc0dc5a53a779edd4bf37ff9180b3e232d2ce2e058f4bbda381bc6c777d7ce1641132ea9615af40e401d6e6b722cda223b952fba7744f766f78adf48d96d48b8a3607a1a33d2aa0e63ce1d241738404895a159457950127b7bc2d2c3c911ad90bbac29d5cedaaadf2dedd277440e952d492361d04a6315a170f219865dcc8ea5f3f93fc5b20e6400419d81e393f31eb8c717a1d3ae14268e57e925c8702a5ca1d5fed126277c02d754809910049fb257988cae5ed9ae60e18ea0b2cf43026e00dfb15fb4a1134dd19ff7a55b27ad00c258a453e4f2ba9474b76de19ede9d28b857dbc25f350b6e993619ee86e5ba58e99702c5be0d0b63ecfd63d45f43896d70d8b3b9f6073639ce820af3616f276dbcfa99db8c469df26a93ff41e8582e5189bc1ff55dd412f6519a43bfded6ad28d8a7ce57768f79e74166f1eb50087fc394aa03ec774d326327cd9f128fc93e4841765580f17ec4f0dcd84b5ffd1797ecaf9cd1e6c1314d06e1ea9803b114d5f21fa995756c045c5b0bc81eed9333e08e7ba52c2b3bdfcca35de97186365bac67c4f44cb9ccf1cb773bea6744fa469c155a1b84f2d88b8d07b18b6f4041acf6093d0a32426a319de52ec6bf8ee91f4bcb6eb411018c18a8558f27ae63f31489822ba0f69d61407801dece52f5d2b2e48d5897c5c877413aac20c79be2818627bcfd219ae8a4da76aa91e6ae78b3a891cdc605785a67a594cdd69a66127e24d7b3a9cfe999a0fe13d8f2fdd3f97d1de5ffe41d8cc6da337d4dded3107c805b474b5743497bae03ad8df9a5a085342ecc16eb7a83ea409372661729204b050e20e75f329b7c74975c8d8ed2afed5682ef39045f4bfabb690d923cd05844680855cb09cc7fc24fb5fd274efdb15f7b98d2fc3322c83ee6b7085aab29267a6fb01e02ca10d4d6a280d733aae8c8ba6fa394651b257e56fd9fabc9eaf9f78b5c2296e4bb0b74da6c389e0873746e2309634a86c4d934180134dc7d130ca926c2f7b479048215f14bef2e49d6714134c1cfa32f7614d0bc4f6fa478537c504699c5c1ad546049a9768b67b90409ed5462bbd2c982fbf2c10020ed5dff227fce8d536af96642a3d7240616865c774d35558092d8836b1fae4ab43bf568faa33f212a2ea858987171b984c7e2054cc4bf4b2d83ffa33315a8b0b96246b41394276afe87a5bdfe3041f74c075f638afd8f8e9e7ba1c012fc9173aac12b1f89d6015c8df09c33ae2ac841496b68262c12409c9659df7729b1d", @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2}, &(0x7f0000000280), &(0x7f0000000340)=r3}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaa1aaaaaaaabb88470001c81181900060"], 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0x0, &(0x7f0000000080)=0x2, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 176.859967ms ago: executing program 3 (id=687): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20007e, &(0x7f0000000300)={[{@abort}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x20000000001000}}, {@resgid}, {@nolazytime}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@data_journal}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x476, &(0x7f0000000700)="$eJzs3MtvVNUfAPDvvX3w4/XriPjgoVTRSDS2tKCycAFGExeamOgCl7UtBCnU0JoIIVpc4NKQuDcuTfwLXOnGqCsTt7o3JMSwAV1dc2fu7WM6MxmGgWmZzye59Jz7yDnfnntmzj2H2wD61mj+TxKxIyL+iIiRWnbtCaO1H7dvXp7+5+bl6SSy7N2/k+p5t25eni5PLa/bXmaWavl9DcpduHjp7NTc3OyFIj++eO6j8YWLl148c27q9Ozp2fOTx44dPTLxysuTLzWvfNJ+nHmdbu39dH7/njffv/b29MlrH/zyXVLGXxdHl4w22DdQJp7tcmG9tnNVOhksEgM9qgxty5sob66hav8fiYEYXD42Em983tPKAfdUlmXZlmYHk1jKgAdYEr2uAdAb5Vd9/vxbbvdt8LEB3DhRewDK475dbLUjg5EW5wzVPd92U/60dXLp36/zLe7NPAQAwBo/nKj9XD/+S+PRVecdL9aGKhHxUETsioiHI2J3RDwSUT33sYh4fOWSrJ3lmfpFkvXjn/R6h6G1JR//vVqsba0d/5Wjv6gMFLmd1fiHklNn5mYPR8T/I+JQDG3J8xMtyvjx9d+/bHZsNCIrx3/5lpdfjgWLeqT118xMLU51HvFaN65E7B1sFH+yvBKQt+OeiNh7oLMyzjz/7f5mx0ZXjX8bx9/CYGf1WS37JuK5WvsvRV38paT1+uT4/2Ju9vB4eVes9+tvV99pVv5dxd8Feftva3j/L8dfSVav1y5U9627J1u5+ucXDZ9phtqKP70+WDdBnd//w8l71fRwse+TqcXFCxMRw8lbxf7jK/snV64t8+X5efyHDjbu/7ti5TexLyLym/iJiHgyIg4UdX8qIp6OiIMt4v/5tWc+bHZsI7T/zB21/50nBs7+9P2aQist4k+iQfsfraYOFXva+fxrXp2VOY88rE5/bwAAALCZpBGxI5J0bDmdpmNjtf8vvzu2pXPzC4svnJr/+PxM7R2BSgyl5UzXyKr50IlixqDMTxaP+WX+SDFv/NXA1mp+bHp+bqbXwUOf296k/+f+8v4GPPi6sI4GbFKd9v8syz7rclWA+8z3P/Qv/R/6V4P+v7Uu3/RvBACbW6Pvfw/20B+M/6F/6f/Qv/R/6F/6P/Slu3mvv0hcafGyfXuJ/PPnrqtxHxNZ1qPSh3sf+3Ii0g1RjXuViMpGqEald6X3+pMJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgO/4LAAD//wYf47Q=") r1 = syz_open_procfs(0x0, &(0x7f0000000080)='personality\x00') prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x4168, &(0x7f00000000c0)={0x0, 0x2af7, 0x0, 0x23, 0x38}, 0x0, 0x0) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000480)=ANY=[@ANYRES16], 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000080)={0x5}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)={0x5c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0xfffffffffffffdd8, "96557917d5d82cebae9347436de1ace2fe62c07911158228af6a82fd"}}]}]}, 0x5c}}, 0x4004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r3) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8000, 0x40, 0x0, 0x3, {{0x1e, 0x4, 0x1, 0x0, 0x78, 0x68, 0x0, 0x3, 0x4, 0x0, @loopback, @multicast1, {[@timestamp_prespec={0x44, 0x14, 0x39, 0x3, 0xe, [{@private=0xa010102, 0xfffffff4}, {@private=0xa010102, 0x3}]}, @end, @timestamp={0x44, 0x1c, 0x53, 0x0, 0x2, [0xb, 0x5, 0x7f, 0x7fffffff, 0x7, 0xff]}, @ssrr={0x89, 0x13, 0x71, [@multicast1, @multicast1, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0xc, 0x92, 0x0, 0x9, [0x8, 0x7]}, @timestamp_prespec={0x44, 0x14, 0x97, 0x3, 0xc, [{@local, 0x2}, {@multicast1, 0x4}]}]}}}}}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f0000000c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000b80)={0x54, r6, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) bpf$BPF_GET_MAP_INFO(0x4, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000080)}, 0x10) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000700)=""/147, 0x79}], 0x1, 0x0, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000440)=@nat={'nat\x00', 0x62, 0x5, 0x3e0, 0x0, 0x178, 0xffffffff, 0x0, 0x2a0, 0x348, 0x348, 0xffffffff, 0x348, 0x348, 0x5, 0x0, {[{{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x22e}, [@common=@unspec=@state={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x25, {0x3, @local, @broadcast}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @empty, @gre_key, @gre_key}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 'batadv0\x00', 'bond0\x00'}, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@addrtype={{0x30}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast2, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @local, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) linkat(r1, &(0x7f0000000000)='./file2\x00', r0, &(0x7f0000000040)='./file2\x00', 0x400) 175.221897ms ago: executing program 6 (id=688): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x9, 0x3, 0x0) syz_clone3(&(0x7f0000001740)={0x80080, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000001700)=[0x0], 0x1}, 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) r4 = dup(r3) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x5ea}}, 0x8001) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r2}, &(0x7f0000000280)=0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0xfffffffffffffcda}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x4002, &(0x7f0000000000)=0x9, 0x3, 0x0) (async) syz_clone3(&(0x7f0000001740)={0x80080, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f0000001700)=[0x0], 0x1}, 0x58) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async) dup(r3) (async) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x5ea}}, 0x8001) (async) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180)={r2}, &(0x7f0000000280)=0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0xfffffffffffffcda}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) (async) 143.578241ms ago: executing program 1 (id=689): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_config_ext={0xe, 0xfffffffffffffffe}, 0x0, 0x40000000, 0xd2, 0x9, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0x9) (async) syz_mount_image$ext4(&(0x7f0000002800)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000002880), 0x1, 0x5fd, &(0x7f0000002ec0)="$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") (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060080"], 0x24}}, 0x10) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x100010, 0x10000, 0x1, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x5, 0x20000002, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7}, 0xfffffffffffffed5) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x3) (rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061109b000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) (async) setsockopt$MRT_ADD_MFC(r5, 0x0, 0xcc, &(0x7f0000000080)={@loopback, @remote, 0x1, "2b45284954723202670edecd066ca3aafd5d4ac534669a024480cf0efeb4add2", 0x0, 0x0, 0x3, 0x2}, 0x3c) (async) sendfile(r5, r0, 0x0, 0x3ffff) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) (rerun: 32) sendfile(r5, r0, 0x0, 0x7ffff000) 122.540403ms ago: executing program 1 (id=690): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f00000001c0), 0x21, 0x4bf, &(0x7f00000009c0)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @private=0xa010101}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x101}) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc) 0s ago: executing program 6 (id=691): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x15, 0x0) close(r0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x84}}, 0x0) (async, rerun: 64) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x4, 0x0, 0x10451, 0x40040}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x400) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff3}}}, 0x24}}, 0x2004080) (async) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000240)={@remote, @loopback, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b}}], 0x20, 0x2400e044}, 0x0) pipe(&(0x7f0000000180)) kernel console output (not intermixed with test programs): in process `syz.1.23'. [ 42.736809][ T3573] tipc: Failed to remove unknown binding: 66,0,0/0:1222998385/1222998386 [ 42.756242][ T3577] usb usb8: usbfs: process 3577 (syz.4.21) did not claim interface 0 before use [ 42.810312][ T3586] loop2: detected capacity change from 0 to 1024 [ 42.817867][ T3586] EXT4-fs (loop2): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 42.836109][ T3591] Unsupported ieee802154 address type: 0 [ 42.853425][ T3586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.885509][ T3352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.930218][ T3602] loop2: detected capacity change from 0 to 512 [ 42.946482][ T3602] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 42.956079][ T3602] EXT4-fs (loop2): invalid journal inode [ 42.961876][ T3602] EXT4-fs (loop2): can't get journal size [ 42.970127][ T3602] EXT4-fs (loop2): 1 truncate cleaned up [ 42.976512][ T3602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.997074][ T3608] Zero length message leads to an empty skb [ 43.036170][ T3352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.084180][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.136589][ T3621] loop2: detected capacity change from 0 to 1024 [ 43.143469][ T3621] EXT4-fs: Ignoring removed nobh option [ 43.148609][ T3623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.149300][ T3621] ext4: Unknown parameter 'measure' [ 43.158442][ T3623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.178181][ T3618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.34'. [ 43.195500][ T3623] loop0: detected capacity change from 0 to 2048 [ 43.223305][ T3311] Alternate GPT is invalid, using primary GPT. [ 43.229819][ T3311] loop0: p2 p3 p7 [ 43.302038][ T3623] Alternate GPT is invalid, using primary GPT. [ 43.308515][ T3623] loop0: p2 p3 p7 [ 43.331206][ T3629] loop4: detected capacity change from 0 to 128 [ 43.349481][ T3007] Alternate GPT is invalid, using primary GPT. [ 43.355938][ T3007] loop0: p2 p3 p7 [ 43.368928][ T3629] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 43.376573][ T3629] FAT-fs (loop4): Filesystem has been set read-only [ 43.470934][ T3633] Cannot find set identified by id 0 to match [ 43.633593][ T3646] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 43.642660][ T3646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.42'. [ 43.669207][ T3646] macvlan0: entered allmulticast mode [ 43.674648][ T3646] veth1_vlan: entered allmulticast mode [ 43.696827][ T3650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 43.707557][ T3652] netlink: 'syz.3.45': attribute type 1 has an invalid length. [ 43.787077][ T3663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.50'. [ 43.798622][ T3665] loop3: detected capacity change from 0 to 512 [ 43.811913][ T3665] EXT4-fs: Ignoring removed i_version option [ 43.818143][ T3665] EXT4-fs: Ignoring removed nobh option [ 43.824200][ T3660] netlink: 240 bytes leftover after parsing attributes in process `syz.1.48'. [ 43.842448][ T3665] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.854291][ T3667] random: crng reseeded on system resumption [ 43.863092][ T3665] EXT4-fs (loop3): 1 truncate cleaned up [ 43.869429][ T3665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.929924][ T3349] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.079818][ T3691] loop3: detected capacity change from 0 to 512 [ 44.086749][ T3691] EXT4-fs: inline encryption not supported [ 44.144635][ T3691] EXT4-fs (loop3): 1 orphan inode deleted [ 44.168296][ T1573] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 1 [ 44.190231][ T3691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.208094][ T3691] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.220212][ T3691] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.235257][ T3691] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.59: iget: bad i_size value: 360287970189639690 [ 44.266216][ T3691] EXT4-fs error (device loop3): ext4_lookup:1785: inode #15: comm syz.3.59: iget: bad i_size value: 360287970189639690 [ 44.341825][ T3706] syz.1.61 uses obsolete (PF_INET,SOCK_PACKET) [ 44.348705][ T3349] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.463371][ T3709] loop2: detected capacity change from 0 to 1024 [ 44.581704][ T3714] EXT4-fs: Ignoring removed i_version option [ 44.587863][ T3714] EXT4-fs: Ignoring removed nobh option [ 44.603485][ T3709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.641643][ T3714] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.656174][ T3709] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.668762][ T3714] EXT4-fs (loop0): 1 truncate cleaned up [ 44.678017][ T3709] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: comm syz.2.63: lblock 0 mapped to illegal pblock 0 (length 5) [ 44.693502][ T3714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.706693][ T3709] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 44.719121][ T3709] EXT4-fs (loop2): This should not happen!! Data will be lost [ 44.719121][ T3709] [ 44.744829][ T3709] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: comm syz.2.63: lblock 0 mapped to illegal pblock 0 (length 1) [ 44.759100][ T3709] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.63: Freeing blocks not in datazone - block = 1, count = 4 [ 44.773336][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.815921][ T3352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.854161][ T3727] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.68: inode has both inline data and extents flags [ 44.877769][ T3727] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.68: couldn't read orphan inode 15 (err -117) [ 44.890535][ T3727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.987862][ T3737] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 45.064027][ T3352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.075493][ T3732] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 45.136398][ T3732] ------------[ cut here ]------------ [ 45.141924][ T3732] EA inode 11 i_nlink=2 [ 45.141936][ T3732] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.4.71/3732 [ 45.156777][ T3732] Modules linked in: [ 45.160776][ T3732] CPU: 1 UID: 0 PID: 3732 Comm: syz.4.71 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 45.172877][ T3732] Tainted: [W]=WARN [ 45.177098][ T3732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.188199][ T3732] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 45.195169][ T3732] Code: b4 ce 9b ff 4c 8d 2d 1d a7 3f 05 49 8d 7e 40 e8 64 85 b7 ff 49 8b 6e 40 4c 89 e7 e8 98 80 b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 7f b8 c5 03 66 66 66 66 66 66 2e [ 45.215924][ T3732] RSP: 0018:ffffc9000f413778 EFLAGS: 00010246 [ 45.222736][ T3732] RAX: ffff88811b622b90 RBX: ffff88811a4924e8 RCX: ffffffff81bc6a88 [ 45.231227][ T3732] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86fc1190 [ 45.239309][ T3732] RBP: 000000000000000b R08: 000188811a49249b R09: 0005888103b1342a [ 45.247473][ T3732] R10: 0001888103b1342b R11: 0000000000000002 R12: ffff88811a492498 [ 45.255648][ T3732] R13: ffffffff86fc1190 R14: ffff88811a492450 R15: 0000000000000001 [ 45.263715][ T3732] FS: 00007f9e654576c0(0000) GS:ffff8882aec79000(0000) knlGS:0000000000000000 [ 45.273169][ T3732] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.279833][ T3732] CR2: 0000000000000000 CR3: 000000011bc30000 CR4: 00000000003506f0 [ 45.287980][ T3732] Call Trace: [ 45.291304][ T3732] [ 45.294321][ T3732] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 45.301110][ T3732] ? errseq_check+0x2c/0x50 [ 45.305944][ T3732] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 45.311480][ T3732] ? ext4_truncate+0x92b/0xad0 [ 45.316393][ T3732] ext4_evict_inode+0xa1f/0xd40 [ 45.321394][ T3732] ? __pfx_ext4_evict_inode+0x10/0x10 [ 45.326904][ T3732] evict+0x2af/0x510 [ 45.330860][ T3732] ? __dquot_initialize+0x146/0x7c0 [ 45.336260][ T3732] iput+0x4b9/0x650 [ 45.340247][ T3732] ext4_process_orphan+0x1a9/0x1c0 [ 45.345422][ T3732] ext4_orphan_cleanup+0x6a8/0xa00 [ 45.350682][ T3732] ext4_fill_super+0x3476/0x3800 [ 45.355711][ T3732] ? set_blocksize+0x1a3/0x310 [ 45.360602][ T3732] ? setup_bdev_super+0x30e/0x370 [ 45.365725][ T3732] ? __pfx_ext4_fill_super+0x10/0x10 [ 45.371362][ T3732] get_tree_bdev_flags+0x291/0x300 [ 45.376734][ T3732] ? __pfx_ext4_fill_super+0x10/0x10 [ 45.382272][ T3732] get_tree_bdev+0x1f/0x30 [ 45.386787][ T3732] ext4_get_tree+0x1c/0x30 [ 45.391263][ T3732] vfs_get_tree+0x57/0x1d0 [ 45.395774][ T3732] do_new_mount+0x288/0x700 [ 45.400324][ T3732] path_mount+0x4c0/0xb90 [ 45.404779][ T3732] ? user_path_at+0xbf/0x130 [ 45.409502][ T3732] __se_sys_mount+0x28c/0x2e0 [ 45.414337][ T3732] __x64_sys_mount+0x67/0x80 [ 45.419390][ T3732] x64_sys_call+0x2cca/0x3000 [ 45.424316][ T3732] do_syscall_64+0xc0/0x2a0 [ 45.429375][ T3732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.435375][ T3732] RIP: 0033:0x7f9e669fbf4a [ 45.439949][ T3732] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.460385][ T3732] RSP: 002b:00007f9e65456e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.469480][ T3732] RAX: ffffffffffffffda RBX: 00007f9e65456ee0 RCX: 00007f9e669fbf4a [ 45.478003][ T3732] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f9e65456ea0 [ 45.487030][ T3732] RBP: 0000200000000180 R08: 00007f9e65456ee0 R09: 0000000000800718 [ 45.495049][ T3732] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 45.503724][ T3732] R13: 00007f9e65456ea0 R14: 000000000000047f R15: 0000200000000200 [ 45.511774][ T3732] [ 45.514883][ T3732] ---[ end trace 0000000000000000 ]--- [ 45.523191][ T3732] EXT4-fs (loop4): 1 orphan inode deleted [ 45.530214][ T3732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.598520][ T3751] EXT4-fs: Ignoring removed i_version option [ 45.604636][ T3751] EXT4-fs: Ignoring removed nobh option [ 45.621087][ T3751] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 45.633003][ T3751] EXT4-fs (loop1): 1 truncate cleaned up [ 45.640294][ T3751] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.682931][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.696371][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 45.696389][ T29] audit: type=1400 audit(1768857263.970:265): avc: denied { create } for pid=3756 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 45.814008][ T29] audit: type=1326 audit(1768857264.030:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3731 comm="syz.4.71" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f9e669f4ad7 code=0x0 [ 45.866144][ T3766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.922873][ T3766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.999324][ T3347] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 46.066939][ T29] audit: type=1400 audit(1768857264.330:267): avc: denied { map } for pid=3745 comm="syz.2.74" path="socket:[5109]" dev="sockfs" ino=5109 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 46.106020][ T3347] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 46.132935][ T3347] EXT4-fs error (device loop4): ext4_lookup:1789: inode #2: comm syz-executor: deleted inode referenced: 11 [ 46.134182][ T29] audit: type=1400 audit(1768857264.370:268): avc: denied { read } for pid=3745 comm="syz.2.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 46.165353][ T29] audit: type=1400 audit(1768857264.390:269): avc: denied { getopt } for pid=3774 comm="syz.1.84" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.276810][ T29] audit: type=1400 audit(1768857264.550:270): avc: denied { name_bind } for pid=3778 comm="syz.1.85" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 46.419791][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.438063][ T3786] set_capacity_and_notify: 4 callbacks suppressed [ 46.438080][ T3786] loop1: detected capacity change from 0 to 512 [ 46.469779][ T3347] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.487690][ T3786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.507112][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.521800][ T3790] loop0: detected capacity change from 0 to 128 [ 46.529287][ T3786] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.543468][ T3790] /dev/loop0: Can't open blockdev [ 46.566143][ T3791] loop0: detected capacity change from 0 to 1024 [ 46.573417][ T3786] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.87: corrupted inode contents [ 46.586348][ T3786] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.87: mark_inode_dirty error [ 46.605292][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.615784][ T3791] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.628751][ T3786] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.87: corrupted inode contents [ 46.640964][ T3791] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 46.649931][ T3791] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.660299][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.671794][ T3786] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.87: mark_inode_dirty error [ 46.677275][ T29] audit: type=1400 audit(1768857264.940:271): avc: denied { connect } for pid=3785 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.687549][ T3791] Quota error (device loop0): do_check_range: Getting dqdh_entries 512 out of range 0-14 [ 46.749862][ T3791] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 46.784008][ T29] audit: type=1400 audit(1768857265.030:272): avc: denied { create } for pid=3785 comm="syz.1.87" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 46.811390][ T3791] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.88: Failed to acquire dquot type 0 [ 46.860232][ T31] bridge_slave_1: left allmulticast mode [ 46.866009][ T31] bridge_slave_1: left promiscuous mode [ 46.866685][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.871784][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.891589][ T3791] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.88: Failed to acquire dquot type 0 [ 46.931455][ T31] bridge_slave_0: left promiscuous mode [ 46.936100][ T3791] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.88: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.937404][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.982092][ T3791] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.88: Failed to acquire dquot type 0 [ 47.089119][ T3804] loop2: detected capacity change from 0 to 2048 [ 47.096535][ T3791] EXT4-fs (loop0): 1 orphan inode deleted [ 47.141902][ T3791] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 47.158585][ T3804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 47.346482][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.377319][ T3805] syz.2.92 (3805) used greatest stack depth: 7224 bytes left [ 47.387252][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.399235][ T3352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 47.419586][ T31] bond0 (unregistering): Released all slaves [ 47.470760][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.507781][ T31] hsr_slave_0: left promiscuous mode [ 47.546230][ T31] hsr_slave_1: left promiscuous mode [ 47.580776][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.588295][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.620872][ T3843] __nla_validate_parse: 2 callbacks suppressed [ 47.620887][ T3843] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 47.637048][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.644461][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.653188][ T3844] loop2: detected capacity change from 0 to 256 [ 47.695679][ T31] veth1_macvtap: left promiscuous mode [ 47.704761][ T31] veth0_macvtap: left promiscuous mode [ 47.719677][ T31] veth1_vlan: left promiscuous mode [ 47.733073][ T3844] FAT-fs (loop2): Directory bread(block 64) failed [ 47.743610][ T3849] loop0: detected capacity change from 0 to 764 [ 47.763224][ T3849] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 47.771671][ T31] veth0_vlan: left promiscuous mode [ 47.777081][ T3844] FAT-fs (loop2): Directory bread(block 65) failed [ 47.783718][ T3844] FAT-fs (loop2): Directory bread(block 66) failed [ 47.809689][ T3849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 47.820330][ T3844] FAT-fs (loop2): Directory bread(block 67) failed [ 47.849216][ T3844] FAT-fs (loop2): Directory bread(block 68) failed [ 47.857436][ T3849] Symlink component flag not implemented [ 47.863494][ T3849] Symlink component flag not implemented (7) [ 47.915866][ T3844] FAT-fs (loop2): Directory bread(block 69) failed [ 47.922468][ T3849] capability: warning: `syz.0.94' uses deprecated v2 capabilities in a way that may be insecure [ 47.933654][ T3844] FAT-fs (loop2): Directory bread(block 70) failed [ 47.963358][ T3844] FAT-fs (loop2): Directory bread(block 71) failed [ 47.995280][ T3844] FAT-fs (loop2): Directory bread(block 72) failed [ 48.029507][ T3866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3866 comm=syz.1.98 [ 48.034667][ T3844] FAT-fs (loop2): Directory bread(block 73) failed [ 48.070087][ T31] team0 (unregistering): Port device team_slave_1 removed [ 48.103590][ T31] team0 (unregistering): Port device team_slave_0 removed [ 48.457576][ T3873] batadv1: entered promiscuous mode [ 48.520964][ T3795] chnl_net:caif_netlink_parms(): no params data found [ 48.634194][ T3795] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.641769][ T3795] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.680951][ T3795] bridge_slave_0: entered allmulticast mode [ 48.698097][ T3795] bridge_slave_0: entered promiscuous mode [ 48.705055][ T3795] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.712177][ T3795] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.720922][ T3795] bridge_slave_1: entered allmulticast mode [ 48.727999][ T3795] bridge_slave_1: entered promiscuous mode [ 48.756870][ T3795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.782302][ T3795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.786520][ T3890] loop0: detected capacity change from 0 to 512 [ 48.821253][ T3893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1011 sclass=netlink_route_socket pid=3893 comm=syz.1.101 [ 48.832610][ T3890] EXT4-fs: Ignoring removed i_version option [ 48.839873][ T3890] EXT4-fs: Ignoring removed nobh option [ 48.863381][ T3795] team0: Port device team_slave_0 added [ 48.887281][ T3890] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.897821][ T3795] team0: Port device team_slave_1 added [ 48.933374][ T3890] EXT4-fs (loop0): 1 truncate cleaned up [ 48.947619][ T3897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 48.956956][ T3897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 48.959165][ T3890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.965995][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 48.981567][ T3795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.993726][ T3795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.019755][ T3795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.104268][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.127315][ T3897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.102'. [ 49.137156][ T3897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.102'. [ 49.146420][ T3897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 49.157519][ T52] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.166943][ T3795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.173921][ T3795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.199898][ T3795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.269651][ T52] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.315149][ T52] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.331245][ T3795] hsr_slave_0: entered promiscuous mode [ 49.354127][ T3795] hsr_slave_1: entered promiscuous mode [ 49.384821][ T3795] debugfs: 'hsr0' already exists in 'hsr' [ 49.390664][ T3795] Cannot create hsr debugfs directory [ 49.396319][ T52] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 49.607350][ T3922] loop0: detected capacity change from 0 to 512 [ 49.662078][ T3922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.712116][ T3795] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 49.737617][ T3922] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.758319][ T3795] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.802735][ T3795] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.857035][ T3795] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 50.014835][ C0] hrtimer: interrupt took 432951 ns [ 50.060279][ T3795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.110562][ T3795] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.122730][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.129944][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.182190][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.189319][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.217527][ T3944] loop1: detected capacity change from 0 to 512 [ 50.239384][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.267491][ T3944] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.109: invalid indirect mapped block 256 (level 2) [ 50.324213][ T3944] EXT4-fs (loop1): 2 truncates cleaned up [ 50.360717][ T3944] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.483722][ T3956] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.109: bg 0: block 5: invalid block bitmap [ 50.488050][ T3795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.521584][ T3957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 50.548115][ T3957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 50.576576][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 50.588939][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 50.588939][ T12] [ 50.599639][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 50.606070][ T12] EXT4-fs (loop1): Free/Dirty block details [ 50.612296][ T12] EXT4-fs (loop1): free_blocks=0 [ 50.617310][ T12] EXT4-fs (loop1): dirty_blocks=849 [ 50.622580][ T12] EXT4-fs (loop1): Block reservation details [ 50.628622][ T12] EXT4-fs (loop1): i_reserved_data_blocks=849 [ 50.748902][ T52] kworker/u8:3: attempt to access beyond end of device [ 50.748902][ T52] loop2: rw=1, sector=1800, nr_sectors = 4208 limit=256 [ 50.791080][ T3969] loop0: detected capacity change from 0 to 8192 [ 50.799020][ T52] kworker/u8:3: attempt to access beyond end of device [ 50.799020][ T52] loop2: rw=1, sector=6008, nr_sectors = 2656 limit=256 [ 50.851578][ T52] kworker/u8:3: attempt to access beyond end of device [ 50.851578][ T52] loop2: rw=1, sector=8664, nr_sectors = 8080 limit=256 [ 50.878051][ T3312] loop0: p1 p2 p3 p4 [ 50.886113][ T3312] loop0: p1 size 262144 extends beyond EOD, truncated [ 50.911946][ T3312] loop0: p2 start 2531787010 is beyond EOD, truncated [ 50.918820][ T3312] loop0: p3 size 100663552 extends beyond EOD, truncated [ 50.921691][ T52] kworker/u8:3: attempt to access beyond end of device [ 50.921691][ T52] loop2: rw=1, sector=16744, nr_sectors = 7848 limit=256 [ 50.982282][ T3312] loop0: p4 size 50331648 extends beyond EOD, truncated [ 51.035068][ T52] kworker/u8:3: attempt to access beyond end of device [ 51.035068][ T52] loop2: rw=1, sector=24592, nr_sectors = 9784 limit=256 [ 51.087717][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 848 with error 28 [ 51.127264][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 51.127282][ T29] audit: type=1400 audit(1768857269.400:324): avc: denied { ioctl } for pid=3968 comm="syz.0.112" path="socket:[6528]" dev="sockfs" ino=6528 ioctlcmd=0x6686 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.164500][ T3795] veth0_vlan: entered promiscuous mode [ 51.181249][ T3969] loop0: p1 p2 p3 p4 [ 51.185370][ T3969] loop0: p1 size 262144 extends beyond EOD, truncated [ 51.194689][ T3795] veth1_vlan: entered promiscuous mode [ 51.212302][ T29] audit: type=1326 audit(1768857269.480:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3990 comm="syz.1.114" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88b3b4acb9 code=0x0 [ 51.268476][ T3992] netlink: 'syz.1.114': attribute type 5 has an invalid length. [ 51.279716][ T3992] geneve2: entered promiscuous mode [ 51.284963][ T3992] geneve2: entered allmulticast mode [ 51.336126][ T1621] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 51.355772][ T3795] veth0_macvtap: entered promiscuous mode [ 51.371249][ T29] audit: type=1400 audit(1768857269.640:326): avc: denied { block_suspend } for pid=3990 comm="syz.1.114" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.395732][ T3969] loop0: p2 start 2531787010 is beyond EOD, truncated [ 51.402552][ T3969] loop0: p3 size 100663552 extends beyond EOD, truncated [ 51.447142][ T1621] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 51.461076][ T3795] veth1_macvtap: entered promiscuous mode [ 51.494499][ T1621] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 51.506954][ T3983] Set syz1 is full, maxelem 65536 reached [ 51.516442][ T1621] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 51.527475][ T3997] loop2: detected capacity change from 0 to 512 [ 51.527944][ T3969] loop0: p4 size 50331648 extends beyond EOD, truncated [ 51.543688][ T3795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.567756][ T3795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.596409][ T3997] EXT4-fs (loop2): too many log groups per flexible block group [ 51.656141][ T3997] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 51.665252][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.700408][ T3997] EXT4-fs (loop2): mount failed [ 51.732479][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.783964][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.798738][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.811916][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 51.823211][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 51.836761][ T3673] udevd[3673]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 51.873061][ T3673] udevd[3673]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 51.879123][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 51.896600][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 51.896667][ T3997] loop2: detected capacity change from 0 to 512 [ 51.935741][ T3997] ext4: Unknown parameter 'dont_appraise' [ 51.955663][ T29] audit: type=1400 audit(1768857270.220:327): avc: denied { watch } for pid=3996 comm="syz.2.113" path="/15" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 52.084975][ T4005] SELinux: failed to load policy [ 52.100029][ T4013] loop1: detected capacity change from 0 to 1024 [ 52.107388][ T4014] FAULT_INJECTION: forcing a failure. [ 52.107388][ T4014] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.120514][ T4014] CPU: 1 UID: 0 PID: 4014 Comm: syz.5.117 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 52.120566][ T4014] Tainted: [W]=WARN [ 52.120574][ T4014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.120588][ T4014] Call Trace: [ 52.120595][ T4014] [ 52.120604][ T4014] __dump_stack+0x1d/0x30 [ 52.120634][ T4014] dump_stack_lvl+0x95/0xd0 [ 52.120687][ T4014] dump_stack+0x15/0x1b [ 52.120783][ T4014] should_fail_ex+0x263/0x280 [ 52.120807][ T4014] should_fail+0xb/0x20 [ 52.120826][ T4014] should_fail_usercopy+0x1a/0x20 [ 52.120878][ T4014] _copy_from_user+0x1c/0xb0 [ 52.120912][ T4014] ___sys_sendmsg+0xc1/0x1e0 [ 52.120957][ T4014] __x64_sys_sendmsg+0xd4/0x160 [ 52.121016][ T4014] x64_sys_call+0x17ba/0x3000 [ 52.121046][ T4014] do_syscall_64+0xc0/0x2a0 [ 52.121142][ T4014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.121205][ T4014] RIP: 0033:0x7f6ff674acb9 [ 52.121225][ T4014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.121247][ T4014] RSP: 002b:00007f6ff51a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.121271][ T4014] RAX: ffffffffffffffda RBX: 00007f6ff69c5fa0 RCX: 00007f6ff674acb9 [ 52.121366][ T4014] RDX: 0000000000048800 RSI: 0000200000000100 RDI: 0000000000000003 [ 52.121379][ T4014] RBP: 00007f6ff51a7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.121394][ T4014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.121409][ T4014] R13: 00007f6ff69c6038 R14: 00007f6ff69c5fa0 R15: 00007ffdcd332f68 [ 52.121433][ T4014] [ 52.235855][ T29] audit: type=1400 audit(1768857270.390:328): avc: denied { connect } for pid=4004 comm="syz.0.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 52.344108][ T4013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.415733][ T29] audit: type=1326 audit(1768857270.650:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4017 comm="syz.5.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 52.439114][ T29] audit: type=1326 audit(1768857270.650:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4017 comm="syz.5.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 52.462532][ T29] audit: type=1326 audit(1768857270.650:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4017 comm="syz.5.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 52.485806][ T29] audit: type=1326 audit(1768857270.660:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4017 comm="syz.5.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 52.509081][ T29] audit: type=1326 audit(1768857270.660:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4017 comm="syz.5.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 52.542812][ T4022] loop0: detected capacity change from 0 to 512 [ 52.561282][ T4022] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.574313][ T4022] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.621314][ T4022] bond_slave_0: entered promiscuous mode [ 52.627121][ T4022] bond_slave_1: entered promiscuous mode [ 52.634025][ T4022] macvtap1: entered allmulticast mode [ 52.639484][ T4022] bond0: entered allmulticast mode [ 52.644729][ T4022] bond_slave_0: entered allmulticast mode [ 52.650536][ T4022] bond_slave_1: entered allmulticast mode [ 52.660043][ T4022] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 52.665949][ T4028] __nla_validate_parse: 5 callbacks suppressed [ 52.665994][ T4028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.122'. [ 52.672579][ T4022] batman_adv: batadv0: Adding interface: macvtap1 [ 52.688467][ T4022] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.714283][ T4022] batman_adv: batadv0: Interface activated: macvtap1 [ 52.732871][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.783702][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.826032][ T4037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4037 comm=syz.5.124 [ 52.843070][ T4046] loop0: detected capacity change from 0 to 512 [ 52.877698][ T4048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 52.886598][ T4048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.127'. [ 52.895648][ T4048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.127'. [ 52.915390][ T4046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.937597][ T4046] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.952432][ T4046] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.126: corrupted inode contents [ 52.966291][ T4053] loop5: detected capacity change from 0 to 1024 [ 52.980823][ T4046] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #2: comm syz.0.126: mark_inode_dirty error [ 52.995407][ T4046] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #2: comm syz.0.126: corrupted inode contents [ 53.009180][ T4048] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 53.019094][ T4053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.032545][ T4046] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.126: mark_inode_dirty error [ 53.057079][ T4053] syzkaller0: entered promiscuous mode [ 53.062603][ T4053] syzkaller0: entered allmulticast mode [ 53.102173][ T4059] FAULT_INJECTION: forcing a failure. [ 53.102173][ T4059] name failslab, interval 1, probability 0, space 0, times 1 [ 53.115074][ T4059] CPU: 1 UID: 0 PID: 4059 Comm: syz.1.129 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.115112][ T4059] Tainted: [W]=WARN [ 53.115118][ T4059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.115144][ T4059] Call Trace: [ 53.115151][ T4059] [ 53.115176][ T4059] __dump_stack+0x1d/0x30 [ 53.115201][ T4059] dump_stack_lvl+0x95/0xd0 [ 53.115231][ T4059] dump_stack+0x15/0x1b [ 53.115254][ T4059] should_fail_ex+0x263/0x280 [ 53.115284][ T4059] should_failslab+0x8c/0xb0 [ 53.115382][ T4059] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 53.115404][ T4059] ? __alloc_skb+0x2f0/0x4b0 [ 53.115463][ T4059] __alloc_skb+0x2f0/0x4b0 [ 53.115572][ T4059] ? __alloc_skb+0x219/0x4b0 [ 53.115604][ T4059] netlink_alloc_large_skb+0xbf/0xf0 [ 53.115681][ T4059] netlink_sendmsg+0x40c/0x6f0 [ 53.115704][ T4059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.115728][ T4059] __sock_sendmsg+0x145/0x170 [ 53.115834][ T4059] ____sys_sendmsg+0x31e/0x4a0 [ 53.115873][ T4059] ___sys_sendmsg+0x195/0x1e0 [ 53.115973][ T4059] __x64_sys_sendmsg+0xd4/0x160 [ 53.116015][ T4059] x64_sys_call+0x17ba/0x3000 [ 53.116045][ T4059] do_syscall_64+0xc0/0x2a0 [ 53.116070][ T4059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.116135][ T4059] RIP: 0033:0x7f88b3b4acb9 [ 53.116186][ T4059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.116208][ T4059] RSP: 002b:00007f88b25a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.116230][ T4059] RAX: ffffffffffffffda RBX: 00007f88b3dc5fa0 RCX: 00007f88b3b4acb9 [ 53.116243][ T4059] RDX: 0000000000048800 RSI: 0000200000000100 RDI: 0000000000000003 [ 53.116255][ T4059] RBP: 00007f88b25a7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.116267][ T4059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.116279][ T4059] R13: 00007f88b3dc6038 R14: 00007f88b3dc5fa0 R15: 00007ffc2cabda58 [ 53.116433][ T4059] [ 53.321073][ T3320] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.431004][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.452306][ T4065] bond1: option all_slaves_active: invalid value (5) [ 53.459974][ T4063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 53.479133][ T4065] bond1 (unregistering): Released all slaves [ 53.517383][ T4064] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 53.534191][ T4064] bond1 (unregistering): Released all slaves [ 53.551746][ T4072] loop5: detected capacity change from 0 to 512 [ 53.558714][ T4069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4069 comm=syz.2.133 [ 53.586338][ T4072] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.132: inode has both inline data and extents flags [ 53.606057][ T4072] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.132: couldn't read orphan inode 15 (err -117) [ 53.636551][ T4072] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.685853][ T4079] FAULT_INJECTION: forcing a failure. [ 53.685853][ T4079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.699138][ T4079] CPU: 0 UID: 0 PID: 4079 Comm: syz.0.136 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.699173][ T4079] Tainted: [W]=WARN [ 53.699179][ T4079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.699193][ T4079] Call Trace: [ 53.699201][ T4079] [ 53.699253][ T4079] __dump_stack+0x1d/0x30 [ 53.699288][ T4079] dump_stack_lvl+0x95/0xd0 [ 53.699314][ T4079] dump_stack+0x15/0x1b [ 53.699335][ T4079] should_fail_ex+0x263/0x280 [ 53.699363][ T4079] should_fail+0xb/0x20 [ 53.699466][ T4079] should_fail_usercopy+0x1a/0x20 [ 53.699492][ T4079] _copy_from_user+0x1c/0xb0 [ 53.699527][ T4079] ___sys_sendmsg+0xc1/0x1e0 [ 53.699577][ T4079] __x64_sys_sendmsg+0xd4/0x160 [ 53.699612][ T4079] x64_sys_call+0x17ba/0x3000 [ 53.699636][ T4079] do_syscall_64+0xc0/0x2a0 [ 53.699663][ T4079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.699702][ T4079] RIP: 0033:0x7f98d234acb9 [ 53.699722][ T4079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.699739][ T4079] RSP: 002b:00007f98d0da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.699758][ T4079] RAX: ffffffffffffffda RBX: 00007f98d25c5fa0 RCX: 00007f98d234acb9 [ 53.699771][ T4079] RDX: 0000000000048800 RSI: 0000200000000100 RDI: 0000000000000003 [ 53.699849][ T4079] RBP: 00007f98d0da7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.699861][ T4079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.699873][ T4079] R13: 00007f98d25c6038 R14: 00007f98d25c5fa0 R15: 00007ffd09ce3a48 [ 53.699893][ T4079] [ 53.918799][ T4082] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 53.940521][ T4072] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.947821][ T4072] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.960573][ T4082] loop2: detected capacity change from 0 to 1024 [ 54.005013][ T4082] EXT4-fs: Ignoring removed orlov option [ 54.035272][ T4072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.045489][ T4072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.074557][ T4087] loop0: detected capacity change from 0 to 2048 [ 54.089154][ T4082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.108588][ T389] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.125205][ T389] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.143365][ T389] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.156341][ T389] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.157703][ T4082] netlink: 399 bytes leftover after parsing attributes in process `syz.2.137'. [ 54.174427][ T4082] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 54.208353][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.286587][ T3352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.312192][ T4109] capability: warning: `syz.1.143' uses 32-bit capabilities (legacy support in use) [ 54.395174][ T4116] netlink: 36 bytes leftover after parsing attributes in process `syz.2.147'. [ 54.404413][ T4116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.147'. [ 54.413482][ T4116] netlink: 36 bytes leftover after parsing attributes in process `syz.2.147'. [ 54.427165][ T4116] netlink: 36 bytes leftover after parsing attributes in process `syz.2.147'. [ 54.447796][ T4109] tipc: Started in network mode [ 54.452735][ T4109] tipc: Node identity ac14140f, cluster identity 4711 [ 54.477562][ T4109] tipc: Enabling of bearer rejected, failed to enable media [ 54.488772][ T4116] netlink: 'syz.2.147': attribute type 4 has an invalid length. [ 54.500682][ T4116] netlink: 'syz.2.147': attribute type 4 has an invalid length. [ 54.543067][ T4126] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 54.582954][ T4128] loop1: detected capacity change from 0 to 512 [ 54.633903][ T4128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.679193][ T4134] FAULT_INJECTION: forcing a failure. [ 54.679193][ T4134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 54.692427][ T4134] CPU: 1 UID: 0 PID: 4134 Comm: syz.0.153 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.692477][ T4134] Tainted: [W]=WARN [ 54.692486][ T4134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.692501][ T4134] Call Trace: [ 54.692509][ T4134] [ 54.692517][ T4134] __dump_stack+0x1d/0x30 [ 54.692544][ T4134] dump_stack_lvl+0x95/0xd0 [ 54.692612][ T4134] dump_stack+0x15/0x1b [ 54.692635][ T4134] should_fail_ex+0x263/0x280 [ 54.692658][ T4134] should_fail+0xb/0x20 [ 54.692750][ T4134] should_fail_usercopy+0x1a/0x20 [ 54.692819][ T4134] _copy_from_iter+0xcf/0xea0 [ 54.692849][ T4134] ? __alloc_skb+0x397/0x4b0 [ 54.692874][ T4134] ? __alloc_skb+0x219/0x4b0 [ 54.692903][ T4134] netlink_sendmsg+0x4ae/0x6f0 [ 54.692927][ T4134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.692946][ T4134] __sock_sendmsg+0x145/0x170 [ 54.693019][ T4134] ____sys_sendmsg+0x31e/0x4a0 [ 54.693139][ T4134] ___sys_sendmsg+0x195/0x1e0 [ 54.693195][ T4134] __x64_sys_sendmsg+0xd4/0x160 [ 54.693240][ T4134] x64_sys_call+0x17ba/0x3000 [ 54.693331][ T4134] do_syscall_64+0xc0/0x2a0 [ 54.693379][ T4134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.693407][ T4134] RIP: 0033:0x7f98d234acb9 [ 54.693427][ T4134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.693446][ T4134] RSP: 002b:00007f98d0da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.693467][ T4134] RAX: ffffffffffffffda RBX: 00007f98d25c5fa0 RCX: 00007f98d234acb9 [ 54.693484][ T4134] RDX: 0000000000048800 RSI: 0000200000000100 RDI: 0000000000000003 [ 54.693520][ T4134] RBP: 00007f98d0da7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.693533][ T4134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.693544][ T4134] R13: 00007f98d25c6038 R14: 00007f98d25c5fa0 R15: 00007ffd09ce3a48 [ 54.693562][ T4134] [ 54.825930][ T4128] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.961151][ T4141] program syz.5.156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.204695][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.470963][ T4171] FAULT_INJECTION: forcing a failure. [ 55.470963][ T4171] name failslab, interval 1, probability 0, space 0, times 0 [ 55.484456][ T4171] CPU: 1 UID: 0 PID: 4171 Comm: syz.2.166 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 55.484489][ T4171] Tainted: [W]=WARN [ 55.484498][ T4171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 55.484536][ T4171] Call Trace: [ 55.484542][ T4171] [ 55.484549][ T4171] __dump_stack+0x1d/0x30 [ 55.484579][ T4171] dump_stack_lvl+0x95/0xd0 [ 55.484610][ T4171] dump_stack+0x15/0x1b [ 55.484629][ T4171] should_fail_ex+0x263/0x280 [ 55.484656][ T4171] should_failslab+0x8c/0xb0 [ 55.484683][ T4171] kmem_cache_alloc_noprof+0x68/0x490 [ 55.484709][ T4171] ? skb_clone+0x151/0x1f0 [ 55.484851][ T4171] skb_clone+0x151/0x1f0 [ 55.484890][ T4171] __netlink_deliver_tap+0x2c9/0x500 [ 55.485063][ T4171] netlink_unicast+0x66b/0x690 [ 55.485104][ T4171] netlink_sendmsg+0x5c8/0x6f0 [ 55.485131][ T4171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.485152][ T4171] __sock_sendmsg+0x145/0x170 [ 55.485246][ T4171] ____sys_sendmsg+0x31e/0x4a0 [ 55.485287][ T4171] ___sys_sendmsg+0x195/0x1e0 [ 55.485358][ T4171] __x64_sys_sendmsg+0xd4/0x160 [ 55.485448][ T4171] x64_sys_call+0x17ba/0x3000 [ 55.485519][ T4171] do_syscall_64+0xc0/0x2a0 [ 55.485590][ T4171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.485618][ T4171] RIP: 0033:0x7f6c9a3facb9 [ 55.485637][ T4171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.485693][ T4171] RSP: 002b:00007f6c98e57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.485715][ T4171] RAX: ffffffffffffffda RBX: 00007f6c9a675fa0 RCX: 00007f6c9a3facb9 [ 55.485732][ T4171] RDX: 0000000000048800 RSI: 0000200000000100 RDI: 0000000000000003 [ 55.485748][ T4171] RBP: 00007f6c98e57090 R08: 0000000000000000 R09: 0000000000000000 [ 55.485763][ T4171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.485833][ T4171] R13: 00007f6c9a676038 R14: 00007f6c9a675fa0 R15: 00007ffe947db698 [ 55.485857][ T4171] [ 55.816641][ T4177] ext4: Unknown parameter 'smackfsdef' [ 56.010286][ T4197] Cannot find del_set index 0 as target [ 56.291956][ T4227] syzkaller1: entered promiscuous mode [ 56.297549][ T4227] syzkaller1: entered allmulticast mode [ 56.368352][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 56.368368][ T29] audit: type=1326 audit(1768857274.640:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4225 comm="syz.0.178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f98d234acb9 code=0xffc00000 [ 56.743567][ T4238] set_capacity_and_notify: 3 callbacks suppressed [ 56.743642][ T4238] loop1: detected capacity change from 0 to 1024 [ 56.798969][ T4238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.835734][ T29] audit: type=1400 audit(1768857275.110:424): avc: denied { read } for pid=4237 comm="syz.1.183" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 56.886739][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.036145][ T4247] loop1: detected capacity change from 0 to 1764 [ 57.045289][ T29] audit: type=1400 audit(1768857275.310:425): avc: denied { mounton } for pid=4246 comm="syz.1.185" path="/52/file0/file0" dev="loop1" ino=1856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 57.163741][ T29] audit: type=1400 audit(1768857275.430:426): avc: denied { bind } for pid=4252 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 57.294850][ T4266] loop2: detected capacity change from 0 to 512 [ 57.331620][ T29] audit: type=1400 audit(1768857275.600:427): avc: denied { allowed } for pid=4261 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.376627][ T4266] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.417817][ T4266] EXT4-fs (loop2): 1 orphan inode deleted [ 57.423622][ T4266] EXT4-fs (loop2): 1 truncate cleaned up [ 57.439900][ T4266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.453689][ T4266] EXT4-fs error (device loop2): ext4_search_dir:1474: inode #12: block 7: comm syz.2.190: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 57.537360][ T29] audit: type=1400 audit(1768857275.810:428): avc: denied { validate_trans } for pid=4265 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 57.575941][ T4266] EXT4-fs (loop2): Remounting filesystem read-only [ 57.608766][ T4283] netlink: 'syz.5.195': attribute type 4 has an invalid length. [ 57.616967][ T4281] loop1: detected capacity change from 0 to 512 [ 57.623731][ T4281] EXT4-fs: Ignoring removed i_version option [ 57.629924][ T4281] EXT4-fs: Ignoring removed nobh option [ 57.642244][ T3352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.658930][ T4281] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 57.676868][ T4283] netlink: 'syz.5.195': attribute type 4 has an invalid length. [ 57.704237][ T4281] EXT4-fs (loop1): 1 truncate cleaned up [ 57.716285][ T4283] __nla_validate_parse: 3 callbacks suppressed [ 57.716305][ T4283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.195'. [ 57.745227][ T4286] loop2: detected capacity change from 0 to 512 [ 57.756777][ T4281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.775409][ T29] audit: type=1400 audit(1768857276.040:429): avc: denied { read write } for pid=4285 comm="syz.2.196" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.799178][ T29] audit: type=1400 audit(1768857276.040:430): avc: denied { open } for pid=4285 comm="syz.2.196" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 57.825838][ T4286] ext2: Unknown parameter '/dev/usbmon#' [ 57.865299][ T4290] loop3: detected capacity change from 0 to 512 [ 57.873524][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.885752][ T29] audit: type=1400 audit(1768857276.150:431): avc: denied { append } for pid=4285 comm="syz.2.196" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.899011][ T4290] EXT4-fs: Ignoring removed bh option [ 57.941360][ T4293] loop5: detected capacity change from 0 to 512 [ 57.945693][ T29] audit: type=1400 audit(1768857276.210:432): avc: denied { create } for pid=4294 comm="syz.1.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.983382][ T4293] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.010785][ T4290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.024133][ T4302] netlink: 5 bytes leftover after parsing attributes in process `syz.2.200'. [ 58.056172][ T4290] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.068871][ T4293] EXT4-fs (loop5): 1 orphan inode deleted [ 58.074658][ T4293] EXT4-fs (loop5): 1 truncate cleaned up [ 58.101141][ T4290] EXT4-fs error (device loop3): ext4_find_dest_de:2050: inode #2: block 3: comm syz.3.197: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 58.141720][ T4293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.161878][ T3349] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.172781][ T4293] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 58.179440][ T4293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 58.186948][ T4293] vhci_hcd vhci_hcd.0: Device attached [ 58.208676][ T4315] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(7) [ 58.215285][ T4315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.222808][ T4293] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(6) [ 58.229446][ T4293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 58.236973][ T4315] vhci_hcd vhci_hcd.0: Device attached [ 58.237054][ T4293] vhci_hcd vhci_hcd.0: Device attached [ 58.258379][ T4327] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(12) [ 58.265103][ T4327] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 58.272655][ T4327] vhci_hcd vhci_hcd.0: Device attached [ 58.291079][ T4293] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(11) [ 58.297745][ T4293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 58.305239][ T4293] vhci_hcd vhci_hcd.0: Device attached [ 58.344265][ T4293] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(18) [ 58.351122][ T4293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 58.358527][ T4315] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(9) [ 58.365211][ T4315] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 58.372858][ T4293] vhci_hcd vhci_hcd.0: Device attached [ 58.372906][ T4315] vhci_hcd vhci_hcd.0: Device attached [ 58.384192][ T3514] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 58.408702][ T4346] loop2: detected capacity change from 0 to 512 [ 58.419407][ T4348] loop1: detected capacity change from 0 to 512 [ 58.436953][ T4348] EXT4-fs: Ignoring removed i_version option [ 58.443289][ T4348] EXT4-fs: Ignoring removed nobh option [ 58.477976][ T4348] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.488271][ T3514] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 58.506953][ T4348] EXT4-fs (loop1): 1 truncate cleaned up [ 58.529794][ T4342] vhci_hcd: connection closed [ 58.529980][ T4331] vhci_hcd: connection closed [ 58.530453][ T899] vhci_hcd vhci_hcd.5: stop threads [ 58.535285][ T4330] vhci_hcd: connection closed [ 58.539723][ T899] vhci_hcd vhci_hcd.5: release socket [ 58.545480][ T4322] vhci_hcd: connection closed [ 58.549707][ T899] vhci_hcd vhci_hcd.5: disconnect device [ 58.551569][ T4328] vhci_hcd: connection closed [ 58.566093][ T4316] vhci_hcd: connection closed [ 58.571137][ T4314] vhci_hcd: connection reset by peer [ 58.582170][ T4348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.582201][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.605383][ T899] vhci_hcd vhci_hcd.5: stop threads [ 58.610693][ T899] vhci_hcd vhci_hcd.5: release socket [ 58.611644][ T4357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 58.616179][ T899] vhci_hcd vhci_hcd.5: disconnect device [ 58.635725][ T899] vhci_hcd vhci_hcd.5: stop threads [ 58.640996][ T899] vhci_hcd vhci_hcd.5: release socket [ 58.646583][ T899] vhci_hcd vhci_hcd.5: disconnect device [ 58.652637][ T899] vhci_hcd vhci_hcd.5: stop threads [ 58.657934][ T899] vhci_hcd vhci_hcd.5: release socket [ 58.663640][ T899] vhci_hcd vhci_hcd.5: disconnect device [ 58.670559][ T899] vhci_hcd vhci_hcd.5: stop threads [ 58.675951][ T899] vhci_hcd vhci_hcd.5: release socket [ 58.681428][ T899] vhci_hcd vhci_hcd.5: disconnect device [ 58.689351][ T4361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4361 comm=syz.3.211 [ 58.702753][ T899] vhci_hcd vhci_hcd.5: stop threads [ 58.708196][ T899] vhci_hcd vhci_hcd.5: release socket [ 58.713607][ T899] vhci_hcd vhci_hcd.5: disconnect device [ 58.753070][ T4363] xt_CT: No such helper "snmp_trap" [ 58.773241][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.813102][ T899] vhci_hcd vhci_hcd.5: stop threads [ 58.818405][ T899] vhci_hcd vhci_hcd.5: release socket [ 58.823922][ T899] vhci_hcd vhci_hcd.5: disconnect device [ 58.886725][ T4375] netlink: 43 bytes leftover after parsing attributes in process `syz.2.216'. [ 59.034401][ T4394] loop3: detected capacity change from 0 to 1024 [ 59.065849][ T4394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000008000000 ro without journal. Quota mode: none. [ 59.132594][ T4408] EXT4-fs: Ignoring removed i_version option [ 59.138689][ T4408] EXT4-fs: Ignoring removed nobh option [ 59.192861][ T4420] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4420 comm=syz.0.226 [ 59.211713][ T4408] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.234524][ T3349] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000008000000. [ 59.257128][ T4420] bond_slave_0: left promiscuous mode [ 59.262604][ T4420] bond_slave_1: left promiscuous mode [ 59.276819][ T4408] EXT4-fs (loop1): 1 truncate cleaned up [ 59.296258][ T4408] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.343285][ T4431] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.229: error while reading EA inode 32 err=-116 [ 59.375839][ T4431] EXT4-fs (loop5): Remounting filesystem read-only [ 59.389614][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.419094][ T4431] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 59.441877][ T4431] EXT4-fs (loop5): 1 orphan inode deleted [ 59.483831][ T4448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.232'. [ 59.493697][ T4448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=4448 comm=syz.0.232 [ 59.582427][ T4466] mmap: syz.0.236 (4466) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.607281][ T4464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.237'. [ 59.616688][ T4470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.239'. [ 59.632262][ T4470] 9p: Bad value for 'version' [ 59.693094][ T4479] EXT4-fs: Ignoring removed i_version option [ 59.699210][ T4479] EXT4-fs: Ignoring removed nobh option [ 59.716728][ T4479] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 59.727960][ T4479] EXT4-fs (loop5): 1 truncate cleaned up [ 59.747251][ T4485] GUP no longer grows the stack in syz.1.243 (4485): 200000006000-200000008000 (200000004000) [ 59.757727][ T4485] CPU: 1 UID: 0 PID: 4485 Comm: syz.1.243 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 59.757819][ T4485] Tainted: [W]=WARN [ 59.757826][ T4485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.757839][ T4485] Call Trace: [ 59.757846][ T4485] [ 59.757856][ T4485] __dump_stack+0x1d/0x30 [ 59.757974][ T4485] dump_stack_lvl+0x95/0xd0 [ 59.757999][ T4485] dump_stack+0x15/0x1b [ 59.758018][ T4485] fixup_user_fault+0x4fb/0x550 [ 59.758057][ T4485] fault_in_user_writeable+0x5c/0xc0 [ 59.758126][ T4485] futex_lock_pi+0x60b/0x7e0 [ 59.758160][ T4485] ? __pfx_futex_wake_mark+0x10/0x10 [ 59.758265][ T4485] do_futex+0x21f/0x380 [ 59.758299][ T4485] __se_sys_futex+0x2f6/0x370 [ 59.758412][ T4485] ? xfd_validate_state+0x45/0xf0 [ 59.758445][ T4485] __x64_sys_futex+0x78/0x90 [ 59.758551][ T4485] x64_sys_call+0x2bc2/0x3000 [ 59.758576][ T4485] do_syscall_64+0xc0/0x2a0 [ 59.758605][ T4485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.758633][ T4485] RIP: 0033:0x7f88b3b4acb9 [ 59.758660][ T4485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.758742][ T4485] RSP: 002b:00007f88b25a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 59.758772][ T4485] RAX: ffffffffffffffda RBX: 00007f88b3dc5fa0 RCX: 00007f88b3b4acb9 [ 59.758790][ T4485] RDX: 00000000fffff7fc RSI: 000000000000008d RDI: 0000200000004000 [ 59.758853][ T4485] RBP: 00007f88b3bb8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 59.758876][ T4485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.758891][ T4485] R13: 00007f88b3dc6038 R14: 00007f88b3dc5fa0 R15: 00007ffc2cabda58 [ 59.758914][ T4485] [ 59.879527][ T4477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.236'. [ 59.889443][ T23] IPVS: starting estimator thread 0... [ 60.035686][ T4487] IPVS: using max 2208 ests per chain, 110400 per kthread [ 60.118459][ T4492] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 60.214788][ T4498] af_packet: tpacket_rcv: packet too big, clamped from 2920 to 4294967286. macoff=82 [ 60.316522][ T4502] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 60.621824][ T4535] EXT4-fs: Ignoring removed i_version option [ 60.627975][ T4535] EXT4-fs: Ignoring removed nobh option [ 60.691703][ T4535] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.785751][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 60.797979][ T4535] EXT4-fs (loop2): 1 truncate cleaned up [ 60.918856][ T4547] hsr_slave_1 (unregistering): left promiscuous mode [ 61.387553][ T4604] loop0: p1 p2 < > p3 p4 < p5 > [ 61.392616][ T4604] loop0: partition table partially beyond EOD, truncated [ 61.426450][ T4604] loop0: p1 start 8388607 is beyond EOD, truncated [ 61.433072][ T4604] loop0: p2 start 4294902784 is beyond EOD, truncated [ 61.440063][ T4604] loop0: p3 start 3724543488 is beyond EOD, truncated [ 61.482102][ T4604] loop0: p5 start 8388607 is beyond EOD, truncated [ 61.492042][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 61.492082][ T29] audit: type=1400 audit(1768857279.760:708): avc: denied { mounton } for pid=4606 comm="syz.1.266" path="/76/file2/bus" dev="loop1" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 61.507649][ T4607] syz.1.266: attempt to access beyond end of device [ 61.507649][ T4607] loop1: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 61.582071][ T4615] SELinux: failed to load policy [ 61.615435][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 61.678750][ T3319] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 61.686705][ T3319] FAT-fs (loop1): Filesystem has been set read-only [ 61.717427][ T4628] 9p: Bad value for 'rfdno' [ 61.766949][ T29] audit: type=1326 audit(1768857280.040:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f88b3b4acb9 code=0x7ffc0000 [ 61.818543][ T4636] set_capacity_and_notify: 8 callbacks suppressed [ 61.818563][ T4636] loop5: detected capacity change from 0 to 1024 [ 61.820583][ T29] audit: type=1326 audit(1768857280.060:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f88b3b4acb9 code=0x7ffc0000 [ 61.841317][ T4636] EXT4-fs: Ignoring removed bh option [ 61.855092][ T29] audit: type=1326 audit(1768857280.060:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f88b3b4acb9 code=0x7ffc0000 [ 61.883759][ T29] audit: type=1326 audit(1768857280.060:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f88b3b4acb9 code=0x7ffc0000 [ 61.907131][ T29] audit: type=1326 audit(1768857280.060:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f88b3b4acb9 code=0x7ffc0000 [ 61.930521][ T29] audit: type=1326 audit(1768857280.060:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f88b3b4acb9 code=0x7ffc0000 [ 61.953825][ T29] audit: type=1326 audit(1768857280.060:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f88b3b4acb9 code=0x7ffc0000 [ 61.977104][ T29] audit: type=1326 audit(1768857280.060:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f88b3b4acb9 code=0x7ffc0000 [ 62.000406][ T29] audit: type=1326 audit(1768857280.060:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f88b3b4acb9 code=0x7ffc0000 [ 62.030315][ T4636] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.271: Allocating blocks 497-513 which overlap fs metadata [ 62.074622][ T4636] EXT4-fs (loop5): Remounting filesystem read-only [ 62.132695][ T4647] autofs4:pid:4647:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1986356271.1668575791), cmd(0xc018937e) [ 62.147552][ T4647] autofs4:pid:4647:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 62.174882][ T4635] EXT4-fs (loop5): pa ffff8881076b6310: logic 16, phys. 321, len 12 [ 62.281859][ T4661] process 'syz.5.276' launched '/dev/fd/7' with NULL argv: empty string added [ 62.788510][ T4715] loop1: detected capacity change from 0 to 512 [ 62.815882][ T4715] __nla_validate_parse: 4 callbacks suppressed [ 62.815901][ T4715] netlink: 20 bytes leftover after parsing attributes in process `syz.1.295'. [ 62.831148][ T4715] netlink: 40 bytes leftover after parsing attributes in process `syz.1.295'. [ 62.841146][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 63.079883][ T4720] loop5: detected capacity change from 0 to 512 [ 63.228392][ T37] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.244666][ T4734] netlink: 'syz.2.301': attribute type 1 has an invalid length. [ 63.267621][ T4736] tipc: Started in network mode [ 63.272571][ T4736] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 63.281526][ T4736] tipc: Enabling of bearer rejected, failed to enable media [ 63.428144][ T4757] netlink: 44 bytes leftover after parsing attributes in process `syz.2.308'. [ 63.437209][ T4757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.308'. [ 63.454746][ T4757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.308'. [ 63.473803][ T4760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'. [ 63.565678][ T3514] usb 11-1: enqueue for inactive port 0 [ 63.571370][ T3514] usb 11-1: enqueue for inactive port 0 [ 63.582643][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'. [ 63.597580][ T4770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.313'. [ 63.606468][ T4770] netlink: 24 bytes leftover after parsing attributes in process `syz.3.313'. [ 63.655742][ T3514] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 63.871194][ T4796] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 63.913450][ T4800] loop1: detected capacity change from 0 to 2048 [ 63.950645][ T4800] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.002817][ T4806] loop2: detected capacity change from 0 to 512 [ 64.053344][ T4806] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.262832][ T4833] program syz.2.333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.294311][ T4835] loop0: detected capacity change from 0 to 512 [ 64.307861][ T4835] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.334: corrupted inode contents [ 64.329021][ T4835] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.334: mark_inode_dirty error [ 64.347297][ T4840] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 64.369674][ T4835] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.334: corrupted inode contents [ 64.407417][ T4835] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.334: mark_inode_dirty error [ 64.429592][ T4835] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.334: Failed to acquire dquot type 0 [ 64.480302][ T4835] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.334: corrupted inode contents [ 64.508410][ T4842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.515900][ T4842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.530689][ T4842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.538176][ T4842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.550103][ T4835] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.334: mark_inode_dirty error [ 64.585907][ T4835] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.334: corrupted inode contents [ 64.623069][ T4835] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.334: mark_inode_dirty error [ 64.638050][ T4835] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.334: corrupted inode contents [ 64.658517][ T4856] program syz.2.339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.671152][ T4835] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 64.684578][ T4835] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.334: corrupted inode contents [ 64.696868][ T4835] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.334: mark_inode_dirty error [ 64.708230][ T4835] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 64.717991][ T4835] EXT4-fs (loop0): 1 truncate cleaned up [ 64.724659][ T4835] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.824937][ T4869] tap0: tun_chr_ioctl cmd 2147767517 [ 64.912263][ T4881] loop2: detected capacity change from 0 to 512 [ 64.919618][ T4881] ext4: Unknown parameter 'nouser_xattr' [ 64.941970][ T4881] loop2: detected capacity change from 0 to 512 [ 64.958071][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 1 [ 64.971895][ T4881] ext4: Unknown parameter 'nouser_xattr' [ 64.979413][ T899] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.038963][ T899] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.099375][ T899] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.152616][ T899] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.198614][ T4910] loop1: detected capacity change from 0 to 512 [ 65.205418][ T4910] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.220212][ T4910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a85ec129, mo2=0006] [ 65.234220][ T4910] EXT4-fs (loop1): failed to initialize system zone (-117) [ 65.241869][ T4910] EXT4-fs (loop1): mount failed [ 65.267879][ T4910] netdevsim netdevsim1: Direct firmware load for / [ 65.267879][ T4910] failed with error -2 [ 65.288132][ T899] bridge_slave_1: left allmulticast mode [ 65.293860][ T899] bridge_slave_1: left promiscuous mode [ 65.299751][ T899] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.310301][ T899] bridge_slave_0: left allmulticast mode [ 65.316216][ T899] bridge_slave_0: left promiscuous mode [ 65.321900][ T899] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.438638][ T899] batman_adv: batadv0: Interface deactivated: macvtap1 [ 65.453844][ T899] bond0 (unregistering): left allmulticast mode [ 65.460179][ T899] bond_slave_0: left allmulticast mode [ 65.461617][ T4924] netlink: 'syz.3.362': attribute type 14 has an invalid length. [ 65.465778][ T899] bond_slave_1: left allmulticast mode [ 65.480448][ T899] batman_adv: batadv0: Removing interface: macvtap1 [ 65.497722][ T899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.509610][ T899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.520161][ T899] bond0 (unregistering): Released all slaves [ 65.585690][ T899] hsr_slave_0: left promiscuous mode [ 65.591460][ T899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.598929][ T899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.609625][ T4926] loop1: detected capacity change from 0 to 512 [ 65.671706][ T899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.679230][ T899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.710703][ T899] veth1_macvtap: left promiscuous mode [ 65.724625][ T899] veth0_macvtap: left promiscuous mode [ 65.740952][ T899] veth1_vlan: left promiscuous mode [ 65.757469][ T899] veth0_vlan: left promiscuous mode [ 65.900903][ T899] team0 (unregistering): Port device team_slave_1 removed [ 65.917466][ T899] team0 (unregistering): Port device team_slave_0 removed [ 66.193147][ T4898] chnl_net:caif_netlink_parms(): no params data found [ 66.201808][ T4968] GPT:first_usable_lbas don't match. [ 66.207224][ T4968] GPT:34 != 290 [ 66.210795][ T4968] GPT: Use GNU Parted to correct GPT errors. [ 66.217174][ T4968] loop1: p1 p2 p3 [ 66.373006][ T4898] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.380312][ T4898] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.444451][ T4898] bridge_slave_0: entered allmulticast mode [ 66.471146][ T4898] bridge_slave_0: entered promiscuous mode [ 66.489842][ T4995] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.508070][ T4898] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.515214][ T4898] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.523125][ T4898] bridge_slave_1: entered allmulticast mode [ 66.530042][ T4898] bridge_slave_1: entered promiscuous mode [ 66.558422][ T4995] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 66.570885][ T4995] EXT4-fs (loop1): This should not happen!! Data will be lost [ 66.570885][ T4995] [ 66.580582][ T4995] EXT4-fs (loop1): Total free blocks count 0 [ 66.586776][ T4995] EXT4-fs (loop1): Free/Dirty block details [ 66.592740][ T4995] EXT4-fs (loop1): free_blocks=2415919104 [ 66.598533][ T4995] EXT4-fs (loop1): dirty_blocks=16 [ 66.603675][ T4995] EXT4-fs (loop1): Block reservation details [ 66.609740][ T4995] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 66.685489][ T4898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.702655][ T4898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.732896][ T4898] team0: Port device team_slave_0 added [ 66.747001][ T4898] team0: Port device team_slave_1 added [ 66.790350][ T4898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.797461][ T4898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.823559][ T4898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.900813][ T5019] netlink: 'syz.3.375': attribute type 5 has an invalid length. [ 66.902905][ T4898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.915584][ T4898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.928463][ T29] kauditd_printk_skb: 670 callbacks suppressed [ 66.928505][ T29] audit: type=1400 audit(1768857285.200:1385): avc: denied { ioctl } for pid=5016 comm="syz.5.374" path="/dev/usbmon5" dev="devtmpfs" ino=157 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 66.941652][ T4898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.049310][ T29] audit: type=1400 audit(1768857285.320:1386): avc: denied { connect } for pid=5037 comm="syz.5.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.144261][ T4898] hsr_slave_0: entered promiscuous mode [ 67.145831][ T29] audit: type=1400 audit(1768857285.340:1387): avc: denied { setopt } for pid=5037 comm="syz.5.378" lport=42885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 67.148305][ T4898] hsr_slave_1: entered promiscuous mode [ 67.326399][ T29] audit: type=1400 audit(1768857285.600:1388): avc: denied { watch watch_reads } for pid=5051 comm="syz.5.381" path="/52/file0" dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.399394][ T5058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=20012 sclass=netlink_route_socket pid=5058 comm=syz.5.384 [ 67.419015][ T5055] bridge0: port 3(gretap0) entered blocking state [ 67.425729][ T5055] bridge0: port 3(gretap0) entered disabled state [ 67.432528][ T29] audit: type=1400 audit(1768857285.660:1389): avc: denied { connect } for pid=5053 comm="syz.3.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 67.455756][ T5055] gretap0: entered allmulticast mode [ 67.466279][ T5055] gretap0: entered promiscuous mode [ 67.479996][ T5055] bridge0: port 3(gretap0) entered blocking state [ 67.486549][ T5055] bridge0: port 3(gretap0) entered forwarding state [ 67.516811][ T5057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.546775][ T29] audit: type=1400 audit(1768857285.820:1390): avc: denied { bind } for pid=5059 comm="syz.2.376" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.593455][ T4898] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 67.609985][ T4898] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 67.622742][ T4898] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 67.632225][ T4898] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 67.644638][ T29] audit: type=1400 audit(1768857285.870:1391): avc: denied { name_bind } for pid=5069 comm="syz.3.386" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 67.656597][ T5070] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 67.687595][ T5085] xt_l2tp: v2 doesn't support IP mode [ 67.705827][ T5071] netlink: 'syz.3.386': attribute type 1 has an invalid length. [ 67.739091][ T29] audit: type=1400 audit(1768857286.010:1392): avc: denied { mount } for pid=5084 comm="syz.1.389" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 67.778707][ T5071] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.812542][ T5072] bond1: (slave gretap1): making interface the new active one [ 67.820965][ T5070] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5070 comm=syz.3.386 [ 67.833112][ T5072] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 67.849342][ T4898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.860882][ T4898] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.878216][ T1621] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.885374][ T1621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.894730][ T1621] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.901872][ T1621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.944025][ T29] audit: type=1400 audit(1768857286.210:1393): avc: denied { map } for pid=5103 comm="syz.2.394" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.968051][ T29] audit: type=1400 audit(1768857286.210:1394): avc: denied { execute } for pid=5103 comm="syz.2.394" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.033977][ T5099] __nla_validate_parse: 14 callbacks suppressed [ 68.033997][ T5099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'. [ 68.056544][ T5112] set_capacity_and_notify: 2 callbacks suppressed [ 68.056560][ T5112] loop5: detected capacity change from 0 to 256 [ 68.070113][ T5112] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.097817][ T5114] sctp: [Deprecated]: syz.3.396 (pid 5114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.097817][ T5114] Use struct sctp_sack_info instead [ 68.124313][ T5114] netlink: 36 bytes leftover after parsing attributes in process `syz.3.396'. [ 68.165385][ T4898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.178650][ T5125] netlink: 8 bytes leftover after parsing attributes in process `syz.5.399'. [ 68.229256][ T5132] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 68.307692][ T5145] loop5: detected capacity change from 0 to 512 [ 68.314514][ T5145] vfat: Unknown parameter '0xffffffffffffffff' [ 68.354486][ T5152] tmpfs: Bad value for 'mpol' [ 68.396238][ T5159] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 68.405947][ T5159] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 68.442305][ T1621] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.460259][ T1621] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.478955][ T1621] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.507279][ T5172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 68.516334][ T5172] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 68.521800][ T1621] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.525210][ T5172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 68.547124][ T4898] veth0_vlan: entered promiscuous mode [ 68.559459][ T4898] veth1_vlan: entered promiscuous mode [ 68.563276][ T5174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.411'. [ 68.578744][ T4898] veth0_macvtap: entered promiscuous mode [ 68.590994][ T4898] veth1_macvtap: entered promiscuous mode [ 68.605060][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 68.617374][ T5174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.636860][ T4898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.641173][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.409'. [ 68.662928][ T4898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.726488][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.755961][ T1965] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.775277][ T1965] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.804940][ T1965] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.860584][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 68.889710][ T5192] loop6: detected capacity change from 0 to 1024 [ 68.902617][ T5189] loop2: detected capacity change from 0 to 1024 [ 68.920710][ T5189] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 68.997108][ T5202] loop5: detected capacity change from 0 to 128 [ 69.387922][ T5222] loop1: detected capacity change from 0 to 1024 [ 69.395037][ T5222] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 69.622438][ T5220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.644999][ T5230] loop2: detected capacity change from 0 to 512 [ 69.651805][ T5230] EXT4-fs: Ignoring removed i_version option [ 69.657975][ T5230] EXT4-fs: Ignoring removed nobh option [ 69.668963][ T5230] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.682667][ T5230] EXT4-fs (loop2): 1 truncate cleaned up [ 69.789150][ T5239] IPv6: sit2: Disabled Multicast RS [ 69.829560][ T297] kworker/u8:6: attempt to access beyond end of device [ 69.829560][ T297] loop5: rw=1, sector=145, nr_sectors = 8 limit=128 [ 69.854625][ T297] kworker/u8:6: attempt to access beyond end of device [ 69.854625][ T297] loop5: rw=1, sector=161, nr_sectors = 8 limit=128 [ 69.870244][ T297] kworker/u8:6: attempt to access beyond end of device [ 69.870244][ T297] loop5: rw=1, sector=177, nr_sectors = 8 limit=128 [ 69.887136][ T5243] netlink: 'syz.6.429': attribute type 1 has an invalid length. [ 69.916345][ T297] kworker/u8:6: attempt to access beyond end of device [ 69.916345][ T297] loop5: rw=1, sector=193, nr_sectors = 8 limit=128 [ 69.930080][ T297] kworker/u8:6: attempt to access beyond end of device [ 69.930080][ T297] loop5: rw=1, sector=209, nr_sectors = 8 limit=128 [ 69.972022][ T297] kworker/u8:6: attempt to access beyond end of device [ 69.972022][ T297] loop5: rw=1, sector=225, nr_sectors = 8 limit=128 [ 69.990533][ T297] kworker/u8:6: attempt to access beyond end of device [ 69.990533][ T297] loop5: rw=1, sector=241, nr_sectors = 8 limit=128 [ 70.004725][ T297] kworker/u8:6: attempt to access beyond end of device [ 70.004725][ T297] loop5: rw=1, sector=257, nr_sectors = 8 limit=128 [ 70.013148][ T5255] pimreg: entered allmulticast mode [ 70.020740][ T297] kworker/u8:6: attempt to access beyond end of device [ 70.020740][ T297] loop5: rw=1, sector=273, nr_sectors = 8 limit=128 [ 70.041752][ T297] kworker/u8:6: attempt to access beyond end of device [ 70.041752][ T297] loop5: rw=1, sector=289, nr_sectors = 8 limit=128 [ 70.060904][ T5257] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20004 [ 70.117548][ T5263] loop6: detected capacity change from 0 to 512 [ 70.148043][ T5267] loop5: detected capacity change from 0 to 512 [ 70.155838][ T5263] EXT4-fs: Ignoring removed i_version option [ 70.161875][ T5263] EXT4-fs: Ignoring removed nobh option [ 70.184220][ T5267] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 70.205923][ T5263] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 70.217074][ T5267] EXT4-fs (loop5): orphan cleanup on readonly fs [ 70.232411][ T5263] EXT4-fs (loop6): 1 truncate cleaned up [ 70.239676][ T5267] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.439: corrupted inode contents [ 70.265913][ T5267] EXT4-fs (loop5): Remounting filesystem read-only [ 70.273586][ T5267] EXT4-fs (loop5): 1 truncate cleaned up [ 70.289327][ T389] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.299966][ T389] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 70.325648][ T389] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 70.346634][ T5279] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5279 comm=syz.1.442 [ 70.400550][ T5279] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 70.418952][ T5279] bond1 (unregistering): Released all slaves [ 70.468627][ T5289] loop6: detected capacity change from 0 to 1024 [ 70.548656][ T5304] ext4: Unknown parameter 'caif0' [ 70.571874][ T5304] chnl_net:caif_netlink_parms(): no params data found [ 70.955814][ T5358] /dev/loop5: Can't open blockdev [ 70.964915][ T5355] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.105575][ T5368] SELinux: failed to load policy [ 71.207530][ T5376] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 71.228736][ T5376] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.468: Allocating blocks 41-42 which overlap fs metadata [ 71.244855][ T5376] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.468: Allocating blocks 41-42 which overlap fs metadata [ 71.258884][ T5376] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.468: Failed to acquire dquot type 1 [ 71.270823][ T5376] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 71.286007][ T5376] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.468: corrupted inode contents [ 71.299148][ T5376] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.468: mark_inode_dirty error [ 71.313177][ T5376] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.468: corrupted inode contents [ 71.326774][ T5376] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.468: mark_inode_dirty error [ 71.338754][ T5376] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.468: corrupted inode contents [ 71.351640][ T5376] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 71.363423][ T5376] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.468: corrupted inode contents [ 71.382697][ T5376] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.468: mark_inode_dirty error [ 71.394266][ T5376] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 71.404357][ T5376] EXT4-fs (loop5): 1 truncate cleaned up [ 71.410838][ T5376] EXT4-fs mount: 35 callbacks suppressed [ 71.410877][ T5376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.431114][ T5383] bridge0: port 3(gretap0) entered disabled state [ 71.438794][ T5376] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.468: Failed to acquire dquot type 1 [ 71.479556][ T5383] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.486867][ T5383] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.614516][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.713002][ T5383] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.726272][ T5383] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.763113][ T4898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.824531][ T389] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.849121][ T389] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.879105][ T389] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.957903][ T899] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.995046][ T5418] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 72.023268][ T5414] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.057345][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 72.057365][ T29] audit: type=1326 audit(2000000002.330:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 72.104105][ T29] audit: type=1326 audit(2000000002.360:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 72.127709][ T29] audit: type=1326 audit(2000000002.360:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 72.151528][ T29] audit: type=1326 audit(2000000002.360:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 72.153814][ T5414] netlink: 'syz.6.473': attribute type 13 has an invalid length. [ 72.174900][ T29] audit: type=1326 audit(2000000002.360:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 72.206259][ T29] audit: type=1326 audit(2000000002.360:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 72.229524][ T29] audit: type=1326 audit(2000000002.360:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 72.253090][ T29] audit: type=1326 audit(2000000002.360:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 72.276687][ T29] audit: type=1326 audit(2000000002.360:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 72.299969][ T29] audit: type=1326 audit(2000000002.360:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5421 comm="syz.5.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ff674acb9 code=0x7ffc0000 [ 72.329860][ T5427] vfat: Unknown parameter '<„FÜœ¯ç/ìYXP äáÈ’wÌgß0x0000000000000000' [ 72.371941][ T5386] IPVS: starting estimator thread 0... [ 72.413139][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.420486][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.463305][ T5440] EXT4-fs: Ignoring removed orlov option [ 72.469978][ T5440] EXT4-fs: Mount option(s) incompatible with ext2 [ 72.476645][ T5433] IPVS: using max 2160 ests per chain, 108000 per kthread [ 72.526723][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.537900][ T5414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.599395][ T1965] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.635596][ T1965] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.657380][ T4898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.670730][ T1965] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.690373][ T5446] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.703458][ T1965] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.712967][ T5446] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a85ec129, mo2=0006] [ 72.738868][ T5449] EXT4-fs: Ignoring removed mblk_io_submit option [ 72.773012][ T5452] 9p: Bad value for 'wfdno' [ 72.803725][ T5446] EXT4-fs (loop2): failed to initialize system zone (-117) [ 72.831438][ T5446] EXT4-fs (loop2): mount failed [ 72.843304][ T5449] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a85ec129, mo2=0006] [ 72.877352][ T5449] EXT4-fs (loop5): failed to initialize system zone (-117) [ 72.884745][ T5449] EXT4-fs (loop5): mount failed [ 72.939888][ T5466] EXT4-fs: Ignoring removed i_version option [ 72.946035][ T5466] EXT4-fs: Ignoring removed nobh option [ 72.965938][ T5466] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 72.977519][ T5466] EXT4-fs (loop1): 1 truncate cleaned up [ 72.983720][ T5466] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.038102][ T5471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.063379][ T5475] __nla_validate_parse: 16 callbacks suppressed [ 73.063397][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 73.108345][ T5471] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 73.117090][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 73.135254][ T5471] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.149801][ T5471] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.494: Failed to acquire dquot type 0 [ 73.169510][ T5475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 73.179011][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.491'. [ 73.197801][ T3352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.286176][ T5500] set_capacity_and_notify: 12 callbacks suppressed [ 73.286196][ T5500] loop5: detected capacity change from 0 to 512 [ 73.324042][ T5500] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 73.332359][ T5500] EXT4-fs (loop5): orphan cleanup on readonly fs [ 73.339427][ T5500] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.501: error while reading EA inode 32 err=-116 [ 73.352198][ T5500] EXT4-fs (loop5): Remounting filesystem read-only [ 73.359069][ T5500] EXT4-fs (loop5): 1 orphan inode deleted [ 73.366187][ T5500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.381516][ T5500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.501'. [ 73.416764][ T5511] netlink: 16 bytes leftover after parsing attributes in process `syz.2.506'. [ 73.442834][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.626798][ T5531] netlink: 'syz.2.511': attribute type 11 has an invalid length. [ 73.634599][ T5531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.511'. [ 73.647099][ T5534] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.513'. [ 73.660485][ T5531] netlink: 'syz.2.511': attribute type 11 has an invalid length. [ 73.668353][ T5531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.511'. [ 73.704548][ T5539] netlink: 'syz.5.514': attribute type 4 has an invalid length. [ 73.726798][ T5539] netlink: 'syz.5.514': attribute type 4 has an invalid length. [ 73.781606][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.805058][ T5544] netlink: 24 bytes leftover after parsing attributes in process `syz.5.514'. [ 73.854623][ T297] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.887160][ T5548] bridge0: port 3(ipvlan2) entered blocking state [ 73.893879][ T5548] bridge0: port 3(ipvlan2) entered disabled state [ 73.925730][ T5548] ipvlan2: entered allmulticast mode [ 73.931341][ T5548] bridge0: entered allmulticast mode [ 73.954209][ T5548] ipvlan2: left allmulticast mode [ 73.959363][ T5548] bridge0: left allmulticast mode [ 73.971027][ T297] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.999514][ T297] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.020500][ T297] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.078073][ T5564] loop6: detected capacity change from 0 to 512 [ 74.085054][ T5564] EXT4-fs: Ignoring removed i_version option [ 74.091213][ T5564] EXT4-fs: Ignoring removed bh option [ 74.096749][ T5564] ext4: Unknown parameter 'audit' [ 74.617591][ T5589] netlink: 'syz.5.530': attribute type 1 has an invalid length. [ 74.625436][ T5589] NCSI netlink: No device for ifindex 0 [ 74.968872][ T5609] loop5: detected capacity change from 0 to 512 [ 74.982561][ T5609] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 74.992540][ T5609] EXT4-fs (loop5): invalid journal inode [ 74.998999][ T5609] EXT4-fs (loop5): can't get journal size [ 75.006860][ T5606] ip6gretap0: entered promiscuous mode [ 75.012979][ T5609] EXT4-fs (loop5): 1 truncate cleaned up [ 75.019272][ T5606] ip6gretap0: left promiscuous mode [ 75.024731][ T5609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.173917][ T5614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=5614 comm=syz.6.537 [ 75.297306][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.331845][ T5637] loop6: detected capacity change from 0 to 512 [ 75.350716][ T5642] loop1: detected capacity change from 0 to 512 [ 75.357895][ T5637] EXT4-fs: Ignoring removed orlov option [ 75.365263][ T5645] FAULT_INJECTION: forcing a failure. [ 75.365263][ T5645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.378425][ T5645] CPU: 0 UID: 0 PID: 5645 Comm: syz.5.544 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.378471][ T5645] Tainted: [W]=WARN [ 75.378478][ T5645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.378492][ T5645] Call Trace: [ 75.378532][ T5645] [ 75.378540][ T5645] __dump_stack+0x1d/0x30 [ 75.378564][ T5645] dump_stack_lvl+0x95/0xd0 [ 75.378590][ T5645] dump_stack+0x15/0x1b [ 75.378615][ T5645] should_fail_ex+0x263/0x280 [ 75.378645][ T5645] should_fail+0xb/0x20 [ 75.378739][ T5645] should_fail_usercopy+0x1a/0x20 [ 75.378771][ T5645] _copy_from_user+0x1c/0xb0 [ 75.378808][ T5645] __sys_bpf+0x183/0x7b0 [ 75.378917][ T5645] __x64_sys_bpf+0x41/0x50 [ 75.378983][ T5645] x64_sys_call+0x28e1/0x3000 [ 75.379051][ T5645] do_syscall_64+0xc0/0x2a0 [ 75.379073][ T5645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.379094][ T5645] RIP: 0033:0x7f6ff674acb9 [ 75.379114][ T5645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 75.379180][ T5645] RSP: 002b:00007f6ff51a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 75.379202][ T5645] RAX: ffffffffffffffda RBX: 00007f6ff69c5fa0 RCX: 00007f6ff674acb9 [ 75.379219][ T5645] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000002 [ 75.379234][ T5645] RBP: 00007f6ff51a7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.379250][ T5645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.379264][ T5645] R13: 00007f6ff69c6038 R14: 00007f6ff69c5fa0 R15: 00007ffdcd332f68 [ 75.379289][ T5645] [ 75.380084][ T5642] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.426073][ T5637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.586277][ T5642] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a85ec129, mo2=0006] [ 75.594726][ T5637] EXT4-fs (loop6): orphan cleanup on readonly fs [ 75.603166][ T5637] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.542: bg 0: block 248: padding at end of block bitmap is not set [ 75.618309][ T5642] EXT4-fs (loop1): failed to initialize system zone (-117) [ 75.626631][ T5637] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.542: Failed to acquire dquot type 1 [ 75.658246][ T5642] EXT4-fs (loop1): mount failed [ 75.664359][ T5637] EXT4-fs (loop6): 1 truncate cleaned up [ 75.684117][ T5669] loop2: detected capacity change from 0 to 1024 [ 75.687066][ T5637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.734602][ T5669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.755574][ T4898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.782390][ T5669] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.873745][ T5669] netlink: 'syz.2.551': attribute type 11 has an invalid length. [ 76.046555][ T5679] netlink: 'syz.5.556': attribute type 1 has an invalid length. [ 76.054273][ T5679] netlink: 'syz.5.556': attribute type 2 has an invalid length. [ 76.129150][ T5701] loop6: detected capacity change from 0 to 2048 [ 76.300212][ T5722] netlink: 'syz.6.567': attribute type 29 has an invalid length. [ 76.348448][ T5722] netlink: 'syz.6.567': attribute type 29 has an invalid length. [ 76.403196][ T5727] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 76.423977][ T5727] SELinux: failed to load policy [ 76.441333][ T5738] vlan3: entered promiscuous mode [ 76.446634][ T5738] hsr0: entered promiscuous mode [ 76.457176][ T3352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.489379][ T5741] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 76.496797][ T5741] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 76.507605][ T5748] loop1: detected capacity change from 0 to 128 [ 76.532097][ T5752] loop2: detected capacity change from 0 to 512 [ 76.568883][ T5752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.614378][ T5759] program syz.1.577 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.691911][ T3352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.727406][ T5781] loop2: detected capacity change from 0 to 512 [ 76.734304][ T5781] EXT4-fs: inline encryption not supported [ 76.780987][ T5783] EXT4-fs: inline encryption not supported [ 76.801618][ T5783] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 76.826697][ T5781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.845656][ T5781] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.865708][ T5783] EXT4-fs error (device loop5): ext4_get_journal_inode:5849: inode #32: comm syz.5.582: iget: special inode unallocated [ 76.944415][ T3352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.985586][ T5783] EXT4-fs (loop5): no journal found [ 76.990919][ T5783] EXT4-fs (loop5): can't get journal size [ 77.081920][ T5783] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 77.097714][ T5783] EXT4-fs error (device loop5): ext4_protect_reserved_inode:160: inode #32: comm syz.5.582: iget: special inode unallocated [ 77.134560][ T5812] netlink: 'syz.2.588': attribute type 3 has an invalid length. [ 77.142590][ T5783] EXT4-fs (loop5): failed to initialize system zone (-117) [ 77.158574][ T5783] EXT4-fs (loop5): mount failed [ 77.187359][ T5812] Invalid option length (0) for dns_resolver key [ 77.213454][ T5815] EXT4-fs: Ignoring removed i_version option [ 77.219751][ T5815] EXT4-fs: Ignoring removed bh option [ 77.227237][ T5815] ext4: Bad value for 'max_batch_time' [ 77.269501][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 77.269538][ T29] audit: type=1400 audit(2000000007.540:2092): avc: denied { bind } for pid=5816 comm="syz.3.592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.347591][ T5822] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.376395][ T5824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.384071][ T5826] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 77.400725][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 77.411476][ T5826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5826 comm=syz.3.597 [ 77.425694][ T5826] bond3 (unregistering): (slave geneve2): Releasing backup interface [ 77.485062][ T5826] bond3 (unregistering): Released all slaves [ 77.496138][ T1965] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 77.554722][ T3352] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.640080][ T5851] EXT4-fs: Ignoring removed mblk_io_submit option [ 77.666903][ T5822] EXT4-fs error (device loop5): __ext4_iget:5426: inode #11: block 2: comm syz.5.596: invalid block [ 77.706887][ T5851] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a85ec129, mo2=0006] [ 77.715188][ T5851] EXT4-fs (loop2): failed to initialize system zone (-117) [ 77.723273][ T5822] EXT4-fs (loop5): Remounting filesystem read-only [ 77.774941][ T5822] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.795958][ T5851] EXT4-fs (loop2): mount failed [ 77.847324][ T5867] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.605: bg 0: block 248: padding at end of block bitmap is not set [ 77.880469][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.917437][ T5867] Quota error (device loop1): write_blk: dquota write failed [ 77.924999][ T5867] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 77.935433][ T5867] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.605: Failed to acquire dquot type 1 [ 77.947415][ T5867] EXT4-fs (loop1): 1 truncate cleaned up [ 77.970424][ T5867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.003776][ T5867] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.030338][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.061846][ T5893] EXT4-fs (loop2): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 78.125497][ T5867] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.143940][ T29] audit: type=1400 audit(2000000008.410:2093): avc: denied { read write } for pid=5898 comm="syz.2.612" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.175269][ T5867] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.205628][ T5867] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.605: Allocating blocks 41-42 which overlap fs metadata [ 78.226806][ T29] audit: type=1400 audit(2000000008.410:2094): avc: denied { open } for pid=5898 comm="syz.2.612" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 78.252041][ T29] audit: type=1400 audit(2000000008.410:2095): avc: denied { getopt } for pid=5898 comm="syz.2.612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.257462][ T5867] Quota error (device loop1): write_blk: dquota write failed [ 78.279914][ T5867] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 78.313022][ T5867] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.605: Allocating blocks 41-42 which overlap fs metadata [ 78.327156][ T5867] Quota error (device loop1): write_blk: dquota write failed [ 78.334597][ T5867] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 78.345450][ T5867] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.605: Failed to acquire dquot type 1 [ 78.358207][ T5867] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 78.428202][ T5867] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.605: corrupted inode contents [ 78.477820][ T5867] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.605: mark_inode_dirty error [ 78.512007][ T5867] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.605: corrupted inode contents [ 78.532418][ T5867] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.605: mark_inode_dirty error [ 78.544094][ T5867] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.605: corrupted inode contents [ 78.558480][ T5915] bond0: option miimon: invalid value (18446744073707978753) [ 78.566067][ T5915] bond0: option miimon: allowed values 0 - 2147483647 [ 78.573469][ T5867] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 78.645984][ T5867] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.605: corrupted inode contents [ 78.682696][ T5867] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.605: mark_inode_dirty error [ 78.694460][ T5867] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 78.704216][ T5867] EXT4-fs (loop1): 1 truncate cleaned up [ 78.718208][ T5867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.731470][ T5867] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.756849][ T5923] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5923 comm=syz.2.616 [ 78.806059][ T5930] Invalid argument reading file caps for ./file0 [ 78.854517][ T5935] set_capacity_and_notify: 8 callbacks suppressed [ 78.854533][ T5935] loop1: detected capacity change from 0 to 512 [ 78.898065][ T5941] loop5: detected capacity change from 0 to 512 [ 78.910002][ T5942] nfs: Unknown parameter '' [ 78.915219][ T5932] nfs: Unknown parameter '' [ 78.941872][ T5948] syzkaller0: entered promiscuous mode [ 78.947465][ T5948] syzkaller0: entered allmulticast mode [ 78.947659][ T5935] EXT4-fs: Ignoring removed mblk_io_submit option [ 78.996753][ T5941] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 79.013448][ T5935] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a85ec129, mo2=0006] [ 79.041093][ T5941] EXT4-fs (loop5): orphan cleanup on readonly fs [ 79.052566][ T5935] EXT4-fs (loop1): failed to initialize system zone (-117) [ 79.063355][ T5941] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.620: Failed to acquire dquot type 1 [ 79.077347][ T5935] EXT4-fs (loop1): mount failed [ 79.094113][ T5941] EXT4-fs (loop5): Remounting filesystem read-only [ 79.100908][ T5941] EXT4-fs (loop5): 1 truncate cleaned up [ 79.107555][ T5941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 79.190773][ T5973] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 79.227158][ T5980] sit0: entered allmulticast mode [ 79.297054][ T5992] loop6: detected capacity change from 0 to 512 [ 79.312060][ T5992] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.632: iget: bad extended attribute block 1 [ 79.324983][ T5992] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.632: couldn't read orphan inode 15 (err -117) [ 79.353391][ T5992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.437874][ T6006] gretap2: entered promiscuous mode [ 79.449757][ T6006] __nla_validate_parse: 24 callbacks suppressed [ 79.449779][ T6006] netlink: 24 bytes leftover after parsing attributes in process `syz.3.635'. [ 79.507382][ T6010] cgroup: Invalid name [ 79.563427][ T4898] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.622711][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.640'. [ 79.631707][ T6019] netlink: 4 bytes leftover after parsing attributes in process `syz.6.640'. [ 79.640660][ T6019] netlink: 'syz.6.640': attribute type 13 has an invalid length. [ 79.648462][ T6019] netlink: 'syz.6.640': attribute type 12 has an invalid length. [ 79.739013][ T3795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.769575][ T6035] netlink: 7 bytes leftover after parsing attributes in process `syz.5.643'. [ 79.780366][ T6035] netlink: 16 bytes leftover after parsing attributes in process `syz.5.643'. [ 79.790977][ T6035] netlink: 'syz.5.643': attribute type 1 has an invalid length. [ 79.798843][ T6035] netlink: 'syz.5.643': attribute type 1 has an invalid length. [ 79.857167][ T6045] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=6045 comm=syz.3.647 [ 79.911220][ T6053] netlink: 60 bytes leftover after parsing attributes in process `syz.5.649'. [ 79.931021][ T6053] netlink: 60 bytes leftover after parsing attributes in process `syz.5.649'. [ 79.985152][ T6057] loop5: detected capacity change from 0 to 164 [ 80.008010][ T6057] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 80.021180][ T6057] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 80.097342][ T6064] SELinux: policydb magic number 0xc0 does not match expected magic number 0xf97cff8c [ 80.109113][ T6064] SELinux: failed to load policy [ 80.114447][ T6063] SELinux: policydb magic number 0xc0 does not match expected magic number 0xf97cff8c [ 80.127925][ T6063] SELinux: failed to load policy [ 80.156963][ T6071] loop6: detected capacity change from 0 to 256 [ 80.169440][ T6073] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 80.176015][ T6073] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 80.183924][ T6073] vhci_hcd vhci_hcd.0: Device attached [ 80.193320][ T3409] IPVS: starting estimator thread 0... [ 80.218534][ T6074] vhci_hcd: connection closed [ 80.219394][ T31] vhci_hcd vhci_hcd.5: stop threads [ 80.230860][ T31] vhci_hcd vhci_hcd.5: release socket [ 80.237687][ T31] vhci_hcd vhci_hcd.5: disconnect device [ 80.285725][ T6077] IPVS: using max 2208 ests per chain, 110400 per kthread [ 80.314098][ T6091] bond1 (unregistering): Released all slaves [ 81.296074][ T6135] loop5: detected capacity change from 0 to 256 [ 81.349578][ T6141] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 81.374833][ T6141] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 81.409213][ T6143] loop6: detected capacity change from 0 to 128 [ 81.470677][ T6145] random: crng reseeded on system resumption [ 81.530346][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.2.678'. [ 81.819307][ T6164] loop2: detected capacity change from 0 to 128 [ 82.260040][ T6139] Set syz1 is full, maxelem 65536 reached [ 82.426217][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 82.426232][ T29] audit: type=1400 audit(2000000268.693:2178): avc: denied { open } for pid=6194 comm="syz.5.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 82.451685][ T29] audit: type=1400 audit(2000000268.693:2179): avc: denied { kernel } for pid=6194 comm="syz.5.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 82.474004][ T6196] netlink: 16 bytes leftover after parsing attributes in process `syz.6.688'. [ 82.492321][ T6199] loop1: detected capacity change from 0 to 512 [ 82.575102][ T3007] ================================================================== [ 82.583246][ T3007] BUG: KCSAN: data-race in d_delete / lookup_fast [ 82.589721][ T3007] [ 82.592076][ T3007] read-write to 0xffff888107577f00 of 4 bytes by task 3673 on cpu 0: [ 82.600167][ T3007] d_delete+0x15a/0x180 [ 82.604357][ T3007] d_delete_notify+0x32/0x100 [ 82.609066][ T3007] vfs_unlink+0x32c/0x440 [ 82.613430][ T3007] do_unlinkat+0x1e2/0x4b0 [ 82.617876][ T3007] __x64_sys_unlink+0x2e/0x40 [ 82.622590][ T3007] x64_sys_call+0x2f48/0x3000 [ 82.627314][ T3007] do_syscall_64+0xc0/0x2a0 [ 82.631925][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.637854][ T3007] [ 82.640293][ T3007] read to 0xffff888107577f00 of 4 bytes by task 3007 on cpu 1: [ 82.647863][ T3007] lookup_fast+0xf0/0x320 [ 82.652240][ T3007] path_lookupat+0x15c/0x500 [ 82.656870][ T3007] filename_lookup+0x190/0x390 [ 82.661684][ T3007] do_readlinkat+0x7d/0x340 [ 82.666224][ T3007] __x64_sys_readlink+0x47/0x60 [ 82.671114][ T3007] x64_sys_call+0x2af1/0x3000 [ 82.675838][ T3007] do_syscall_64+0xc0/0x2a0 [ 82.680376][ T3007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.686300][ T3007] [ 82.688643][ T3007] value changed: 0x00300180 -> 0x00004080 [ 82.694377][ T3007] [ 82.696715][ T3007] Reported by Kernel Concurrency Sanitizer on: [ 82.702884][ T3007] CPU: 1 UID: 0 PID: 3007 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.713789][ T3007] Tainted: [W]=WARN [ 82.717606][ T3007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 82.727684][ T3007] ================================================================== [ 82.791419][ T6199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.804228][ T6199] ext4 filesystem being mounted at /151/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.816512][ T6199] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.690: corrupted xattr block 33: overlapping e_value [ 82.830351][ T6199] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 82.861153][ T6199] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.690: corrupted xattr block 33: overlapping e_value [ 82.875432][ T6199] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 82.881220][ T6212] validate_nla: 1 callbacks suppressed [ 82.881269][ T6212] netlink: 'syz.1.690': attribute type 12 has an invalid length. [ 82.885130][ T29] audit: type=1400 audit(2000000269.143:2180): avc: denied { read write } for pid=6198 comm="syz.1.690" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.923869][ T6199] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.690: corrupted xattr block 33: overlapping e_value [ 83.007447][ T6199] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 83.034199][ T29] audit: type=1400 audit(2000000269.293:2181): avc: denied { open } for pid=6198 comm="syz.1.690" path="/151/file2/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 83.070076][ T3319] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.097177][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.685'.