last executing test programs: 2m24.74975567s ago: executing program 0 (id=1): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=r2, 0x4) mlock2(&(0x7f0000418000/0x1000)=nil, 0x1000, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x1}, 0x4a, {0x2, 0xff, @initdev={0xac, 0x1e, 0x2, 0x0}}, 'ip6gretap0\x00'}) mlock(&(0x7f0000372000/0x2000)=nil, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r3, 0x20, &(0x7f00000007c0)={&(0x7f0000000800)=""/243, 0xfffffffffffffdb4, 0x0, 0x0}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x400, '\x00', r0, r3, 0x4, 0x0, 0x5}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d80)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, r3, 0x0, 0x3, 0x4}, 0x50) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='uid_map\x00') preadv(r7, &(0x7f0000000140)=[{&(0x7f0000000000)=""/151, 0x97}], 0x1, 0xd, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc, '\x00', r0, r3, 0x5, 0x3, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f40)={0x6, 0x10, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x9}, {}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b40)='syzkaller\x00', 0x8001, 0x8d, &(0x7f0000000b80)=""/141, 0x41100, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000c80)={0x3, 0x4, 0x71ec, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000e80)=[r4, r5, r6, r7, r8], &(0x7f0000000ec0)=[{0x0, 0x3, 0xe, 0xa}, {0x5, 0x1, 0x6, 0x2}, {0x3, 0x5, 0xc, 0x5}, {0x0, 0x5, 0x4, 0xc}, {0x3, 0x4, 0x9, 0x6}, {0x1, 0x3, 0x7, 0x5}, {0x1, 0x1, 0x4, 0x3}], 0x10, 0x5}, 0x94) syz_mount_image$iso9660(&(0x7f0000000a80), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0, 0x7b7, &(0x7f00000002c0)="$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") io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x44000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) r10 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0xa00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x4}, 0x20, 0xfffffffffffffffd, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0xfffffff2, 0x0, 0x2000000020000003}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x8) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001e00110225bd7000ffdbdf2507"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x3, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000500)="9569ca", 0x0, 0xfffffff9, 0x0, 0x3, 0x0}) 2m24.147927051s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fefa0bf2cca6beb9363a680b652a86bcf56a1b9f4e6b54cc6beca5462202c484c10ca5386103a5ccbe47b7b9aa6d8d701a3ba6a6c0ce8b978", 0x8000000000000001}, 0x60) recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x40000040, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)={{{@in=@multicast1, @in=@empty}}, {{@in6=@loopback}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="59cf27bd700001000000080000002c000180060005"], 0x40}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x4) recvmsg$can_bcm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000800)=""/174, 0xae}, {&(0x7f00000008c0)}, {&(0x7f0000000900)=""/216, 0xd8}, {&(0x7f0000000a00)=""/56, 0x38}, {&(0x7f0000000a40)=""/26, 0x1a}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x6, &(0x7f0000000c00)=""/235, 0xeb}, 0x2101) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) preadv2(r2, &(0x7f0000000780)=[{&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/98, 0x62}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000680)=""/243, 0xf3}], 0x8, 0x4, 0xe, 0xb) 2m20.027991056s ago: executing program 0 (id=16): bpf$TOKEN_CREATE(0x24, &(0x7f0000000700), 0x8) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000801fd, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x9b52, 0x0, 0xb6ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x206, 0xffffffffffffffff, 0xa) socket(0x10, 0x3, 0x0) r0 = fsopen(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './bus', [{0x20, '-*^)'}, {0x20, '+'}, {0x20, '@[)'}, {0x20, 'cgroup.subtree_control\x00'}, {}], 0xa, "18b64b0212a2352db5945c9ee0c7cd06e0167fae7cc6d4f632ecac2413969619efb9109666270b8735770521968b41e9973f478acc7ba0"}, 0x64) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) r2 = fsmount(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000001a00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000180)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000007c0)='./bus\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000002900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xa002}, 0xc, &(0x7f00000028c0)={&(0x7f0000001c40)={0xc58, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x1e5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @random="6c3c42fbf2cf", {0x0, 0x5}}, 0x9, @default, 0x3002, @void, @void, @val={0x3, 0x1, 0x99}, @void, @void, @val={0x5, 0xb4, {0x9f, 0x3c, 0xc0, "1bca3e8650ab1f50d4b6891ef63d9b62a35d7ffc438ce5565def69f30133becab5073b0cb10096585215fbff5845287ac9adbb207d517d73f9335dbb744c993c418ef7d4937384d5a3a2c86401ffdc3296a95fd51c9a7a28b60f79bc99482fddc20fec73d8620fbb657e21b6ea0a780205ecb5aadac116c793d1362b55269e0946909d42fbfc05cf5877fc78fc487d4eb6a82f17d28b00fd7464542286fd388df40bfe26aae5a0078c5a6dec99acf9ceb3"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x7, 0x0, {0x8, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0xffffffff, 0x2}}, @void, @void, @val={0x76, 0x6, {0x29, 0x8, 0x26, 0x7164}}, [{0xdd, 0xdb, "3780241627cd3f4d394754cceb8687efac3aee96e6e263b79be3e48f257d506c0dfc84565d74122507b64f3d1a54378104de6f73be42a0946b17e942ea27b493d79a171bdb8306d5aaa25b8aa046e5eb0a2c828f097359b5d608e3b89df0e407ac66cf40fd87940edf506800d6c2dd31a2786feac7917fbbe845e04e77dc9baec6258d28a5380da8901551490594dc7eb30a516d86ff25ed02c1a55ab52f1cff7f02320ce91e9ffe82cc64759d7041263f0c94761799f65a9b4491061a2a2e501cef5abc81012f430258c8325c509c7df393764c3c22d4b9605fd7"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xb4, 0x80, [@perr={0x84, 0xae, {0x6, 0xa, [{{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0xd}, {{0x0, 0x1}, @device_b, 0x400, @value=@broadcast, 0x26}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x12}, {{0x0, 0x1}, @device_b, 0x2, @value=@device_b, 0x3}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x42}, {{}, @device_b, 0x200000, @void, 0x42}, {{}, @device_a, 0x360, @void, 0x3f}, {{0x0, 0x1}, @device_b, 0x540, @value=@device_b, 0xb}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x4}, {{}, @device_b, 0x101, @void, 0x3a}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x2d8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x3f, 0x2, "b49593db850b55ba09c592cf4ee51aa5cddb4360ee9ab8be75f6b4c48eea25f75710a9e628a02866de11fb59e22be7cf4b8eb3351ef6fc954ba71e"}, @NL80211_FTM_RESP_ATTR_LCI={0x103, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x74, 0x2, "21f2180423529a68736c11d017fa6f15c3f9f1cf85aea696e3f0a6fc52aebda6a6aeba69036033328acc770bd65f2178c74931ea9491c8276e74b80ad2c6a99d905e786369f2dba03937c0fe8bb7261e3688964a2bd220a5316519850209214f976c4ed7328c229bef9b98bb5e115849"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x44, 0x3, "f6bed885c55ff9cba2027a6ec8c5cf3d72428b22ff5a592cdd3c0c1c1e16703c6fd4c21be1dfe564601821172bdc33028807f7ca9d813f804178170a2e45f240"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x43, 0x3, "493e6780d8c14308e856f0159f1a2052fcd87de86741f2e5852f9358b4a16082068aac90926b32e68edb77c0e6d41e2c0d376e790fd7a9684ff56897a42d05"}, @NL80211_FTM_RESP_ATTR_LCI={0x84, 0x2, "db78e26bd9150bd6bf060dbdd2fe96fa560d25cf450daf33a3ad1ee92796588cbf84190cdb63aa1688d2958ab49113695080c80c567d7e057d86a474e9914924bb3e452fde36fe7d1596fffe985bc8d871e30faed92a638619ab72005fbb9be61dde9bd9e8ec2ecfdabc6d554332b99e767d7e64668a9c7fa7f862d6bf7e89c8"}]}, @NL80211_ATTR_FTM_RESPONDER={0x388, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd6, 0x2, "aaac6c23a3a2251fd1d6f574a0021f36baa35ce6ea3f981dddbb25b8fe3281528f6e27842bd21831763d24020a1cf51c167e3a94e71a600cc6a0044bc6e29786c252631f3567da42d754cc0b3ef5edde4bac1d033f38c501da1918588ecf132bd6e3f37f1bd0e3767171cdf6eeaec8bc8411d0f9b0971f9f1b3aa9f941c84c468be48cb21b9b2da2fa07b408dab01e21d8800629ee2b89b0542c255ff5794e83d30898479c4ba879a60d6e5169cc324bf578acf39222e8a73302798ee7b6b16c0e96a9e5a71f702d9a235133c33b4482b326"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe, 0x3, "7bf8ae06527fd7c3daed"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x99, 0x3, "2570b67664446bed8854c4870263c8d8e3f76887a5f83c1e4348bc82b70bd1b186e7f04d99dc0550d136649342d92abc69fca91519d26739bcbcad7e3681ace6f50f474754edcd190ded8080cef201bc01d9d9c2a1ebacd9d35775f86d6cdfc005914207c634aa5c55ffc5a6aa5767359c033208185b14034e871bf1c65b1aa5e73f79317aa6faf05fd86bfb77e66d64b5f1b3450d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5e, 0x3, "a12ad2030b542ee2d5a15136bc809ed2859c701ca204a708145fdd908c0bb7ded9b6f160ab3512af80582e7069d587dd7ce76041769a9bebe04397bf288b0c95f6100ec32f93d7e8acb4bb66267deb6c22e72d1a486952f83457"}, @NL80211_FTM_RESP_ATTR_LCI={0xa6, 0x2, "8e07921203f0cfb65132bc1ba6131fd902c9dfb5c434faded2428c7fea6d4dcc88b1ac6136824e217fbb00cca1d0b01f43b8250abf14feaa61c81a5b859dbcc9b844fc36b00212a4a9db4d113e193c384101e6ca6a4c7e74781cff75eb6392c058638a072422cfad70f06aa6905ebe778ae5d456075509c2236848d077390b9178d30a3791cea7aa6e06315e79f7600cf77763fbf8895e865d96cd8f18e4a2d9f4bd"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe9, 0x3, "ffeda5680c6989cea792010a092b7993d56bdec3925dfaeeb0c40b5498a3916625d0376785048c8218052f9c2911e7db4654d46a9528fefaab6be491dbb75f44c6b68e38d95a09bb77649ac850e90820849f75fc974b3b21ea59222382069429ca19018480e196d6f968feee7d64944d218e2a6c961200baaca6d2646575271d70c65a70685dcd4519f70626db70fa3cf4015207f46a8d723ba6f3a1ef9a6600966bcf0bc3d3f98bf09a4a3bb0cba6638af2afa54551b8f3a042fb7a7fc84ece5bfb47fe5bc726676b8c3028fb3b581746afc523c2daa6d88b6d556542738de135b4a791a6"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x121, 0x7f, [@ibss={0x6, 0x2, 0xb}, @supported_rates={0x1, 0x2, [{0x16}, {0x4}]}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x6, 0x0, {0x2, 0x5, 0x0, 0xa8, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x50, 0x4}}, @mic={0x8c, 0x10, {0x55e, "389d4d06ebfe", @short="093ce6193a50e229"}}, @random_vendor={0xdd, 0xe5, "0e124b08a3cff3e52c17a8857ac02c5fe73a1b2a9d758bae0cad9ca58dea6a248d0133b267d7693497f1a52dc5acc18c01ede6a816e980213cd4e06a70fd7085c4385aa32572621ec7c4c94241cc065756dfc63d8dbc8f5a0a85b2d1738488fa69369c9be3acf460924a7589ea4830f49d0c08378968eb2e81efa483ec3670c0c71049aaeef9a3c8577583f2342f77b5c6f781a748aa3a17cf7e937aeffb07a17532deda17df269dcd31ad96bbf24c6d728319340127c9c2a40ccfa1f0d6807cd9a96ca60fdb7e2eb07608f3e3d3e83029aaa9859d1665ae06095372b81bcf359b7c1976c1"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1a4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1d, 0x3, "afdbb8f1e0153644cfeccac5b357cb9e570f1778a03f12d1cd"}, @NL80211_FTM_RESP_ATTR_LCI={0xab, 0x2, "355352a34475371b400b55f871af30aeb416ea3e46c28170ff080bb3ac075908891ec62183d2c7e9419fb0c33d526909c78dfcab952272861e1380cc5d5ebe3a8d93807719ee0273a5a9f343b49dbd314030496beca3005468fa53a25bc43259a4d7e9fd2187a662f55314522dd7636d8f1123a1efd9010a8a915c56bbf42a4a778e250a27c7a7b57afabd76c2e2651d3c70df425c2a817357edf08bcfc21fd5766a7acfef438d"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc8, 0x3, "359d39c7e3ed88c589c9c9fa25e9a3687d983df75518f409badf204ea182f19ffd015c1c885bc57598b052d9ea7b97c30c813279e3a49d82b53a951257610cc264afc578e1910013ad57562ab06ca491a480c4044aba7f778d374786c7ec76a55b9ecd5e070305ecbd1bd61df318d5ec5d0ab4b05b9982b4e28f7b0ae16d7eeb59c7939fa759c037cc702fc9a2db957276f0b610b38c09143c157cc3042cbb1c4088bdf38d478f8965f6a643988f205b5d2338f26c8f31a507ce9ecaf3a85f4ff86abf43"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@random={0x8, 0x2, "27dc"}]}, @NL80211_ATTR_IE={0x70, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x7f}, 0xf, 0x7, @broadcast, 0x5, 0xfffffffb, 0x6}}, @chsw_timing={0x68, 0x4, {0x7f, 0x4}}, @link_id={0x65, 0x12, {@random="943d22bcf640", @device_b}}, @peer_mgmt={0x75, 0x6, {0x1, 0xc1d3, @val=0x1e9f, @void, @void}}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x0, 0x0, {0x9, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x2, 0x1}}, @random={0x0, 0x6, "0e1fca04aa54"}, @chsw_timing={0x68, 0x4, {0x9, 0x3ff}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xb2, 0x2}}]}]}, 0xc58}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) 2m20.027568976s ago: executing program 32 (id=16): bpf$TOKEN_CREATE(0x24, &(0x7f0000000700), 0x8) perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000801fd, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x9b52, 0x0, 0xb6ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x206, 0xffffffffffffffff, 0xa) socket(0x10, 0x3, 0x0) r0 = fsopen(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000580)={'#! ', './bus', [{0x20, '-*^)'}, {0x20, '+'}, {0x20, '@[)'}, {0x20, 'cgroup.subtree_control\x00'}, {}], 0xa, "18b64b0212a2352db5945c9ee0c7cd06e0167fae7cc6d4f632ecac2413969619efb9109666270b8735770521968b41e9973f478acc7ba0"}, 0x64) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) r2 = fsmount(r0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cp'], 0x5) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000001a00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000180)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) rename(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000007c0)='./bus\x00') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000002900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0xa002}, 0xc, &(0x7f00000028c0)={&(0x7f0000001c40)={0xc58, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_HEAD={0x1e5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @random="6c3c42fbf2cf", {0x0, 0x5}}, 0x9, @default, 0x3002, @void, @void, @val={0x3, 0x1, 0x99}, @void, @void, @val={0x5, 0xb4, {0x9f, 0x3c, 0xc0, "1bca3e8650ab1f50d4b6891ef63d9b62a35d7ffc438ce5565def69f30133becab5073b0cb10096585215fbff5845287ac9adbb207d517d73f9335dbb744c993c418ef7d4937384d5a3a2c86401ffdc3296a95fd51c9a7a28b60f79bc99482fddc20fec73d8620fbb657e21b6ea0a780205ecb5aadac116c793d1362b55269e0946909d42fbfc05cf5877fc78fc487d4eb6a82f17d28b00fd7464542286fd388df40bfe26aae5a0078c5a6dec99acf9ceb3"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x1, 0x7, 0x0, {0x8, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x6, 0xffffffff, 0x2}}, @void, @void, @val={0x76, 0x6, {0x29, 0x8, 0x26, 0x7164}}, [{0xdd, 0xdb, "3780241627cd3f4d394754cceb8687efac3aee96e6e263b79be3e48f257d506c0dfc84565d74122507b64f3d1a54378104de6f73be42a0946b17e942ea27b493d79a171bdb8306d5aaa25b8aa046e5eb0a2c828f097359b5d608e3b89df0e407ac66cf40fd87940edf506800d6c2dd31a2786feac7917fbbe845e04e77dc9baec6258d28a5380da8901551490594dc7eb30a516d86ff25ed02c1a55ab52f1cff7f02320ce91e9ffe82cc64759d7041263f0c94761799f65a9b4491061a2a2e501cef5abc81012f430258c8325c509c7df393764c3c22d4b9605fd7"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0xb4, 0x80, [@perr={0x84, 0xae, {0x6, 0xa, [{{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0xd}, {{0x0, 0x1}, @device_b, 0x400, @value=@broadcast, 0x26}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x12}, {{0x0, 0x1}, @device_b, 0x2, @value=@device_b, 0x3}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x42}, {{}, @device_b, 0x200000, @void, 0x42}, {{}, @device_a, 0x360, @void, 0x3f}, {{0x0, 0x1}, @device_b, 0x540, @value=@device_b, 0xb}, {{0x0, 0x1}, @device_a, 0x7, @value, 0x4}, {{}, @device_b, 0x101, @void, 0x3a}]}}]}, @NL80211_ATTR_FTM_RESPONDER={0x2d8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x3f, 0x2, "b49593db850b55ba09c592cf4ee51aa5cddb4360ee9ab8be75f6b4c48eea25f75710a9e628a02866de11fb59e22be7cf4b8eb3351ef6fc954ba71e"}, @NL80211_FTM_RESP_ATTR_LCI={0x103, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x74, 0x2, "21f2180423529a68736c11d017fa6f15c3f9f1cf85aea696e3f0a6fc52aebda6a6aeba69036033328acc770bd65f2178c74931ea9491c8276e74b80ad2c6a99d905e786369f2dba03937c0fe8bb7261e3688964a2bd220a5316519850209214f976c4ed7328c229bef9b98bb5e115849"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x44, 0x3, "f6bed885c55ff9cba2027a6ec8c5cf3d72428b22ff5a592cdd3c0c1c1e16703c6fd4c21be1dfe564601821172bdc33028807f7ca9d813f804178170a2e45f240"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x43, 0x3, "493e6780d8c14308e856f0159f1a2052fcd87de86741f2e5852f9358b4a16082068aac90926b32e68edb77c0e6d41e2c0d376e790fd7a9684ff56897a42d05"}, @NL80211_FTM_RESP_ATTR_LCI={0x84, 0x2, "db78e26bd9150bd6bf060dbdd2fe96fa560d25cf450daf33a3ad1ee92796588cbf84190cdb63aa1688d2958ab49113695080c80c567d7e057d86a474e9914924bb3e452fde36fe7d1596fffe985bc8d871e30faed92a638619ab72005fbb9be61dde9bd9e8ec2ecfdabc6d554332b99e767d7e64668a9c7fa7f862d6bf7e89c8"}]}, @NL80211_ATTR_FTM_RESPONDER={0x388, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd6, 0x2, "aaac6c23a3a2251fd1d6f574a0021f36baa35ce6ea3f981dddbb25b8fe3281528f6e27842bd21831763d24020a1cf51c167e3a94e71a600cc6a0044bc6e29786c252631f3567da42d754cc0b3ef5edde4bac1d033f38c501da1918588ecf132bd6e3f37f1bd0e3767171cdf6eeaec8bc8411d0f9b0971f9f1b3aa9f941c84c468be48cb21b9b2da2fa07b408dab01e21d8800629ee2b89b0542c255ff5794e83d30898479c4ba879a60d6e5169cc324bf578acf39222e8a73302798ee7b6b16c0e96a9e5a71f702d9a235133c33b4482b326"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe, 0x3, "7bf8ae06527fd7c3daed"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x99, 0x3, "2570b67664446bed8854c4870263c8d8e3f76887a5f83c1e4348bc82b70bd1b186e7f04d99dc0550d136649342d92abc69fca91519d26739bcbcad7e3681ace6f50f474754edcd190ded8080cef201bc01d9d9c2a1ebacd9d35775f86d6cdfc005914207c634aa5c55ffc5a6aa5767359c033208185b14034e871bf1c65b1aa5e73f79317aa6faf05fd86bfb77e66d64b5f1b3450d"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x5e, 0x3, "a12ad2030b542ee2d5a15136bc809ed2859c701ca204a708145fdd908c0bb7ded9b6f160ab3512af80582e7069d587dd7ce76041769a9bebe04397bf288b0c95f6100ec32f93d7e8acb4bb66267deb6c22e72d1a486952f83457"}, @NL80211_FTM_RESP_ATTR_LCI={0xa6, 0x2, "8e07921203f0cfb65132bc1ba6131fd902c9dfb5c434faded2428c7fea6d4dcc88b1ac6136824e217fbb00cca1d0b01f43b8250abf14feaa61c81a5b859dbcc9b844fc36b00212a4a9db4d113e193c384101e6ca6a4c7e74781cff75eb6392c058638a072422cfad70f06aa6905ebe778ae5d456075509c2236848d077390b9178d30a3791cea7aa6e06315e79f7600cf77763fbf8895e865d96cd8f18e4a2d9f4bd"}, @NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe9, 0x3, "ffeda5680c6989cea792010a092b7993d56bdec3925dfaeeb0c40b5498a3916625d0376785048c8218052f9c2911e7db4654d46a9528fefaab6be491dbb75f44c6b68e38d95a09bb77649ac850e90820849f75fc974b3b21ea59222382069429ca19018480e196d6f968feee7d64944d218e2a6c961200baaca6d2646575271d70c65a70685dcd4519f70626db70fa3cf4015207f46a8d723ba6f3a1ef9a6600966bcf0bc3d3f98bf09a4a3bb0cba6638af2afa54551b8f3a042fb7a7fc84ece5bfb47fe5bc726676b8c3028fb3b581746afc523c2daa6d88b6d556542738de135b4a791a6"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x121, 0x7f, [@ibss={0x6, 0x2, 0xb}, @supported_rates={0x1, 0x2, [{0x16}, {0x4}]}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x6, 0x0, {0x2, 0x5, 0x0, 0xa8, 0x0, 0x1, 0x1, 0x1}, 0x1, 0x50, 0x4}}, @mic={0x8c, 0x10, {0x55e, "389d4d06ebfe", @short="093ce6193a50e229"}}, @random_vendor={0xdd, 0xe5, "0e124b08a3cff3e52c17a8857ac02c5fe73a1b2a9d758bae0cad9ca58dea6a248d0133b267d7693497f1a52dc5acc18c01ede6a816e980213cd4e06a70fd7085c4385aa32572621ec7c4c94241cc065756dfc63d8dbc8f5a0a85b2d1738488fa69369c9be3acf460924a7589ea4830f49d0c08378968eb2e81efa483ec3670c0c71049aaeef9a3c8577583f2342f77b5c6f781a748aa3a17cf7e937aeffb07a17532deda17df269dcd31ad96bbf24c6d728319340127c9c2a40ccfa1f0d6807cd9a96ca60fdb7e2eb07608f3e3d3e83029aaa9859d1665ae06095372b81bcf359b7c1976c1"}]}, @NL80211_ATTR_FTM_RESPONDER={0x1a4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1d, 0x3, "afdbb8f1e0153644cfeccac5b357cb9e570f1778a03f12d1cd"}, @NL80211_FTM_RESP_ATTR_LCI={0xab, 0x2, "355352a34475371b400b55f871af30aeb416ea3e46c28170ff080bb3ac075908891ec62183d2c7e9419fb0c33d526909c78dfcab952272861e1380cc5d5ebe3a8d93807719ee0273a5a9f343b49dbd314030496beca3005468fa53a25bc43259a4d7e9fd2187a662f55314522dd7636d8f1123a1efd9010a8a915c56bbf42a4a778e250a27c7a7b57afabd76c2e2651d3c70df425c2a817357edf08bcfc21fd5766a7acfef438d"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc8, 0x3, "359d39c7e3ed88c589c9c9fa25e9a3687d983df75518f409badf204ea182f19ffd015c1c885bc57598b052d9ea7b97c30c813279e3a49d82b53a951257610cc264afc578e1910013ad57562ab06ca491a480c4044aba7f778d374786c7ec76a55b9ecd5e070305ecbd1bd61df318d5ec5d0ab4b05b9982b4e28f7b0ae16d7eeb59c7939fa759c037cc702fc9a2db957276f0b610b38c09143c157cc3042cbb1c4088bdf38d478f8965f6a643988f205b5d2338f26c8f31a507ce9ecaf3a85f4ff86abf43"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x8, 0xf, [@random={0x8, 0x2, "27dc"}]}, @NL80211_ATTR_IE={0x70, 0x2a, [@erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x0, 0x7f}, 0xf, 0x7, @broadcast, 0x5, 0xfffffffb, 0x6}}, @chsw_timing={0x68, 0x4, {0x7f, 0x4}}, @link_id={0x65, 0x12, {@random="943d22bcf640", @device_b}}, @peer_mgmt={0x75, 0x6, {0x1, 0xc1d3, @val=0x1e9f, @void, @void}}, @ht={0x2d, 0x1a, {0x1, 0x1, 0x0, 0x0, {0x9, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x300, 0x2, 0x1}}, @random={0x0, 0x6, "0e1fca04aa54"}, @chsw_timing={0x68, 0x4, {0x9, 0x3ff}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x9, 0xb2, 0x2}}]}]}, 0xc58}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000000) 9.680850485s ago: executing program 1 (id=782): socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x6, 0x6, &(0x7f0000000780)=ANY=[@ANYRES32, @ANYRES64=r0], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xd3, &(0x7f0000000680)=""/211}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) socket(0x10, 0x3, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000280)=r5) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="c3ffffff0206030000000001000000000000000011000300686173683a69702c706f7274c3e4b4392a54bb2673797a31000000000c000780080012400ffffffc0500050007000000050005000a"], 0x58}}, 0x8090) socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x6e23, 0x7ffe, @mcast2, 0x9}, 0x1c) r10 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r10, &(0x7f0000000440), 0x10) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8000000010003704000000000000000000000001", @ANYRES32=0x0, @ANYBLOB="83040500000000006000128008000100677265005400028006000e000100000006000f000e0000000500160001000000060011004e230000060003008000000006000f000000000005001600010000000800040001"], 0x80}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 8.768095653s ago: executing program 1 (id=791): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x100, 0xc00, 0x0, 0x396}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x800000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8.727361275s ago: executing program 1 (id=792): perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xfff}, 0x3001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xffe0, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @remote}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8, 0xd, 0xffffffff}, @TCA_FLOWER_KEY_UDP_DST={0x6}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88e5}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @multicast1}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) socket$unix(0x1, 0x5, 0x0) 8.524141026s ago: executing program 1 (id=797): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x8, 0x240060) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240), 0x1, 0x4ff, &(0x7f0000000ac0)="$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") creat(0x0, 0x18) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x138, 0x98, 0x138, 0x0, 0x0, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3}}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x9, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) connect$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40800, &(0x7f0000000240)={[{@noquota}, {@noblock_validity}, {@nogrpid}, {@data_journal}]}, 0xfe, 0x282, &(0x7f00000015c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x820f8, &(0x7f0000000240)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000002000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000fedbdf250e00000008000300b6c629ddf2c99ef94ce557b4b6593315c1d50ae99bc8dc8f230d0697dbac608004ddb94da4475bff76e3ef2f4f0c6cfbb3c97a2f9a0d5b51c06548d06b3415340b718238e594734df53f1816d9f35c02aff1419f5506694eb395eb425944e0c5631c7a71cc71f482187b821dee7296d3a13214e028956cd27432b880b854cf8bf718c45eed4359b378db9b00399457c1c57829af5ef89f", @ANYRES32=0x0, @ANYBLOB="04000e00"], 0x20}}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='}\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000428bd7000fddbdf250600000008000300", @ANYRES32=r7, @ANYBLOB="05005300000000000a0018000303030303030000"], 0x30}, 0x1, 0x0, 0x0, 0x24008881}, 0x4000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 6.628245594s ago: executing program 1 (id=811): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setopts(0x4200, r2, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x400000, 0x80000000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$netlink(0x10, 0x3, 0x8000000004) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r0) 5.75584912s ago: executing program 1 (id=819): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x343b8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xa) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000300000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 5.739612561s ago: executing program 33 (id=819): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000200)='dctcp', 0x5) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x343b8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, 0xffffffffffffffff, 0xa) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000400)="02", 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000300000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.314930059s ago: executing program 3 (id=839): perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'sit0\x00', 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40a01, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x30c) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x7662) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) setreuid(0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x4c) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r5) setresuid(0x0, r4, r4) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4092) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.976592078s ago: executing program 2 (id=841): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4d32, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0xc000, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0xfe, 0xfffffffe, 0x2, {0x4, 0x1}, 0x3, 0x800}) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000140)=0x9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x19) writev(r3, &(0x7f0000000040), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x22020400) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f00000001c0)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5], 0x24}}, 0x0) 1.892290511s ago: executing program 3 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) recvmmsg(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x40000040, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) close_range(r1, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000240)=""/4, 0x4}, {&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/28, 0x1c}, {&(0x7f00000003c0)=""/159, 0x9f}, {&(0x7f0000000480)=""/148, 0x94}, {&(0x7f0000000540)=""/98, 0x62}, {&(0x7f00000005c0)=""/82, 0x52}, {&(0x7f0000000680)=""/243, 0xf3}], 0x8, 0x4, 0xe, 0xb) 1.891939641s ago: executing program 2 (id=843): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setopts(0x4200, r2, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x400000, 0x80000000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$netlink(0x10, 0x3, 0x8000000004) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r0) 1.889934551s ago: executing program 5 (id=851): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21881e, &(0x7f00000000c0)={[{@user_xattr}, {@abort}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x1, 0x529, &(0x7f0000002380)="$eJzs3c9vI1cdAPDveNeJN5s229IDIGiXtrCg1Tobb3dV9QDlAkKoEqJHkLYh8UZR7DiKnbIJe0jPXJGoxAmO/AHckHpC4sgFwY1LOSDxIwI1SBwGzXiSOKm9iTaJHcWfjzTyezMTf78v8byXeYn9AhhbNyNiOyImIuK9iJgp9ifFFm93t+y8T3aeLOzuPFlIIk3f/WeSH8/2Rc/XZK4Xz1mJiO9/O+JHyafjtje3VuYbjfp6UZ/tNNdm25tbd5ab80v1pfpqrfZg7sHdN+/dr51ZW19pThSlL378h+2v/SRLa7rY09uOs9Rtenk/TuZqRHz3PIKNwJWiPROjToRnUoqIFyPi1fz6n4kr+U8TALjM0nQm0pneOgBw2ZXyObCkVC3mAqajVKpWu3N4L8VUqdFqd24/am2sLnbnym5EufRouVG/W8wV3ohyktXn8vJBvXakfi8iXoiIn01ey+vVhVZjcZS/+ADAGLt+ZPz/z2R3/AcALrnKqBMAAIbu5OP//clzTQQAGBr3/wAwfoz/ADB+uuP/tVGnAQAMkft/ABg/xn8AGCvfe+edbEt3i8+/Xnx/c2Ol9f6dxXp7pdrcWKgutNbXqkut1lL+mT3N456v0Wqtzb0RG49vfH2t3Zltb249bLY2VjsP88/1flgv52dtD6FlAMAgL7zy0Z+TbER+61q+Rc9aDuWRZgact9KoEwBG5sqoEwBGxmpfML5OcY9vegAuiT5L9O77/bfStNLvDUJpmqbnmxZwjm59zvw/jKue+X//BQxjxvw/jC/z/zC+0jQ56Zr/cdITAYCLzRw/MODv/y8Wj78u/jjww8WDY2n+NR+ee2oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwYe2t/1st1gKfjlKpWo14LiJuRDl5tNyo342I5yPiT5Plyaw+N+KcAYDTKv0tKdb/ujXz+vShQy9f3y9ORMSPf/Huzx/Pdzrrf4yYSP41ube/82Gxvzb87AGA4z1OIh+n8/G650b+k50nC3vbMPP5+zcjotKNv7szEbv78a/G1fyxEuWImPp3UtS7kp65i9PY/iAiPtuv/UlM53Mg3ZVPj8bPYj831PilQ/FL+bHuY/a9+MwZ5ALj5qOs/3m73/VXipv5Y//rv5L3UKdX9H/ZUy3s5n3gQfy9/u/KgP7v5kljvPG773RL1z597IOIz1+N2Iu929P/7MVPBsR//eiTDegQ//KFl18dlFv6y4hb0T9+b6zZTnNttr25dWe5Ob9UX6qv1moP5h7cffPe/dpsPkc9O3g0+Mdbt58fdCxr/9SA+JVj2v/lgREP+9X/3vvBl54S/6uv9YtfipeeEj8bE79ywvjzU7+pDDqWxV8c0P7jfv63Txj/479uLZ7wVABgCNqbWyvzjUZ9fWDht1PHn6PwrIXil8y4KPlc8EL2rboAafQtfGNYsSYGvFp++lr3tZTt2bvT21qZT9Nne2UecnDneBazbsBFsH/RR8R/R50MAAAAAAAAAAAAAADQ1zDesTTqNgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB5/T8AAP//EHXL0w==") utimes(&(0x7f0000000700)='./file1\x00', &(0x7f00000007c0)) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="f1", 0x1}], 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) socket$netlink(0x10, 0x3, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140), 0x60e00, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f00000001c0)=@get={0x1, &(0x7f0000002240)=""/4109, 0x4}) close(r1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x6, 0x3e, 0x4, 0x400}, {0x401, 0xfb, 0x2, 0x8001}, {0x4, 0x9, 0x5, 0x7}, {0x9, 0x10, 0x0, 0xfffffe00}]}, 0x10) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000001c00)={&(0x7f00000002c0)={0xa, 0xa, 0x7, @remote}, 0x1c, 0x0}, 0x20000b5c) 1.843017914s ago: executing program 4 (id=844): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/113, 0x71}, 0x3}], 0x1, 0x40000002, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x203a, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) close(0xffffffffffffffff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x8, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, r7, 0x1, 0x70bd28, 0x0, {0x7}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.588181517s ago: executing program 5 (id=845): mount$9p_fd(0x0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1200810, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x70bd28, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0xfe5a, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x4, 0xfffffffe}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mprotect(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1) preadv(r0, &(0x7f0000010440)=[{&(0x7f0000000040)=""/160, 0xa0}], 0x1, 0xc03, 0x0) 1.083971144s ago: executing program 5 (id=846): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4004084}, 0x840) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x40480c4) 964.3859ms ago: executing program 2 (id=847): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a0000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 940.524961ms ago: executing program 3 (id=848): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xae, &(0x7f0000000100)=""/174, 0x0, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 844.159806ms ago: executing program 2 (id=849): r0 = socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x29, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) unshare(0x6020400) acct(&(0x7f0000000040)='./file0\x00') unshare(0x22060600) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008100) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 843.995106ms ago: executing program 3 (id=850): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="05000d"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) 843.861926ms ago: executing program 5 (id=852): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x400, 0xffffffff, 0x7}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@ipv6_getanyicast={0x14, 0x3e, 0x4, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}}, 0x4004) r1 = socket(0x2, 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4050, &(0x7f0000000000)=0xfd2) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00^\x00'], 0x20}, 0x1, 0x0, 0x0, 0x10c0}, 0x84) 829.013597ms ago: executing program 4 (id=853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0000006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x50, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x33, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x80000, @default, 0x1, @void, @void, @val={0x3, 0xfffffffffffffce7}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x76, 0x6, {0x3, 0xe8, 0x24, 0x401}}}}]]}, 0x50}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) 825.508097ms ago: executing program 3 (id=854): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x14080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000240)={[{@jqfmt_vfsv1}, {@sysvgroups}]}, 0x3, 0x466, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvbpz0/Yt/Fa8+gEBBVDySJi2lBy4gKnEACQkO5RiStCp1G9QEiVYVFITKEVXijjgi8RdwggsCTkhcyxWhShXqpaUno7V3Y8d1nNRNalN/PtLGM/vIzHd3x57ZiRPAwBrLfiQR2yPiSkSM1rPLdxirv9y8fmHmn+sXZpKoVt/+O6ntd+P6hZli1+K4bUWmHJF+nsSeNuUunDt/arpSmTub5ycWT38wsXDu/AsnT0+fmDsxd2bqyJFDBydfOjz14rrEmcV1Y/fH83t3vf7u5Tdnjl1+75fvkiL+ljjuSLrilrFOhz1drXZVXL/a0ZROSo3kKodVR9utHe5wxNCd1oxOstNZyk/5lRiNoWhcvNE4+llPKwdsqJHOmy9WgftY1psHBlHxQZ+Nf4vlHnQ7+sa1V+oDoCzum/lS31JaGtoPt4xv19NYRBy7eOvrbIm7eQ4BALBGP2T9n+fb9f/SeKhpv//lcyjliPh/ROyMiMP58+MHI2r7PhwRjywdsXlN5bdOktze/0mvdh3cGmT9v5fzua3l/b+liZ3yUJ7bUYt/ODl+sjJ3ID8n+2N4U5af7FDGj6/9/uVK25r7f9mSlV/0BfN6XC1tWn7M7PTi9N3E3OzapxG7S+3iT5ZmApKI2BURu7ss4+Sz3+5dadvq8W+s6jcRz9Sv/8Voib+QNOXazE9ObI7K3IGJ4q643a+/XXprpfKb4y/1IP7s+m9te/8vxV9OmudrF+68jEt/fLHimKbb+38keaexorhRJyNGkjfqlc5XfTS9uHh2qrFrka+9Ttbj37+vffvfGY0zsScispv40Yh4LCIez+v+REQ8GRH7OsT/86tPvd99/Bsri382Im7lzwNWv/6NxEi0rskTf+a/LF8zdOqn75cVWl4l/qPNo+3s+h+qpfbna9by/te2Xm0Sd3n6AAAA4D8hjYjtkaTj+Yh/e6Tp+Hj9b/gfiK1pZX5h8bnj8x+ema1/R6Acw2nxpGu06XnoZD6sL/JTLfmD+XPjr4a21PLjM/OV2V4HDwNuW1P7T5vaf+Yv37WA+1+p1xUAekb7h8Gl/cPg0v5hcLVp/1t6UQ/g3qu1/5Z/1fRJj+oC3Fstn/+m/WCAGP/D4Oqi/XvLgPuExgwDaWFLrP4leYmNSIz2RzW6TUTaF9Xok0T2EdoH1VjHRK/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANbHvwEAAP//t7zhUg==") 744.013472ms ago: executing program 2 (id=855): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) io_setup(0x9, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, &(0x7f00000018c0)='GPL\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1f}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x11}]}, 0x24}}, 0x44004) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r6, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, 0x0, 0x0) close(r3) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000390009fffe0f0f000000000003"], 0x78}}, 0x0) syz_emit_ethernet(0xa3, &(0x7f0000000740)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60120008006d3afffe8000000000000000000000000000bbff020000000000000000000000000001860090780000000000000000000000000009a78ce54006598080a8030037004023493b87f055aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b000100e9ff06ffff0001fe906d26efe3"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 742.923912ms ago: executing program 5 (id=856): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x10104, 0x10001, 0xda, 0x5, 0xc31bc80, 0xffff, 0xc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x400, 0x7, 0x2000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) socket$inet6(0xa, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0xffe00001, 0x4) socket(0x22, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getuid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000780)={0x0, 0x0}) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$pokeuser(0x6, r5, 0x8, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xb}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48801}, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000000)=0x7, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x10, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_bp={0x0}, 0x20, 0x5bd20d9b, 0x800000, 0x0, 0x2, 0x4000002, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r6, 0x1) socket$pppoe(0x18, 0x1, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, r3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") 720.058113ms ago: executing program 4 (id=857): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x44085}, 0x8040) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f0000000380)={@private2}, &(0x7f00000003c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbdbdf250f00000008000300", @ANYRES32=r7, @ANYBLOB="08002b02000000000000030000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={0x0, 0x1b4}, 0x1, 0x0, 0x0, 0x4c000}, 0x4085) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4a, 0x0, 0x0) fchdir(r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmsg$inet(r9, 0x0, 0x88c1) 694.426824ms ago: executing program 3 (id=858): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x5}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8635}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$setopts(0x4200, r2, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x400000, 0x80000000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$netlink(0x10, 0x3, 0x8000000004) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r0) 579.0975ms ago: executing program 2 (id=859): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) recvmmsg(0xffffffffffffffff, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0xfffffff9}], 0x1, 0x40000040, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xe, 0xb) 450.605017ms ago: executing program 4 (id=860): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1c, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a0000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 435.114498ms ago: executing program 4 (id=861): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x4bf}], 0x1}, 0x84) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000240)={[{@sysvgroups}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x514}}, {@debug}, {@stripe={'stripe', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@jqfmt_vfsv1}]}, 0x80, 0x54f, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvbLxufji1SzlAJUqBoqSC7MY1bS0OJUgITpUQ5R6MvbGsrL2Rd93GViScvwAJIUBwggsXJP4AJBSJC0eEFAnOIBWBEDhwQAIy1cyOHdeZ3WzSza5/fD7SZN68+fF9bzYznjfzNBPAifVSRFyJiPtpmr4SEdNFfqUYYrs7ZMvd27m1mA1JpOnb/0giKfJ2t5UU43PFaqcj4htfi/h28nDc9ubW9YVms7FeTNc7qzfq7c2tSyurC8uN5cba3Nzs6/NvzL82f3ko9TwfEW9+5S8/+O7Pv/rmrz//7p+v/u1iVu2YKubvr8djyHbRRL8FulWv5vtiV7bC+hMEO6wm8hoWzpQtkaZpej+d3pdzeyQlAwDgoOwC9iMR8emIeCWm41T/y1kAAADgCEq/NBX/S7pPaEpM9sgHAAAAjpBK3gc2qdSKvgBTUanUat0+vB+Ns5Vmq9353LXWxtrS3R9PRcRMVCvXVpqNy0Vf4ZmoJtn0bJ5+MP3qgem5iHguIr4/fSafri22mkvjvvkBAAAAJ8S5A+3/f0932/8AAADAMTPzcFZlHOUAAAAAnp6S9j8AAABwzGj/AwAAwLH29bfeyoZ09/vXS+9sblxvvXNpqdG+XlvdWKwtttZv1JZbreX8nX2r+9c9VbK9Zqt14wuxtnGz3mm0O/X25tbV1dbGWufqygc+gQ0AAACM0HOfvPPHJCK2v3gmHzKT4y4UMBITe6mkGJcc/X96tjt+b0SFAkai7B7+Qe89M4KCACM38URrpYOcNoBDrjruAgBjlzxifs/OO78rxp8abnkAAIDhu/Dx3s//+38DYNsnAuCIcxDDyXXgQV46Pa6CACOXP/8ftMOviwU4VqoD9QAEjrMP/fz/kdL0sQoEAAAM3VQ+JJVacXtvKiqVWi3ifP5ZgGpybaXZuBwRz0bEH6arz2TTs/maySPbDAAAAAAAAAAAAAAAAAAAAAAAAABAV5omkfZzpe9cAAAA4AiIqPw1+U33Xf4Xpl+eOnh/YDL5T/5J4MmIePcnb//w5kKnsz6b5f9zL7/zoyL/1XHcwQAAAAAO2m2n77bjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCY7u3cWry3cyv9786txVHG/fuXI2JmL34+dOdMxOl8fDqqEXH2X0lM7FsviYhTQ4i/fTsiPlYWP8mKtReyLP6Zpx8/Zoq9UBb/3BDiw0l2Jzv/XCk7/irxUj4uP/4mIj4w/aR6n/9i7/x3qsfxf37AGC/c/WW9Z/zbES9MlJ9/duMnD8VPinFloPjf+ubWVq956U8jLkR5/P3R6p3VG/X25talldWF5cZyY21ubvb1+TfmX5u/XL+20mwU/5bG+N4nfnW/X/3P9og/07P+3TK9PFDtI/5/9+bO8z3+XmXxL36mJP5vf1Ys8XD8SrGtzxbpbP6F3fR2N73fi7/4/Yv96r/0oP7VwX7/bsyL/av94AccxoECAAxNe3Pr+kKz2Vg/Conqk6yVtdLLZj1f7IEPX7DJw7J/JB4z8Z2hbjBN07TH/6g7ETHIdpI4DLslT4z3vAQAAAzfg4v+cZcEAAAAAAAAAAAAAAAAAAAATq4hvjNssvQ1eyVvFtjeSyXeDAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBrvBwAA//9pfNv4") syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0xb3) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000000040)={@mcast1, 0x0}, &(0x7f0000000080)=0x14) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r2, r2) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000a00)={{{@in=@private=0xa010102, @in=@multicast2, 0x4e23, 0x1, 0x4e20, 0x5, 0x2, 0x40, 0xa0, 0x3a, r1, r2}, {0x8001, 0x2, 0xffffffffffffffff, 0x1ff, 0x10000, 0x9, 0x1, 0x862}, {0x6, 0xb, 0x5, 0x7}, 0x7, 0x6e6bbb, 0x2, 0x0, 0x1, 0x1}, {{@in6=@remote, 0x4d2, 0x3c}, 0x2, @in6=@private2, 0x0, 0x2, 0x0, 0xff, 0x2, 0xff, 0x1ff}}, 0xe8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 242.419618ms ago: executing program 5 (id=862): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40044}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x400e815}}], 0x2, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000b40)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@prjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nobarrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000001c0)="$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") setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x0, 0xfffe}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r1, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x28, 0x29, 0x2, "6b210acfeda5a0d6c477d874f77f552917"}], 0x28}}], 0x1, 0x4000000) ioctl$VT_ACTIVATE(r0, 0x4b44, 0x40000000000fc) 0s ago: executing program 4 (id=863): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="05000d"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) kernel console output (not intermixed with test programs): tected capacity change from 0 to 512 [ 94.471558][ T28] audit: type=1400 audit(1777256719.854:564): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 94.498723][ T28] audit: type=1400 audit(1777256719.864:565): avc: denied { create } for pid=4983 comm="syz.5.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.541226][ T28] audit: type=1400 audit(1777256719.874:566): avc: denied { bind } for pid=4983 comm="syz.5.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.564910][ T28] audit: type=1400 audit(1777256719.874:567): avc: denied { write } for pid=4983 comm="syz.5.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.588587][ T4989] __nla_validate_parse: 5 callbacks suppressed [ 94.588605][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.397'. [ 94.607915][ T28] audit: type=1400 audit(1777256720.024:568): avc: denied { setopt } for pid=4988 comm="syz.5.397" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 94.661751][ T28] audit: type=1400 audit(1777256720.094:569): avc: denied { ioctl } for pid=4979 comm="syz.1.392" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 94.712014][ T4986] loop4: detected capacity change from 0 to 512 [ 94.727501][ T4986] EXT4-fs: Ignoring removed nobh option [ 94.735413][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.751564][ T4986] EXT4-fs (loop4): orphan cleanup on readonly fs [ 94.762946][ T4986] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.395: EA inode hash validation failed [ 94.779418][ T4986] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.395: corrupted inode contents [ 94.792489][ T4986] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.792685][ T4986] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.395: mark_inode_dirty error [ 94.802610][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 94.802714][ C1] EXT4-fs (loop4): initial error at time 1777256720: ext4_do_update_inode:5690: inode 15 [ 94.803125][ C1] EXT4-fs (loop4): last error at time 1777256720: ext4_do_update_inode:5690: inode 15 [ 94.863000][ T4986] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.867652][ T4986] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.395: corrupted inode contents [ 94.906187][ T28] audit: type=1400 audit(1777256720.344:570): avc: denied { connect } for pid=5001 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 94.947686][ T4986] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 94.948614][ T4986] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.395: mark_inode_dirty error [ 94.980808][ T4986] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.001026][ T4986] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.395: mark inode dirty (error -117) [ 95.030737][ T4986] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.030933][ T4986] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 95.061959][ T4986] EXT4-fs (loop4): 1 orphan inode deleted [ 95.080755][ T4986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 95.113920][ T5009] EXT4-fs (loop3): 1 orphan inode deleted [ 95.120299][ T5009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.133437][ T3450] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 95.145047][ T3450] loop3: lost filesystem error report for type 5 error -117 [ 95.148133][ T5009] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.191925][ T5009] usb usb1: usbfs: process 5009 (syz.3.403) did not claim interface 0 before use [ 95.215540][ T4986] netlink: 96 bytes leftover after parsing attributes in process `syz.4.395'. [ 95.254435][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.329210][ T5018] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 95.346724][ T5018] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.414130][ T5016] 9p: Bad value for 'wfdno' [ 95.434859][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 95.555949][ T5026] Symlink component flag not implemented [ 95.574666][ T5026] Symlink component flag not implemented [ 95.661677][ T5029] netlink: 12 bytes leftover after parsing attributes in process `syz.4.411'. [ 95.775123][ T5040] netlink: 76 bytes leftover after parsing attributes in process `syz.3.415'. [ 95.775545][ T5036] EXT4-fs: Ignoring removed nobh option [ 95.807887][ T5036] EXT4-fs (loop5): orphan cleanup on readonly fs [ 95.827008][ T5036] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.414: EA inode hash validation failed [ 95.843233][ T5036] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.414: corrupted inode contents [ 95.859184][ T5040] ext4: Bad value for 'mb_optimize_scan' [ 95.866407][ T5036] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.872241][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 95.887849][ C1] EXT4-fs (loop5): initial error at time 1777256721: ext4_do_update_inode:5690: inode 15 [ 95.897728][ C1] EXT4-fs (loop5): last error at time 1777256721: ext4_do_update_inode:5690: inode 15 [ 95.923863][ T5036] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #15: comm syz.5.414: mark_inode_dirty error [ 95.966227][ T5036] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 95.997538][ T5036] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.414: corrupted inode contents [ 96.055735][ T5046] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 96.072744][ T5036] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.075453][ T5036] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.414: mark_inode_dirty error [ 96.121068][ T5046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.133963][ T5036] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.138184][ T5036] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.414: mark inode dirty (error -117) [ 96.165667][ T5054] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 96.179697][ T5036] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.181847][ T5036] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 96.204946][ T5036] EXT4-fs (loop5): 1 orphan inode deleted [ 96.242612][ T5048] netlink: 96 bytes leftover after parsing attributes in process `syz.2.418'. [ 96.249358][ T5036] netlink: 96 bytes leftover after parsing attributes in process `syz.5.414'. [ 96.524042][ T5066] Symlink component flag not implemented [ 96.551729][ T5066] Symlink component flag not implemented [ 97.075758][ T5084] EXT4-fs (loop5): 1 orphan inode deleted [ 97.156356][ T5084] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.231212][ T5088] netlink: 16 bytes leftover after parsing attributes in process `syz.1.429'. [ 97.436056][ T5084] usb usb1: usbfs: process 5084 (syz.5.428) did not claim interface 0 before use [ 97.565912][ T60] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 98.458449][ T5106] set_capacity_and_notify: 9 callbacks suppressed [ 98.458610][ T5106] loop5: detected capacity change from 0 to 512 [ 98.525321][ T5110] loop1: detected capacity change from 0 to 512 [ 98.534673][ T5106] EXT4-fs: Ignoring removed nobh option [ 98.576531][ T5110] EXT4-fs: Ignoring removed nobh option [ 98.646030][ T5106] EXT4-fs (loop5): orphan cleanup on readonly fs [ 98.673416][ T5110] EXT4-fs (loop1): orphan cleanup on readonly fs [ 98.684993][ T5106] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.434: EA inode hash validation failed [ 98.703828][ T5110] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.436: EA inode hash validation failed [ 98.722716][ T5106] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.434: corrupted inode contents [ 98.741134][ T5122] loop4: detected capacity change from 0 to 128 [ 98.760170][ T5106] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #15: comm syz.5.434: mark_inode_dirty error [ 98.772764][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 98.773186][ C0] EXT4-fs (loop5): initial error at time 1777256724: ext4_do_update_inode:5690: inode 15 [ 98.773626][ C0] EXT4-fs (loop5): last error at time 1777256724: ext4_do_update_inode:5690: inode 15 [ 98.798907][ T5110] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.436: corrupted inode contents [ 98.822205][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 98.828685][ C1] EXT4-fs (loop1): initial error at time 1777256724: ext4_do_update_inode:5690: inode 15 [ 98.837548][ T5122] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.838586][ C1] EXT4-fs (loop1): last error at time 1777256724: ext4_do_update_inode:5690: inode 15 [ 98.860448][ T5110] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #15: comm syz.1.436: mark_inode_dirty error [ 98.873771][ T5106] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.434: corrupted inode contents [ 98.890089][ T5110] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.436: corrupted inode contents [ 98.900528][ T5106] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.434: mark_inode_dirty error [ 98.937523][ T5106] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.434: mark inode dirty (error -117) [ 99.078957][ T5127] loop3: detected capacity change from 0 to 764 [ 99.140788][ T5127] Symlink component flag not implemented [ 99.147465][ T5127] Symlink component flag not implemented [ 99.175294][ T5110] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.436: mark_inode_dirty error [ 99.273053][ T28] kauditd_printk_skb: 200 callbacks suppressed [ 99.273233][ T28] audit: type=1326 audit(1777256724.714:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f652059d60e code=0x7ffc0000 [ 99.339799][ T5106] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 99.385815][ T5110] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.436: mark inode dirty (error -117) [ 99.424147][ T5106] EXT4-fs (loop5): 1 orphan inode deleted [ 99.499066][ T5106] EXT4-fs mount: 6 callbacks suppressed [ 99.499083][ T5106] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.525576][ T28] audit: type=1326 audit(1777256724.744:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f652059d60e code=0x7ffc0000 [ 99.575581][ T5110] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 99.638331][ T5110] EXT4-fs (loop1): 1 orphan inode deleted [ 99.740301][ T28] audit: type=1326 audit(1777256724.744:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f652059d60e code=0x7ffc0000 [ 99.771501][ T5110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 99.842417][ T5106] netlink: 96 bytes leftover after parsing attributes in process `syz.5.434'. [ 99.956497][ T28] audit: type=1326 audit(1777256724.744:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f652059d60e code=0x7ffc0000 [ 99.976737][ T5110] netlink: 96 bytes leftover after parsing attributes in process `syz.1.436'. [ 99.980735][ T28] audit: type=1326 audit(1777256724.744:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f652059d60e code=0x7ffc0000 [ 99.980779][ T28] audit: type=1326 audit(1777256724.744:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f652059d60e code=0x7ffc0000 [ 99.980814][ T28] audit: type=1326 audit(1777256724.744:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f652059d60e code=0x7ffc0000 [ 99.980887][ T28] audit: type=1326 audit(1777256724.744:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f652059d60e code=0x7ffc0000 [ 99.980922][ T28] audit: type=1326 audit(1777256724.744:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f652059d60e code=0x7ffc0000 [ 99.981029][ T28] audit: type=1326 audit(1777256724.754:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.3.437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f652059d60e code=0x7ffc0000 [ 99.985867][ T5135] netlink: 3 bytes leftover after parsing attributes in process `syz.2.442'. [ 100.068151][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.148906][ T5135] 0ªX¹¦À: renamed from batadv0 (while UP) [ 100.166062][ T3293] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.180914][ T5135] 0ªX¹¦À: entered allmulticast mode [ 100.188099][ T5135] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 100.290106][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.110511][ T5143] loop1: detected capacity change from 0 to 512 [ 101.117382][ T5143] ext4: Bad value for 'mb_optimize_scan' [ 101.232716][ T5144] sctp: [Deprecated]: syz.5.446 (pid 5144) Use of int in max_burst socket option. [ 101.232716][ T5144] Use struct sctp_assoc_value instead [ 101.292630][ T5138] bridge_slave_0: entered promiscuous mode [ 101.310956][ T5137] bridge_slave_0: left promiscuous mode [ 101.383406][ T5151] netlink: 52 bytes leftover after parsing attributes in process `syz.5.449'. [ 101.392886][ T5151] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.400085][ T5151] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.441894][ T5153] loop4: detected capacity change from 0 to 512 [ 101.455594][ T5156] loop3: detected capacity change from 0 to 512 [ 101.543992][ T5156] EXT4-fs (loop3): 1 orphan inode deleted [ 101.553471][ T5163] loop4: detected capacity change from 0 to 512 [ 101.560369][ T5156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.578668][ T49] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 101.595274][ T5156] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.631045][ T5156] usb usb1: usbfs: process 5156 (syz.3.451) did not claim interface 0 before use [ 101.692576][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.722836][ T5173] loop4: detected capacity change from 0 to 512 [ 101.760781][ T5173] EXT4-fs (loop4): 1 orphan inode deleted [ 101.776890][ T5173] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.822700][ T5173] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.845575][ T5181] loop3: detected capacity change from 0 to 512 [ 101.852473][ T3450] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:7: Failed to release dquot type 1 [ 101.867723][ T5181] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.898685][ T5173] usb usb1: usbfs: process 5173 (syz.4.456) did not claim interface 0 before use [ 101.915671][ T5181] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 101.929134][ T5181] EXT4-fs (loop3): 1 truncate cleaned up [ 101.936208][ T5181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.937479][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.955718][ T5181] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.159164][ T5183] Symlink component flag not implemented [ 102.165472][ T5183] Symlink component flag not implemented [ 102.443604][ T5188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.459'. [ 102.532682][ T5181] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 102.586472][ T5181] System zones: 0-1, 3-36 [ 102.608584][ T5181] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.458: bad orphan inode 134217728 [ 102.660231][ T5181] loop3: lost filesystem error report for type 5 error -117 [ 102.662067][ T5181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.751982][ T5181] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.147353][ T5199] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 103.612228][ T5208] set_capacity_and_notify: 3 callbacks suppressed [ 103.612247][ T5208] loop3: detected capacity change from 0 to 512 [ 103.708532][ T5208] EXT4-fs (loop3): 1 orphan inode deleted [ 103.727645][ T36] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:2: Failed to release dquot type 1 [ 103.755141][ T5208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.785844][ T36] loop3: lost filesystem error report for type 5 error -117 [ 103.811595][ T5222] loop1: detected capacity change from 0 to 512 [ 103.824936][ T5208] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.847002][ T5222] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 103.865811][ T5208] usb usb1: usbfs: process 5208 (syz.3.465) did not claim interface 0 before use [ 103.885969][ T5222] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 103.896106][ T5223] loop5: detected capacity change from 0 to 2048 [ 103.912402][ T5222] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 103.930611][ T5222] System zones: 0-2, 18-18, 34-34 [ 103.939038][ T5222] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.469: bad orphan inode 15 [ 103.964969][ T5222] loop1: lost filesystem error report for type 5 error -117 [ 103.965143][ T5222] ext4_test_bit(bit=14, block=18) = 1 [ 103.972602][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 103.972618][ C1] EXT4-fs (loop1): initial error at time 1777256729: ext4_orphan_get:1423 [ 103.972646][ C1] EXT4-fs (loop1): last error at time 1777256729: ext4_orphan_get:1423 [ 104.024415][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.032415][ T5222] is_bad_inode(inode)=0 [ 104.037671][ T5222] NEXT_ORPHAN(inode)=2264924160 [ 104.043035][ T5222] max_ino=32 [ 104.046404][ T5222] i_nlink=0 [ 104.047443][ T5223] Alternate GPT is invalid, using primary GPT. [ 104.056951][ T5222] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.469: corrupted inode contents [ 104.070575][ T5223] loop5: p1 p2 p3 [ 104.071713][ T5222] fserror_report: 10 callbacks suppressed [ 104.071766][ T5222] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.082228][ T5222] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #15: comm syz.1.469: mark_inode_dirty error [ 104.084322][ T5223] loop5: partition table partially beyond EOD, [ 104.096521][ T5222] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.110340][ T5222] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.469: corrupted inode contents [ 104.136772][ T5223] truncated [ 104.162010][ T5222] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.162256][ T5222] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.469: mark_inode_dirty error [ 104.198006][ T5222] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.198595][ T5222] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.469: mark inode dirty (error -117) [ 104.222025][ T5222] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.222333][ T5222] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 104.261245][ T5229] loop4: detected capacity change from 0 to 512 [ 104.285118][ T5222] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.308996][ T5236] loop3: detected capacity change from 0 to 256 [ 104.313559][ T5229] EXT4-fs: Ignoring removed nobh option [ 104.336096][ T28] kauditd_printk_skb: 368 callbacks suppressed [ 104.336110][ T28] audit: type=1400 audit(1777256729.774:1144): avc: denied { read write } for pid=5235 comm="syz.3.474" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.380353][ T28] audit: type=1400 audit(1777256729.804:1145): avc: denied { open } for pid=5235 comm="syz.3.474" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 104.476356][ T28] audit: type=1326 audit(1777256729.874:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65205dcdd9 code=0x7ffc0000 [ 104.505529][ T28] audit: type=1326 audit(1777256729.874:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65205dcdd9 code=0x7ffc0000 [ 104.590389][ T5244] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.469: bg 0: block 80: padding at end of block bitmap is not set [ 105.472281][ T28] audit: type=1326 audit(1777256729.874:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65205dcdd9 code=0x7ffc0000 [ 105.695292][ T5229] EXT4-fs (loop4): orphan cleanup on readonly fs [ 105.764272][ T5244] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 105.780194][ T28] audit: type=1326 audit(1777256729.874:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65205dcdd9 code=0x7ffc0000 [ 105.808958][ T28] audit: type=1326 audit(1777256729.874:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f65205dcdd9 code=0x7ffc0000 [ 105.848770][ T28] audit: type=1326 audit(1777256729.874:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65205dcdd9 code=0x7ffc0000 [ 106.019374][ T5250] loop5: detected capacity change from 0 to 512 [ 106.041864][ T28] audit: type=1326 audit(1777256729.874:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65205dcdd9 code=0x7ffc0000 [ 106.107547][ T28] audit: type=1326 audit(1777256729.874:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5237 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65205dcdd9 code=0x7ffc0000 [ 106.251856][ T5245] loop3: detected capacity change from 0 to 764 [ 106.341368][ T5245] Symlink component flag not implemented [ 106.348317][ T5245] Symlink component flag not implemented [ 106.614589][ T5229] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.472: EA inode hash validation failed [ 106.722014][ T5229] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 106.826686][ T5229] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.472: corrupted inode contents [ 106.880633][ T5229] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 106.882663][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 106.898297][ C1] EXT4-fs (loop4): initial error at time 1777256732: ext4_do_update_inode:5690: inode 15 [ 106.908178][ C1] EXT4-fs (loop4): last error at time 1777256732: ext4_do_update_inode:5690: inode 15 [ 106.921937][ T5229] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.472: mark_inode_dirty error [ 106.941033][ T5258] loop5: detected capacity change from 0 to 1024 [ 106.957174][ T5258] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 106.969065][ T5229] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.088041][ T5229] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.472: corrupted inode contents [ 107.116289][ T5258] System zones: 0-1, 3-36 [ 107.122493][ T5258] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.479: bad orphan inode 134217728 [ 107.133589][ T5258] loop5: lost filesystem error report for type 5 error -117 [ 107.220380][ T5263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.480'. [ 107.251683][ T5258] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.286979][ T5229] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.294133][ T5229] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.472: mark_inode_dirty error [ 107.318836][ T5229] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.333740][ T5229] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.472: mark inode dirty (error -117) [ 107.362584][ T5229] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.365227][ T5229] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 107.587949][ T5229] EXT4-fs (loop4): 1 orphan inode deleted [ 107.832858][ T5229] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 107.954509][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.052952][ T5276] loop4: detected capacity change from 0 to 512 [ 108.134206][ T5277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.482'. [ 108.452595][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.487804][ T5276] EXT4-fs (loop4): 1 orphan inode deleted [ 108.506874][ T49] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 108.507799][ T5281] sctp: [Deprecated]: syz.1.484 (pid 5281) Use of int in max_burst socket option. [ 108.507799][ T5281] Use struct sctp_assoc_value instead [ 108.521924][ T49] loop4: lost filesystem error report for type 5 error -117 [ 108.535156][ T5276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.599952][ T5276] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.687402][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.775438][ T5277] syz.2.482 (5277) used greatest stack depth: 9216 bytes left [ 108.806204][ T5286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57121 sclass=netlink_route_socket pid=5286 comm=syz.1.487 [ 108.846783][ T5286] netlink: 'syz.1.487': attribute type 21 has an invalid length. [ 108.864914][ T5286] netlink: 'syz.1.487': attribute type 4 has an invalid length. [ 108.930823][ T5293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.489'. [ 109.117820][ T5300] loop3: detected capacity change from 0 to 1024 [ 109.125800][ T5300] EXT4-fs: Ignoring removed orlov option [ 109.133535][ T5300] EXT4-fs: Ignoring removed nobh option [ 109.154705][ T5300] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.442248][ T5307] netlink: 16 bytes leftover after parsing attributes in process `syz.1.493'. [ 109.877137][ T5314] sctp: [Deprecated]: syz.2.495 (pid 5314) Use of int in max_burst socket option. [ 109.877137][ T5314] Use struct sctp_assoc_value instead [ 109.900884][ T5316] loop4: detected capacity change from 0 to 512 [ 109.914603][ T5316] EXT4-fs (loop4): 1 orphan inode deleted [ 109.927038][ T5316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.945453][ T49] __quota_error: 189 callbacks suppressed [ 109.945471][ T49] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 109.962359][ T49] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 109.974009][ T5316] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.998550][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.086759][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.119294][ T5323] loop1: detected capacity change from 0 to 512 [ 110.146947][ T5323] EXT4-fs: Ignoring removed bh option [ 110.160279][ T5323] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.795754][ T5333] netlink: 16 bytes leftover after parsing attributes in process `syz.4.498'. [ 110.861645][ T5323] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.501: corrupted in-inode xattr: e_value size too large [ 110.897823][ T5332] Driver unsupported XDP return value 0 on prog (id 187) dev N/A, expect packet loss! [ 111.109379][ T5323] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.109585][ T5323] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.501: couldn't read orphan inode 15 (err -117) [ 111.118875][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 111.118914][ C0] EXT4-fs (loop1): initial error at time 1777256736: ext4_iget_extra_inode:5128: inode 15 [ 111.118959][ C0] EXT4-fs (loop1): last error at time 1777256736: ext4_iget_extra_inode:5128: inode 15 [ 111.185089][ T5323] loop1: lost filesystem error report for type 5 error -117 [ 111.204176][ T5323] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.874712][ T28] audit: type=1400 audit(1777256737.294:1342): avc: denied { mounton } for pid=5345 comm="syz.2.505" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.927418][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.021791][ T28] audit: type=1400 audit(1777256737.304:1343): avc: denied { mount } for pid=5345 comm="syz.2.505" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 112.162765][ T5342] bridge_slave_0: entered promiscuous mode [ 112.556479][ T5341] bridge_slave_0: left promiscuous mode [ 113.788448][ T5370] VFS: Mount too revealing [ 114.664324][ T5372] netlink: 16 bytes leftover after parsing attributes in process `syz.3.511'. [ 116.045936][ T5379] netlink: 16 bytes leftover after parsing attributes in process `syz.3.513'. [ 116.251398][ T28] audit: type=1400 audit(1777256741.684:1344): avc: denied { bind } for pid=5381 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.453259][ T5382] FAULT_INJECTION: forcing a failure. [ 116.453259][ T5382] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 116.477298][ T5382] CPU: 1 UID: 0 PID: 5382 Comm: syz.4.515 Tainted: G W syzkaller #0 PREEMPT(full) [ 116.477389][ T5382] Tainted: [W]=WARN [ 116.477396][ T5382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 116.477434][ T5382] Call Trace: [ 116.477443][ T5382] [ 116.477451][ T5382] __dump_stack+0x1d/0x30 [ 116.477486][ T5382] dump_stack_lvl+0x95/0xd0 [ 116.477513][ T5382] dump_stack+0x15/0x1b [ 116.477541][ T5382] should_fail_ex+0x263/0x280 [ 116.477580][ T5382] should_fail_alloc_page+0xf2/0x100 [ 116.477623][ T5382] __alloc_frozen_pages_noprof+0x108/0x350 [ 116.477686][ T5382] alloc_pages_mpol+0xb3/0x260 [ 116.477712][ T5382] alloc_pages_noprof+0x8f/0x140 [ 116.477742][ T5382] pte_alloc_one+0x1c/0xc0 [ 116.477785][ T5382] __pte_alloc+0x32/0x2a0 [ 116.477888][ T5382] handle_mm_fault+0x239e/0x2e70 [ 116.477923][ T5382] ? vma_start_read+0x1c7/0x2c0 [ 116.478013][ T5382] do_user_addr_fault+0x62f/0x1050 [ 116.478106][ T5382] ? ksys_mmap_pgoff+0xc1/0x310 [ 116.478127][ T5382] ? __x64_sys_mmap+0x49/0x70 [ 116.478163][ T5382] ? trace_page_fault_user+0x1f/0xa0 [ 116.478202][ T5382] exc_page_fault+0x62/0xa0 [ 116.478280][ T5382] asm_exc_page_fault+0x26/0x30 [ 116.478307][ T5382] RIP: 0033:0x7f3356813f0e [ 116.478329][ T5382] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 116.478353][ T5382] RSP: 002b:00007f33553ae470 EFLAGS: 00010246 [ 116.478374][ T5382] RAX: 0000000000000001 RBX: 00007f33553ae530 RCX: 0000000000000101 [ 116.478466][ T5382] RDX: 0000000000000030 RSI: 0000000000000001 RDI: 00007f33553ae5d0 [ 116.478479][ T5382] RBP: 0000000000000102 R08: 00007f334cf6e000 R09: 0000000000000000 [ 116.478492][ T5382] R10: 0000000000000000 R11: 00007f33553ae540 R12: 0000000000000001 [ 116.478522][ T5382] R13: 00007f3356a12900 R14: 0000000000000000 R15: 00007f33553ae5d0 [ 116.478543][ T5382] [ 116.479709][ T5382] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 116.690303][ T5382] loop4: detected capacity change from 0 to 512 [ 116.733221][ T5382] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.515: corrupted inode contents [ 116.754821][ T5382] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 116.755002][ T5382] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.515: mark_inode_dirty error [ 116.764342][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 116.764365][ C0] EXT4-fs (loop4): initial error at time 1777256742: ext4_do_update_inode:5690: inode 16 [ 116.764401][ C0] EXT4-fs (loop4): last error at time 1777256742: ext4_do_update_inode:5690: inode 16 [ 116.821100][ T5382] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 116.822471][ T5382] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.515: corrupted inode contents [ 116.843828][ T5382] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 116.844142][ T5382] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.515: mark_inode_dirty error [ 116.864625][ T5382] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 116.864987][ T5382] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.515: corrupted inode contents [ 116.886276][ T5382] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 116.886452][ T5382] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 116.905749][ T5382] loop4: lost filesystem error report for type 5 error -117 [ 116.914920][ T5382] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.515: corrupted inode contents [ 116.955285][ T5382] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 116.955545][ T5382] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.515: mark_inode_dirty error [ 116.987578][ T5382] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 116.990618][ T5382] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 117.009895][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.031426][ T5382] loop4: lost filesystem error report for type 5 error -117 [ 117.032016][ T5382] EXT4-fs (loop4): 1 truncate cleaned up [ 117.045499][ T49] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 117.061092][ T49] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 1 [ 117.091037][ T5382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.105174][ T49] loop4: lost filesystem error report for type 5 error -117 [ 117.139050][ T5382] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.213453][ T5405] loop1: detected capacity change from 0 to 512 [ 117.228653][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 117.314700][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.360189][ T28] audit: type=1400 audit(1777256742.794:1345): avc: denied { sqpoll } for pid=5409 comm="syz.4.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 117.642820][ T5419] netlink: 16 bytes leftover after parsing attributes in process `syz.5.523'. [ 117.713985][ T5418] loop1: detected capacity change from 0 to 512 [ 119.288199][ T28] audit: type=1326 audit(1777256743.784:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 119.311822][ T5431] loop5: detected capacity change from 0 to 128 [ 119.313102][ T28] audit: type=1326 audit(1777256743.784:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 119.494142][ T5433] VFS: Mount too revealing [ 120.297083][ T28] audit: type=1326 audit(1777256743.784:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 120.320639][ T28] audit: type=1326 audit(1777256743.784:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 121.325868][ T28] audit: type=1326 audit(1777256743.784:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 121.674130][ T28] audit: type=1326 audit(1777256743.784:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 121.733491][ T5444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.532'. [ 121.779168][ T28] audit: type=1326 audit(1777256743.784:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 121.811439][ T5448] loop1: detected capacity change from 0 to 128 [ 121.870505][ T5444] loop3: detected capacity change from 0 to 512 [ 121.894737][ T28] audit: type=1326 audit(1777256743.784:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 121.930146][ T5444] EXT4-fs: Ignoring removed bh option [ 121.980913][ T28] audit: type=1326 audit(1777256743.784:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 122.045988][ T28] audit: type=1326 audit(1777256743.784:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 122.103046][ T5453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.535'. [ 122.120260][ T28] audit: type=1326 audit(1777256743.904:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 122.184236][ T5455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'. [ 122.196110][ T28] audit: type=1326 audit(1777256743.904:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 122.244795][ T28] audit: type=1326 audit(1777256743.904:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 122.308392][ T5448] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.321553][ T5444] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 122.335360][ T5448] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.347824][ T28] audit: type=1326 audit(1777256743.944:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5426 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 122.474501][ T5444] EXT4-fs (loop3): 1 truncate cleaned up [ 122.511678][ T5444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.540936][ T3292] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.603311][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.876658][ T5472] loop1: detected capacity change from 0 to 512 [ 122.897939][ T5472] EXT4-fs: Ignoring removed nobh option [ 122.960346][ T5476] netlink: 16 bytes leftover after parsing attributes in process `syz.5.539'. [ 122.985183][ T5477] loop3: detected capacity change from 0 to 256 [ 123.061954][ T5472] EXT4-fs (loop1): orphan cleanup on readonly fs [ 123.206113][ T5472] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.537: EA inode hash validation failed [ 123.393585][ T5472] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.537: corrupted inode contents [ 123.482610][ T5472] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.492193][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 123.507845][ C0] EXT4-fs (loop1): initial error at time 1777256748: ext4_do_update_inode:5690: inode 15 [ 123.517740][ C0] EXT4-fs (loop1): last error at time 1777256748: ext4_do_update_inode:5690: inode 15 [ 123.539907][ T5472] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #15: comm syz.1.537: mark_inode_dirty error [ 123.579853][ T5472] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.646433][ T5472] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.537: corrupted inode contents [ 123.671026][ T5472] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.671424][ T5472] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.537: mark_inode_dirty error [ 123.695006][ T5472] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.696726][ T5472] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.537: mark inode dirty (error -117) [ 123.726650][ T5472] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 123.730929][ T5472] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 123.769308][ T5489] loop5: detected capacity change from 0 to 512 [ 123.780004][ T5472] EXT4-fs (loop1): 1 orphan inode deleted [ 123.785136][ T5487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.542'. [ 123.792065][ T5472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 123.893523][ T5472] netlink: 96 bytes leftover after parsing attributes in process `syz.1.537'. [ 123.981643][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.991375][ T5492] bridge_slave_0: entered promiscuous mode [ 124.033810][ T5491] bridge_slave_0: left promiscuous mode [ 124.069041][ T5497] loop1: detected capacity change from 0 to 512 [ 124.082644][ T5497] EXT4-fs: Ignoring removed nobh option [ 124.092231][ T5495] loop5: detected capacity change from 0 to 512 [ 124.106387][ T5495] EXT4-fs: Ignoring removed nobh option [ 124.118365][ T5495] EXT4-fs (loop5): orphan cleanup on readonly fs [ 124.130400][ T5495] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.547: EA inode hash validation failed [ 124.133981][ T5497] EXT4-fs (loop1): orphan cleanup on readonly fs [ 124.147066][ T5495] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.547: corrupted inode contents [ 124.166123][ T5495] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.172600][ T5495] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #15: comm syz.5.547: mark_inode_dirty error [ 124.182186][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 124.182208][ C1] EXT4-fs (loop5): initial error at time 1777256749: ext4_do_update_inode:5690: inode 15 [ 124.182263][ C1] EXT4-fs (loop5): last error at time 1777256749: ext4_do_update_inode:5690: inode 15 [ 124.187104][ T5497] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.548: EA inode hash validation failed [ 124.242692][ T5497] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.548: corrupted inode contents [ 124.256532][ T5497] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.259006][ T5497] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #15: comm syz.1.548: mark_inode_dirty error [ 124.268955][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 124.269016][ C1] EXT4-fs (loop1): initial error at time 1777256749: ext4_do_update_inode:5690: inode 15 [ 124.269293][ C1] EXT4-fs (loop1): last error at time 1777256749: ext4_do_update_inode:5690: inode 15 [ 124.276506][ T5495] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.283131][ T5501] loop4: detected capacity change from 0 to 128 [ 124.284827][ T5497] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.403349][ T5497] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.548: corrupted inode contents [ 124.434002][ T5495] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.547: corrupted inode contents [ 124.450775][ T5497] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 124.451285][ T5495] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.547: mark_inode_dirty error [ 124.481534][ T5497] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3001: inode #15: comm syz.1.548: mark_inode_dirty error [ 124.493417][ T5495] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.547: mark inode dirty (error -117) [ 124.512157][ T5495] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 124.512598][ T5497] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3004: inode #15: comm syz.1.548: mark inode dirty (error -117) [ 124.522476][ T5495] EXT4-fs (loop5): 1 orphan inode deleted [ 124.522930][ T5495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 124.562410][ T5497] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 124.571996][ T5497] EXT4-fs (loop1): 1 orphan inode deleted [ 124.586467][ T5497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 124.621594][ T5495] netlink: 96 bytes leftover after parsing attributes in process `syz.5.547'. [ 124.707748][ T5497] netlink: 96 bytes leftover after parsing attributes in process `syz.1.548'. [ 125.093615][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.103597][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.202276][ T5515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.553'. [ 125.224904][ T5516] loop4: detected capacity change from 0 to 1024 [ 125.252849][ T5516] EXT4-fs: Ignoring removed orlov option [ 125.281028][ T5516] EXT4-fs: Ignoring removed nobh option [ 125.304605][ T5516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.513595][ T1038] IPVS: starting estimator thread 0... [ 125.607943][ T5528] loop3: detected capacity change from 0 to 512 [ 125.632380][ T5534] IPVS: using max 2352 ests per chain, 117600 per kthread [ 125.787011][ T5528] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 125.901301][ T5528] EXT4-fs (loop3): orphan file too big: 4294967295 [ 125.915723][ T5528] EXT4-fs (loop3): mount failed [ 126.072586][ T3374] IPVS: starting estimator thread 0... [ 126.172231][ T5539] IPVS: using max 1920 ests per chain, 96000 per kthread [ 126.408292][ T5519] syz.3.557 (5519) used greatest stack depth: 8600 bytes left [ 126.473460][ T5551] FAULT_INJECTION: forcing a failure. [ 126.473460][ T5551] name failslab, interval 1, probability 0, space 0, times 0 [ 126.497853][ T5551] CPU: 1 UID: 0 PID: 5551 Comm: syz.3.562 Tainted: G W syzkaller #0 PREEMPT(full) [ 126.497936][ T5551] Tainted: [W]=WARN [ 126.498011][ T5551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.498033][ T5551] Call Trace: [ 126.498069][ T5551] [ 126.498077][ T5551] __dump_stack+0x1d/0x30 [ 126.498120][ T5551] dump_stack_lvl+0x95/0xd0 [ 126.498148][ T5551] dump_stack+0x15/0x1b [ 126.498174][ T5551] should_fail_ex+0x263/0x280 [ 126.498234][ T5551] should_failslab+0x8c/0xb0 [ 126.498274][ T5551] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 126.498343][ T5551] ? __alloc_skb+0x2d6/0x690 [ 126.498449][ T5551] __alloc_skb+0x2d6/0x690 [ 126.498490][ T5551] ? __alloc_skb+0x200/0x690 [ 126.498531][ T5551] netlink_alloc_large_skb+0xbf/0xf0 [ 126.498567][ T5551] netlink_sendmsg+0x40c/0x6f0 [ 126.498604][ T5551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 126.498850][ T5551] ____sys_sendmsg+0x563/0x5b0 [ 126.498878][ T5551] ___sys_sendmsg+0x195/0x1e0 [ 126.498913][ T5551] __x64_sys_sendmsg+0xd4/0x160 [ 126.498941][ T5551] x64_sys_call+0x194c/0x3020 [ 126.499090][ T5551] do_syscall_64+0x12c/0x3b0 [ 126.499123][ T5551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.499228][ T5551] RIP: 0033:0x7f65205dcdd9 [ 126.499246][ T5551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.499268][ T5551] RSP: 002b:00007f651f037028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.499294][ T5551] RAX: ffffffffffffffda RBX: 00007f6520855fa0 RCX: 00007f65205dcdd9 [ 126.499314][ T5551] RDX: 0000000000000880 RSI: 0000200000000900 RDI: 0000000000000003 [ 126.499331][ T5551] RBP: 00007f651f037090 R08: 0000000000000000 R09: 0000000000000000 [ 126.499348][ T5551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.499431][ T5551] R13: 00007f6520856038 R14: 00007f6520855fa0 R15: 00007ffe6a555098 [ 126.499459][ T5551] [ 126.804105][ T5557] EXT4-fs: Ignoring removed nobh option [ 126.829950][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.852922][ T5557] EXT4-fs (loop3): orphan cleanup on readonly fs [ 126.860264][ T5557] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.564: EA inode hash validation failed [ 126.873001][ T5557] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.564: corrupted inode contents [ 126.885240][ T5557] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #15: comm syz.3.564: mark_inode_dirty error [ 126.909252][ T5557] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #15: comm syz.3.564: corrupted inode contents [ 126.928004][ T5557] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.564: mark_inode_dirty error [ 126.942373][ C1] EXT4-fs (loop3): error count since last fsck: 4 [ 126.948968][ C1] EXT4-fs (loop3): initial error at time 1777256752: ext4_do_update_inode:5690: inode 15 [ 126.958849][ C1] EXT4-fs (loop3): last error at time 1777256752: ext4_xattr_delete_inode:3001: inode 15 [ 127.018503][ T5557] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.564: mark inode dirty (error -117) [ 127.048946][ T5562] set_capacity_and_notify: 2 callbacks suppressed [ 127.048967][ T5562] loop4: detected capacity change from 0 to 512 [ 127.072707][ T5562] EXT4-fs: Ignoring removed nobh option [ 127.210348][ T5562] EXT4-fs (loop4): orphan cleanup on readonly fs [ 127.218739][ T5562] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.566: EA inode hash validation failed [ 127.236394][ T5562] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.566: corrupted inode contents [ 128.133855][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 128.133916][ T28] audit: type=1400 audit(1777256752.754:1418): avc: denied { kexec_image_load } for pid=5565 comm="syz.1.567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 128.199123][ T5557] EXT4-fs warning (device loop3): ext4_evict_inode:287: xattr delete (err -117) [ 128.208433][ T5557] EXT4-fs (loop3): 1 orphan inode deleted [ 128.214672][ T5557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 128.238275][ T5562] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #15: comm syz.4.566: mark_inode_dirty error [ 128.274539][ C1] EXT4-fs (loop4): error count since last fsck: 2 [ 128.283238][ C1] EXT4-fs (loop4): initial error at time 1777256753: ext4_do_update_inode:5690: inode 15 [ 128.293141][ C1] EXT4-fs (loop4): last error at time 1777256753: ext4_dirty_inode:6587: inode 15 [ 129.350782][ T5562] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #15: comm syz.4.566: corrupted inode contents [ 129.369224][ T5556] netlink: 96 bytes leftover after parsing attributes in process `syz.3.564'. [ 129.557474][ T5562] fserror_report: 12 callbacks suppressed [ 129.557577][ T5562] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.595539][ T5562] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.566: mark_inode_dirty error [ 129.627464][ T5562] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.628532][ T5562] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.566: mark inode dirty (error -117) [ 129.705851][ T5562] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.709148][ T5562] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 129.732528][ T5562] EXT4-fs (loop4): 1 orphan inode deleted [ 129.741647][ T5562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 129.759985][ T5562] netlink: 96 bytes leftover after parsing attributes in process `syz.4.566'. [ 129.769831][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.791131][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.825408][ T5585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 129.958422][ T5588] loop3: detected capacity change from 0 to 1024 [ 129.980480][ T5588] EXT4-fs: Ignoring removed orlov option [ 129.986944][ T5588] EXT4-fs: Ignoring removed nobh option [ 130.960362][ T5588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.549122][ T5594] loop5: detected capacity change from 0 to 1024 [ 132.064215][ T5594] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (50832!=20869) [ 132.080545][ T5594] EXT4-fs error (device loop5): ext4_get_journal_inode:5896: comm syz.5.573: inode #1: comm syz.5.573: iget: illegal inode # [ 132.094866][ T5594] loop5: lost filesystem error report for type 5 error -117 [ 132.102184][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 132.115982][ C0] EXT4-fs (loop5): initial error at time 1777256757: ext4_get_journal_inode:5896 [ 132.125157][ C0] EXT4-fs (loop5): last error at time 1777256757: ext4_get_journal_inode:5896 [ 132.373191][ T5594] EXT4-fs (loop5): no journal found [ 132.380021][ T5594] EXT4-fs (loop5): can't get journal size [ 133.034421][ T5594] EXT4-fs (loop5): failed to initialize system zone (-22) [ 133.043329][ T5594] EXT4-fs (loop5): mount failed [ 134.019682][ T28] audit: type=1400 audit(1777256759.454:1419): avc: denied { read write } for pid=5608 comm="syz.4.577" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.145148][ T5606] VFS: Mount too revealing [ 134.327036][ T28] audit: type=1400 audit(1777256759.754:1420): avc: denied { open } for pid=5608 comm="syz.4.577" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 134.366753][ T28] audit: type=1400 audit(1777256759.804:1421): avc: denied { read } for pid=5608 comm="syz.4.577" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 134.661976][ T28] audit: type=1400 audit(1777256759.804:1422): avc: denied { open } for pid=5608 comm="syz.4.577" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 135.997339][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.218132][ T28] audit: type=1400 audit(1777256761.654:1423): avc: denied { setattr } for pid=5634 comm="syz.3.584" name="NETLINK" dev="sockfs" ino=12793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.311681][ T28] audit: type=1400 audit(1777256761.714:1424): avc: denied { mounton } for pid=5636 comm="syz.1.586" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 136.463915][ T5637] 9pnet_fd: p9_fd_create_tcp (5637): problem connecting socket to 127.0.0.1 [ 136.536483][ T5650] sctp: [Deprecated]: syz.1.590 (pid 5650) Use of int in max_burst socket option. [ 136.536483][ T5650] Use struct sctp_assoc_value instead [ 137.450456][ T5655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.591'. [ 138.182435][ T5651] netlink: 16 bytes leftover after parsing attributes in process `syz.3.588'. [ 139.083182][ T5670] netlink: 436 bytes leftover after parsing attributes in process `syz.2.593'. [ 139.108563][ T5670] tmpfs: Bad value for 'size' [ 139.270329][ T5668] loop4: detected capacity change from 0 to 1024 [ 139.332156][ T5668] EXT4-fs: Ignoring removed orlov option [ 139.338039][ T5668] EXT4-fs: Ignoring removed nobh option [ 139.446143][ T5674] loop3: detected capacity change from 0 to 512 [ 139.514045][ T5668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.731151][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.881559][ T28] audit: type=1400 audit(1777256766.304:1425): avc: denied { mount } for pid=5705 comm="syz.2.605" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 140.908549][ T5709] loop1: detected capacity change from 0 to 128 [ 140.934763][ T5709] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 141.066250][ T5727] loop5: detected capacity change from 0 to 512 [ 141.175065][ T28] audit: type=1400 audit(1777256766.614:1426): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 141.215143][ T5736] loop5: detected capacity change from 0 to 512 [ 141.231314][ T5736] EXT4-fs: Ignoring removed nobh option [ 141.251189][ T5738] loop1: detected capacity change from 0 to 1024 [ 141.260074][ T5736] EXT4-fs (loop5): orphan cleanup on readonly fs [ 141.263539][ T5738] EXT4-fs: Ignoring removed orlov option [ 141.274322][ T5736] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.612: EA inode hash validation failed [ 141.287169][ T5736] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.612: corrupted inode contents [ 141.291992][ T5738] EXT4-fs: Ignoring removed nobh option [ 141.310593][ T28] audit: type=1400 audit(1777256766.734:1427): avc: denied { read append } for pid=5719 comm="syz.3.607" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.310677][ T5736] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.338274][ T28] audit: type=1400 audit(1777256766.744:1428): avc: denied { open } for pid=5719 comm="syz.3.607" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 141.347723][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 141.347740][ C0] EXT4-fs (loop5): initial error at time 1777256766: ext4_do_update_inode:5690: inode 15 [ 141.347769][ C0] EXT4-fs (loop5): last error at time 1777256766: ext4_do_update_inode:5690: inode 15 [ 141.383164][ T5736] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #15: comm syz.5.612: mark_inode_dirty error [ 141.387633][ T28] audit: type=1400 audit(1777256766.774:1429): avc: denied { write } for pid=5719 comm="syz.3.607" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 141.417468][ T5736] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.432363][ T28] audit: type=1400 audit(1777256766.834:1430): avc: denied { map } for pid=5719 comm="syz.3.607" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 141.445439][ T5736] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.612: corrupted inode contents [ 141.477358][ T5736] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.477566][ T5736] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.612: mark_inode_dirty error [ 141.508485][ T5738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.513951][ T5736] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.526783][ T5736] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.612: mark inode dirty (error -117) [ 141.553890][ T5736] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 141.562293][ T5736] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 141.593712][ T5736] EXT4-fs (loop5): 1 orphan inode deleted [ 141.609202][ T5736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 141.648985][ T5736] netlink: 96 bytes leftover after parsing attributes in process `syz.5.612'. [ 141.688435][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.779012][ T28] audit: type=1400 audit(1777256767.214:1431): avc: denied { connect } for pid=5755 comm="syz.5.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 142.010651][ T28] audit: type=1400 audit(1777256767.444:1432): avc: denied { mount } for pid=5758 comm="syz.3.619" name="/" dev="rpc_pipefs" ino=13341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 142.012655][ T5763] loop5: detected capacity change from 0 to 512 [ 142.077678][ T5763] EXT4-fs: Ignoring removed nobh option [ 142.087840][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.116387][ T5763] EXT4-fs (loop5): orphan cleanup on readonly fs [ 142.130500][ T5777] loop4: detected capacity change from 0 to 512 [ 142.140118][ T28] audit: type=1326 audit(1777256767.574:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098739cdd9 code=0x7ffc0000 [ 142.172642][ T28] audit: type=1326 audit(1777256767.574:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5775 comm="syz.1.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f098739cdd9 code=0x7ffc0000 [ 142.196075][ T5763] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.621: EA inode hash validation failed [ 142.248559][ T5763] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.621: corrupted inode contents [ 142.272064][ T5763] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.275225][ T5763] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #15: comm syz.5.621: mark_inode_dirty error [ 142.296865][ T5763] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.313878][ T5763] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #15: comm syz.5.621: corrupted inode contents [ 142.324552][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 142.324603][ C1] EXT4-fs (loop5): initial error at time 1777256767: ext4_do_update_inode:5690: inode 15 [ 142.324864][ C1] EXT4-fs (loop5): last error at time 1777256767: ext4_dirty_inode:6587: inode 15 [ 142.385270][ T5763] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.389116][ T5763] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3001: inode #15: comm syz.5.621: mark_inode_dirty error [ 142.410199][ T5763] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.410731][ T5763] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3004: inode #15: comm syz.5.621: mark inode dirty (error -117) [ 142.433097][ T5763] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 142.434452][ T5763] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 142.464823][ T5763] EXT4-fs (loop5): 1 orphan inode deleted [ 142.471184][ T5763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 142.492579][ T5763] netlink: 96 bytes leftover after parsing attributes in process `syz.5.621'. [ 142.522426][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.680202][ T5803] loop3: detected capacity change from 0 to 128 [ 142.792801][ T5806] loop3: detected capacity change from 0 to 1024 [ 142.815004][ T5806] EXT4-fs: Ignoring removed orlov option [ 142.824188][ T5806] EXT4-fs: Ignoring removed nobh option [ 142.859076][ T5806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.295790][ T5819] netlink: 16 bytes leftover after parsing attributes in process `syz.5.634'. [ 143.765015][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.148077][ T5843] netlink: 132 bytes leftover after parsing attributes in process `syz.4.645'. [ 144.184515][ T5849] EXT4-fs: Ignoring removed orlov option [ 144.190422][ T5849] EXT4-fs: Ignoring removed nobh option [ 144.244377][ T5849] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.269912][ T5857] tipc: Started in network mode [ 144.275460][ T5857] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 144.283306][ T5857] tipc: Enabled bearer , priority 10 [ 144.291220][ T5857] netlink: 'syz.1.638': attribute type 1 has an invalid length. [ 144.322952][ T5857] 8021q: adding VLAN 0 to HW filter on device bond2 [ 144.378482][ T5857] bond2: (slave veth3): Enslaving as an active interface with a down link [ 144.422030][ T5857] bond2: (slave dummy0): making interface the new active one [ 144.436312][ T5861] FAULT_INJECTION: forcing a failure. [ 144.436312][ T5861] name failslab, interval 1, probability 0, space 0, times 0 [ 144.451913][ T5862] netlink: 14 bytes leftover after parsing attributes in process `syz.1.638'. [ 144.467922][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: syz.4.651 Tainted: G W syzkaller #0 PREEMPT(full) [ 144.467963][ T5861] Tainted: [W]=WARN [ 144.467973][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 144.467986][ T5861] Call Trace: [ 144.467993][ T5861] [ 144.468070][ T5861] __dump_stack+0x1d/0x30 [ 144.468165][ T5861] dump_stack_lvl+0x95/0xd0 [ 144.468187][ T5861] dump_stack+0x15/0x1b [ 144.468212][ T5861] should_fail_ex+0x263/0x280 [ 144.468264][ T5861] should_failslab+0x8c/0xb0 [ 144.468304][ T5861] kmem_cache_alloc_noprof+0x66/0x3f0 [ 144.468345][ T5861] ? skb_clone+0x151/0x1f0 [ 144.468368][ T5861] skb_clone+0x151/0x1f0 [ 144.468401][ T5861] __netlink_deliver_tap+0x2c9/0x500 [ 144.468436][ T5861] netlink_unicast+0x653/0x680 [ 144.468506][ T5861] netlink_sendmsg+0x5c8/0x6f0 [ 144.468579][ T5861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 144.468607][ T5861] ____sys_sendmsg+0x563/0x5b0 [ 144.468678][ T5861] ___sys_sendmsg+0x195/0x1e0 [ 144.468742][ T5861] __x64_sys_sendmsg+0xd4/0x160 [ 144.468769][ T5861] x64_sys_call+0x194c/0x3020 [ 144.468833][ T5861] do_syscall_64+0x12c/0x3b0 [ 144.468937][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.468962][ T5861] RIP: 0033:0x7f335695cdd9 [ 144.468977][ T5861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.468996][ T5861] RSP: 002b:00007f33553af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 144.469016][ T5861] RAX: ffffffffffffffda RBX: 00007f3356bd5fa0 RCX: 00007f335695cdd9 [ 144.469066][ T5861] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 144.469082][ T5861] RBP: 00007f33553af090 R08: 0000000000000000 R09: 0000000000000000 [ 144.469095][ T5861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.469107][ T5861] R13: 00007f3356bd6038 R14: 00007f3356bd5fa0 R15: 00007fff1fbda178 [ 144.469132][ T5861] [ 144.469605][ T5857] dummy0: entered promiscuous mode [ 144.673888][ T5857] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 144.695753][ T5862] bond2: (slave dummy0): Releasing active interface [ 144.703104][ T5862] dummy0 (unregistering): left promiscuous mode [ 144.734968][ T5865] set_capacity_and_notify: 3 callbacks suppressed [ 144.735028][ T5865] loop4: detected capacity change from 0 to 512 [ 144.945982][ T5876] loop4: detected capacity change from 0 to 512 [ 144.975684][ T5876] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.656: inode has both inline data and extents flags [ 145.020621][ T5876] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.656: couldn't read orphan inode 15 (err -117) [ 145.032512][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 145.032538][ C0] EXT4-fs (loop4): initial error at time 1777256770: ext4_orphan_get:1397: inode 15 [ 145.032567][ C0] EXT4-fs (loop4): last error at time 1777256770: ext4_orphan_get:1397: inode 15 [ 145.065357][ T5876] loop4: lost filesystem error report for type 5 error -117 [ 145.066024][ T5876] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.091360][ T5876] EXT4-fs error (device loop4): __ext4_add_entry:2412: inode #2: comm syz.4.656: Directory hole found for htree leaf block 0 [ 145.128267][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.134051][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 145.175985][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.224176][ T5885] capability: warning: `syz.1.659' uses 32-bit capabilities (legacy support in use) [ 145.273549][ T5887] loop4: detected capacity change from 0 to 512 [ 145.285855][ T5889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.662'. [ 145.332343][ T3374] tipc: Node number set to 10070698 [ 146.493825][ T5906] loop3: detected capacity change from 0 to 512 [ 146.685468][ T5906] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 147.495858][ T5906] EXT4-fs (loop3): orphan cleanup on readonly fs [ 147.517079][ T5906] __quota_error: 28 callbacks suppressed [ 147.517099][ T5906] Quota error (device loop3): v2_read_file_info: Block with free entry 4294967071 out of range (1, 6). [ 147.666146][ T5906] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 148.541301][ T5906] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 148.563713][ T5914] FAULT_INJECTION: forcing a failure. [ 148.563713][ T5914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.662863][ T5906] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.665: bg 0: block 15: invalid block bitmap [ 148.675290][ T5906] loop3: lost filesystem error report for type 5 error -117 [ 148.675443][ T5906] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 148.682803][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 148.682826][ C0] EXT4-fs (loop3): initial error at time 1777256774: ext4_validate_block_bitmap:432 [ 148.682858][ C0] EXT4-fs (loop3): last error at time 1777256774: ext4_validate_block_bitmap:432 [ 148.945682][ T5914] CPU: 0 UID: 0 PID: 5914 Comm: syz.4.668 Tainted: G W syzkaller #0 PREEMPT(full) [ 148.945724][ T5914] Tainted: [W]=WARN [ 148.945733][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.945750][ T5914] Call Trace: [ 148.945835][ T5914] [ 148.945845][ T5914] __dump_stack+0x1d/0x30 [ 148.945875][ T5914] dump_stack_lvl+0x95/0xd0 [ 148.945897][ T5914] dump_stack+0x15/0x1b [ 148.945916][ T5914] should_fail_ex+0x263/0x280 [ 148.945985][ T5914] should_fail+0xb/0x20 [ 148.946017][ T5914] should_fail_usercopy+0x1a/0x20 [ 148.946109][ T5914] _copy_from_user+0x1c/0xb0 [ 148.946222][ T5914] ___sys_sendmsg+0xc1/0x1e0 [ 148.946267][ T5914] __x64_sys_sendmsg+0xd4/0x160 [ 148.946296][ T5914] x64_sys_call+0x194c/0x3020 [ 148.946378][ T5914] do_syscall_64+0x12c/0x3b0 [ 148.946483][ T5914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.946585][ T5914] RIP: 0033:0x7f335695cdd9 [ 148.946605][ T5914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.946628][ T5914] RSP: 002b:00007f33553af028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.946725][ T5914] RAX: ffffffffffffffda RBX: 00007f3356bd5fa0 RCX: 00007f335695cdd9 [ 148.946744][ T5914] RDX: 0000000000040000 RSI: 0000200000000580 RDI: 0000000000000005 [ 148.946762][ T5914] RBP: 00007f33553af090 R08: 0000000000000000 R09: 0000000000000000 [ 148.946779][ T5914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.946795][ T5914] R13: 00007f3356bd6038 R14: 00007f3356bd5fa0 R15: 00007fff1fbda178 [ 148.946864][ T5914] [ 149.166431][ T5906] loop3: lost filesystem error report for type 5 error -117 [ 149.189318][ T5906] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #16: comm syz.3.665: data will be lost [ 149.207942][ T5906] EXT4-fs (loop3): 1 truncate cleaned up [ 149.215208][ T5906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 149.266628][ T5920] loop1: detected capacity change from 0 to 1024 [ 149.273519][ T5920] EXT4-fs: Ignoring removed orlov option [ 149.290529][ T5920] EXT4-fs: Ignoring removed nobh option [ 149.301510][ T28] audit: type=1400 audit(1777256774.734:1463): avc: denied { bind } for pid=5923 comm="syz.4.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.361803][ T28] audit: type=1400 audit(1777256774.794:1464): avc: denied { create } for pid=5932 comm="syz.5.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.362954][ T5920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.413253][ T5933] loop5: detected capacity change from 0 to 512 [ 149.426050][ T28] audit: type=1400 audit(1777256774.864:1465): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 149.447430][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.464265][ T5933] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 149.486278][ T5933] EXT4-fs (loop5): orphan cleanup on readonly fs [ 149.493121][ T5933] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:517: comm syz.5.674: Block bitmap for bg 0 marked uninitialized [ 149.509646][ T5933] loop5: lost filesystem error report for type 5 error -117 [ 149.510672][ T5933] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 149.518027][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 149.518043][ C1] EXT4-fs (loop5): initial error at time 1777256774: ext4_read_block_bitmap_nowait:517 [ 149.518078][ C1] EXT4-fs (loop5): last error at time 1777256774: ext4_read_block_bitmap_nowait:517 [ 149.552537][ T5933] loop5: lost filesystem error report for type 5 error -117 [ 149.553638][ T5933] EXT4-fs (loop5): 1 orphan inode deleted [ 149.571628][ T5933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 149.584346][ T5933] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 149.594508][ T5933] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 149.603310][ T5933] FAULT_INJECTION: forcing a failure. [ 149.603310][ T5933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 149.616482][ T5933] CPU: 1 UID: 0 PID: 5933 Comm: syz.5.674 Tainted: G W syzkaller #0 PREEMPT(full) [ 149.616540][ T5933] Tainted: [W]=WARN [ 149.616549][ T5933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.616566][ T5933] Call Trace: [ 149.616574][ T5933] [ 149.616583][ T5933] __dump_stack+0x1d/0x30 [ 149.616610][ T5933] dump_stack_lvl+0x95/0xd0 [ 149.616635][ T5933] dump_stack+0x15/0x1b [ 149.616715][ T5933] should_fail_ex+0x263/0x280 [ 149.616749][ T5933] should_fail+0xb/0x20 [ 149.616829][ T5933] should_fail_usercopy+0x1a/0x20 [ 149.616869][ T5933] strncpy_from_user+0x27/0x250 [ 149.616944][ T5933] path_setxattrat+0xeb/0x310 [ 149.616998][ T5933] __x64_sys_lsetxattr+0x71/0x90 [ 149.617027][ T5933] x64_sys_call+0x1300/0x3020 [ 149.617052][ T5933] do_syscall_64+0x12c/0x3b0 [ 149.617143][ T5933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.617192][ T5933] RIP: 0033:0x7f5f1e39cdd9 [ 149.617228][ T5933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.617265][ T5933] RSP: 002b:00007f5f1cdf7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 149.617291][ T5933] RAX: ffffffffffffffda RBX: 00007f5f1e615fa0 RCX: 00007f5f1e39cdd9 [ 149.617310][ T5933] RDX: 00002000000002c0 RSI: 0000200000000240 RDI: 00002000000000c0 [ 149.617328][ T5933] RBP: 00007f5f1cdf7090 R08: 0000000000000000 R09: 0000000000000000 [ 149.617353][ T5933] R10: 0000000000000381 R11: 0000000000000246 R12: 0000000000000001 [ 149.617369][ T5933] R13: 00007f5f1e616038 R14: 00007f5f1e615fa0 R15: 00007ffd1d17f658 [ 149.617459][ T5933] [ 149.833848][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.100272][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.276176][ T28] audit: type=1326 audit(1777256775.714:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 151.283122][ T5967] sctp: [Deprecated]: syz.2.682 (pid 5967) Use of int in max_burst socket option. [ 151.283122][ T5967] Use struct sctp_assoc_value instead [ 151.299227][ T28] audit: type=1326 audit(1777256775.714:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 151.498538][ T28] audit: type=1326 audit(1777256775.714:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 152.323937][ T5971] netlink: 32 bytes leftover after parsing attributes in process `syz.2.683'. [ 152.336149][ T28] audit: type=1326 audit(1777256775.714:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 153.243630][ T5973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.681'. [ 153.349396][ T5975] FAULT_INJECTION: forcing a failure. [ 153.349396][ T5975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.558601][ T28] audit: type=1326 audit(1777256775.734:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 153.582063][ T28] audit: type=1326 audit(1777256775.734:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 153.880398][ T28] audit: type=1326 audit(1777256775.734:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 153.946644][ T5975] CPU: 0 UID: 0 PID: 5975 Comm: syz.1.684 Tainted: G W syzkaller #0 PREEMPT(full) [ 153.946692][ T5975] Tainted: [W]=WARN [ 153.946701][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.946717][ T5975] Call Trace: [ 153.946725][ T5975] [ 153.946733][ T5975] __dump_stack+0x1d/0x30 [ 153.946763][ T5975] dump_stack_lvl+0x95/0xd0 [ 153.946790][ T5975] dump_stack+0x15/0x1b [ 153.946819][ T5975] should_fail_ex+0x263/0x280 [ 153.946847][ T5975] should_fail+0xb/0x20 [ 153.946949][ T5975] should_fail_usercopy+0x1a/0x20 [ 153.947033][ T5975] _copy_from_user+0x1c/0xb0 [ 153.947073][ T5975] ___sys_sendmsg+0xc1/0x1e0 [ 153.947108][ T5975] __x64_sys_sendmsg+0xd4/0x160 [ 153.947138][ T5975] x64_sys_call+0x194c/0x3020 [ 153.947183][ T5975] do_syscall_64+0x12c/0x3b0 [ 153.947212][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.947276][ T5975] RIP: 0033:0x7f098739cdd9 [ 153.947291][ T5975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.947310][ T5975] RSP: 002b:00007f0985df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.947330][ T5975] RAX: ffffffffffffffda RBX: 00007f0987615fa0 RCX: 00007f098739cdd9 [ 153.947345][ T5975] RDX: 00000000040080c0 RSI: 0000200000000240 RDI: 0000000000000004 [ 153.947362][ T5975] RBP: 00007f0985df7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.947442][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.947458][ T5975] R13: 00007f0987616038 R14: 00007f0987615fa0 R15: 00007fff645f6908 [ 153.947483][ T5975] [ 154.118875][ T28] audit: type=1326 audit(1777256775.734:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 154.177269][ T28] audit: type=1326 audit(1777256775.734:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 154.253532][ T28] audit: type=1326 audit(1777256775.864:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 154.303827][ T28] audit: type=1326 audit(1777256775.864:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 154.351477][ T28] audit: type=1326 audit(1777256775.864:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 154.401727][ T28] audit: type=1326 audit(1777256775.914:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 154.448470][ T28] audit: type=1326 audit(1777256775.914:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5956 comm="syz.4.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f335695cdd9 code=0x7ffc0000 [ 154.591527][ T5981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.685'. [ 154.813277][ T6001] netlink: 'syz.5.692': attribute type 1 has an invalid length. [ 154.814459][ T6002] sctp: [Deprecated]: syz.1.693 (pid 6002) Use of int in max_burst socket option. [ 154.814459][ T6002] Use struct sctp_assoc_value instead [ 154.903120][ T6001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.967884][ T6011] loop1: detected capacity change from 0 to 2048 [ 156.640728][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.696'. [ 156.651787][ T6013] netlink: 14 bytes leftover after parsing attributes in process `syz.5.692'. [ 156.706001][ T6014] netlink: 132 bytes leftover after parsing attributes in process `syz.2.696'. [ 156.795340][ T6011] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.906300][ T5994] bond1: (slave veth3): Enslaving as an active interface with a down link [ 156.956705][ T6001] bond1: (slave dummy0): making interface the new active one [ 156.965420][ T6001] dummy0: entered promiscuous mode [ 156.970844][ T6001] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 156.979996][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.698'. [ 157.008721][ T6018] loop4: detected capacity change from 0 to 512 [ 157.113962][ T6018] EXT4-fs: Ignoring removed bh option [ 157.145813][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.155825][ T6018] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 157.165083][ T6013] bond1: (slave dummy0): Releasing active interface [ 157.171861][ T6013] dummy0 (unregistering): left promiscuous mode [ 157.206905][ T6018] EXT4-fs (loop4): 1 truncate cleaned up [ 157.230537][ T6018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.382489][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 157.394738][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.405484][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.486525][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 157.749503][ T6045] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.704'. [ 157.758882][ T6045] netlink: zone id is out of range [ 157.764101][ T6045] netlink: zone id is out of range [ 157.769742][ T6045] netlink: zone id is out of range [ 157.775423][ T6045] netlink: zone id is out of range [ 157.805180][ T6045] netlink: set zone limit has 8 unknown bytes [ 157.815778][ T6045] xt_NFQUEUE: number of total queues is 0 [ 158.514975][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.708'. [ 158.585862][ T6060] loop5: detected capacity change from 0 to 512 [ 158.613019][ T6060] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 158.753702][ T6060] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 158.808080][ T6060] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.710: bg 0: block 248: padding at end of block bitmap is not set [ 158.857858][ T6060] loop5: lost filesystem error report for type 5 error -117 [ 158.858177][ T6060] __quota_error: 61 callbacks suppressed [ 158.858190][ T6060] Quota error (device loop5): write_blk: dquota write failed [ 158.865572][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 158.865593][ C0] EXT4-fs (loop5): last error at time 1777256784: ext4_validate_block_bitmap:441 [ 158.980906][ T6060] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 159.026892][ T6060] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.710: Failed to acquire dquot type 1 [ 159.066235][ T6060] loop5: lost filesystem error report for type 5 error -28 [ 159.066874][ T6060] EXT4-fs (loop5): 1 truncate cleaned up [ 159.128005][ T6060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 159.172312][ T6068] loop3: detected capacity change from 0 to 512 [ 159.181451][ T6060] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 2 index 2 [ 159.208728][ T6060] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 131074 [ 159.260460][ T6060] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.710: Failed to acquire dquot type 1 [ 159.266824][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.710'. [ 159.316176][ T6068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.403170][ T6068] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.421466][ T6060] syz.5.710 (6060) used greatest stack depth: 8184 bytes left [ 159.489269][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 159.505556][ T28] audit: type=1400 audit(1777256784.934:1541): avc: denied { read } for pid=6067 comm="syz.3.711" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.564623][ T6068] EXT4-fs (loop3): shut down requested (1) [ 159.625006][ T28] audit: type=1400 audit(1777256784.934:1542): avc: denied { open } for pid=6067 comm="syz.3.711" path="/144/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.652720][ T6081] netlink: 36 bytes leftover after parsing attributes in process `syz.5.714'. [ 159.714923][ T28] audit: type=1400 audit(1777256785.004:1543): avc: denied { read append open } for pid=6067 comm="syz.3.711" path="/144/file1/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 159.776953][ T28] audit: type=1400 audit(1777256785.004:1544): avc: denied { ioctl } for pid=6067 comm="syz.3.711" path="/144/file1/file1" dev="loop3" ino=15 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 159.887174][ T6085] netlink: 24 bytes leftover after parsing attributes in process `syz.5.715'. [ 159.903866][ T28] audit: type=1400 audit(1777256785.094:1545): avc: denied { read } for pid=2962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 159.926293][ T28] audit: type=1400 audit(1777256785.094:1546): avc: denied { search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.963661][ T6085] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6085 comm=syz.5.715 [ 160.063608][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.080634][ T6092] loop5: detected capacity change from 0 to 1764 [ 160.162617][ T6096] loop4: detected capacity change from 0 to 512 [ 160.900796][ T6124] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 160.908686][ T6124] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 160.977914][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.730'. [ 161.040708][ T6130] loop3: detected capacity change from 0 to 512 [ 161.059775][ T6134] loop5: detected capacity change from 0 to 1024 [ 161.142428][ T6134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.379143][ T6155] loop1: detected capacity change from 0 to 1024 [ 162.390202][ T6155] EXT4-fs: Ignoring removed orlov option [ 162.402767][ T6155] EXT4-fs: Ignoring removed nobh option [ 162.429204][ T6155] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.340997][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.449711][ T6172] loop4: detected capacity change from 0 to 256 [ 163.479384][ T6172] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 163.503735][ T6172] FAT-fs (loop4): Filesystem has been set read-only [ 163.545695][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.736456][ T6186] bridge_slave_0: entered promiscuous mode [ 163.754780][ T6185] bridge_slave_0: left promiscuous mode [ 163.771040][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'. [ 163.779953][ T6200] netlink: 'syz.2.752': attribute type 11 has an invalid length. [ 163.792342][ T6200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.752'. [ 163.793209][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.801480][ T6200] netlink: 'syz.2.752': attribute type 11 has an invalid length. [ 163.822460][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.831196][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.850765][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.343968][ T6210] loop5: detected capacity change from 0 to 512 [ 166.917217][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 166.917236][ T28] audit: type=1400 audit(1777256792.354:1572): avc: denied { ioctl } for pid=6212 comm="syz.3.754" path="socket:[14003]" dev="sockfs" ino=14003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 166.917640][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 166.980612][ T6217] loop5: detected capacity change from 0 to 1024 [ 166.988187][ T6217] EXT4-fs: Ignoring removed orlov option [ 166.997523][ T28] audit: type=1400 audit(1777256792.434:1573): avc: denied { listen } for pid=6214 comm="syz.2.757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 167.002518][ T6217] EXT4-fs: Ignoring removed nobh option [ 167.046721][ T28] audit: type=1400 audit(1777256792.484:1574): avc: denied { connect } for pid=6224 comm="syz.4.760" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 167.072408][ T6217] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.100282][ T28] audit: type=1400 audit(1777256792.484:1575): avc: denied { connect } for pid=6222 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 167.134454][ T28] audit: type=1326 audit(1777256792.484:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6222 comm="syz.3.759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f65205dcdd9 code=0x0 [ 167.154748][ T6232] netlink: 'syz.1.761': attribute type 7 has an invalid length. [ 167.157981][ T28] audit: type=1400 audit(1777256792.574:1577): avc: denied { write } for pid=6231 comm="syz.1.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 167.190691][ T6230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.759'. [ 167.258931][ T6241] loop1: detected capacity change from 0 to 128 [ 167.277849][ T6243] gre0 speed is unknown, defaulting to 1000 [ 167.286009][ T6243] gre0 speed is unknown, defaulting to 1000 [ 167.292750][ T6243] gre0 speed is unknown, defaulting to 1000 [ 167.348709][ T6243] infiniband syz1: set active [ 167.356953][ T6241] syz.1.763: attempt to access beyond end of device [ 167.356953][ T6241] loop1: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 167.370481][ T6243] infiniband syz1: added gre0 [ 167.375662][ T6241] syz.1.763: attempt to access beyond end of device [ 167.375662][ T6241] loop1: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 167.392292][ T6241] syz.1.763: attempt to access beyond end of device [ 167.392292][ T6241] loop1: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 167.411399][ T6243] RDS/IB: syz1: added [ 167.417657][ T6243] smc: adding ib device syz1 with port count 1 [ 167.423003][ T6241] syz.1.763: attempt to access beyond end of device [ 167.423003][ T6241] loop1: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 167.424150][ T6243] smc: ib device syz1 port 1 has no pnetid [ 167.446049][ T6241] syz.1.763: attempt to access beyond end of device [ 167.446049][ T6241] loop1: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 167.463319][ T6241] syz.1.763: attempt to access beyond end of device [ 167.463319][ T6241] loop1: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 167.479031][ T28] audit: type=1400 audit(1777256792.914:1578): avc: denied { map } for pid=6242 comm="syz.4.764" path="socket:[14946]" dev="sockfs" ino=14946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 167.519157][ T12] kworker/u8:0: attempt to access beyond end of device [ 167.519157][ T12] loop1: rw=1, sector=166, nr_sectors = 1 limit=128 [ 167.532578][ T6244] vlan2: left promiscuous mode [ 167.536631][ T12] Buffer I/O error on dev loop1, logical block 166, lost async page write [ 167.537657][ T6244] bridge0: left promiscuous mode [ 167.555253][ T6244] bond1: left promiscuous mode [ 167.573006][ T6244] sit1: left promiscuous mode [ 167.581154][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 167.606220][ T6244] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 167.693698][ T3374] gre0 speed is unknown, defaulting to 1000 [ 167.706250][ T23] gre0 speed is unknown, defaulting to 1000 [ 167.712406][ T6243] gre0 speed is unknown, defaulting to 1000 [ 167.749988][ T6243] gre0 speed is unknown, defaulting to 1000 [ 167.790019][ T6243] gre0 speed is unknown, defaulting to 1000 [ 167.825323][ T6243] gre0 speed is unknown, defaulting to 1000 [ 167.860247][ T6243] gre0 speed is unknown, defaulting to 1000 [ 167.902458][ T6243] gre0 speed is unknown, defaulting to 1000 [ 167.922720][ T6259] loop3: detected capacity change from 0 to 512 [ 167.942841][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.998876][ T6257] netlink: 96 bytes leftover after parsing attributes in process `syz.2.766'. [ 168.041097][ T28] audit: type=1326 audit(1777256793.474:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.3.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65205dcdd9 code=0x7ffc0000 [ 168.124319][ T28] audit: type=1326 audit(1777256793.474:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.3.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65205dcdd9 code=0x7ffc0000 [ 168.170272][ T28] audit: type=1326 audit(1777256793.474:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6262 comm="syz.3.769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65205dcdd9 code=0x7ffc0000 [ 168.212576][ T6272] loop4: detected capacity change from 0 to 512 [ 168.219343][ T6272] EXT4-fs: Ignoring removed oldalloc option [ 168.225565][ T6272] EXT4-fs: Ignoring removed nobh option [ 168.238773][ T6272] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #11: comm syz.4.773: iget: bad extra_isize 90 (inode size 256) [ 168.261868][ T6272] fserror_report: 1 callbacks suppressed [ 168.261884][ T6272] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 168.268177][ T6272] EXT4-fs (loop4): Remounting filesystem read-only [ 168.277433][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 168.277453][ C0] EXT4-fs (loop4): initial error at time 1777256793: ext4_xattr_inode_iget:441: inode 11 [ 168.277493][ C0] EXT4-fs (loop4): last error at time 1777256793: ext4_xattr_inode_iget:441: inode 11 [ 168.459147][ T6272] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 168.472557][ T6272] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 168.482842][ T6272] EXT4-fs (loop4): 1 orphan inode deleted [ 168.489610][ T6272] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.563318][ T6280] loop3: detected capacity change from 0 to 764 [ 168.583771][ T6280] Symlink component flag not implemented [ 168.589514][ T6280] Symlink component flag not implemented [ 168.621118][ T6280] gre0 speed is unknown, defaulting to 1000 [ 171.133879][ T6305] random: crng reseeded on system resumption [ 171.401392][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.491451][ T6308] loop3: detected capacity change from 0 to 512 [ 171.700102][ T6321] sctp: [Deprecated]: syz.4.785 (pid 6321) Use of int in max_burst socket option. [ 171.700102][ T6321] Use struct sctp_assoc_value instead [ 171.822261][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.782'. [ 172.005047][ T6325] loop3: detected capacity change from 0 to 1024 [ 172.073321][ T28] kauditd_printk_skb: 166 callbacks suppressed [ 172.073335][ T28] audit: type=1400 audit(1777256797.504:1748): avc: denied { read } for pid=6318 comm="syz.3.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 172.189998][ T6325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.360920][ T6325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.436143][ T6338] loop5: detected capacity change from 0 to 764 [ 172.456601][ T6338] Symlink component flag not implemented [ 172.481239][ T6338] Symlink component flag not implemented (116) [ 172.531873][ T6348] loop3: detected capacity change from 0 to 512 [ 172.664293][ T6351] netlink: 'syz.3.795': attribute type 4 has an invalid length. [ 172.695349][ T6353] loop5: detected capacity change from 0 to 512 [ 172.720936][ T6355] loop1: detected capacity change from 0 to 512 [ 172.790132][ T6356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.793'. [ 172.954352][ T6355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.015910][ T6355] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.411926][ T6366] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 173.518516][ T6371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.800'. [ 173.804876][ T6366] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 173.925895][ T6378] netlink: 16 bytes leftover after parsing attributes in process `syz.4.802'. [ 174.378363][ T6365] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 174.388047][ T6365] EXT4-fs: Cannot change quota options when quota turned on [ 174.397449][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 174.412286][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.806'. [ 174.574805][ T3292] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 174.616621][ T3292] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 174.668763][ T6402] netlink: 12 bytes leftover after parsing attributes in process `syz.5.813'. [ 174.695497][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.757843][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.825250][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.889186][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.922388][ T6408] loop4: detected capacity change from 0 to 512 [ 174.957420][ T6408] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 175.001482][ T28] audit: type=1400 audit(1777256800.434:1749): avc: denied { read } for pid=3019 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 175.086906][ T6408] EXT4-fs (loop4): 1 truncate cleaned up [ 175.132338][ T6408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.134754][ T6418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.176085][ T28] audit: type=1400 audit(1777256800.604:1750): avc: denied { remove_name } for pid=6407 comm="syz.4.814" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.207270][ T6418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.223503][ T28] audit: type=1400 audit(1777256800.614:1751): avc: denied { rename } for pid=6407 comm="syz.4.814" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.254720][ T28] audit: type=1400 audit(1777256800.614:1752): avc: denied { unlink } for pid=6407 comm="syz.4.814" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.280762][ T49] bond0 (unregistering): Released all slaves [ 175.296857][ T49] bond1 (unregistering): Released all slaves [ 175.300399][ T28] audit: type=1400 audit(1777256800.614:1753): avc: denied { rename } for pid=6407 comm="syz.4.814" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 175.349671][ T28] audit: type=1400 audit(1777256800.614:1754): avc: denied { rmdir } for pid=6407 comm="syz.4.814" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.377399][ T3292] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.389418][ T49] bond2 (unregistering): (slave veth3): Releasing active interface [ 175.407443][ T49] bond2 (unregistering): Released all slaves [ 175.425218][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.818'. [ 175.442435][ T6422] netlink: 'syz.4.814': attribute type 29 has an invalid length. [ 175.470520][ T49] tipc: Disabling bearer [ 175.476417][ T6408] netlink: 'syz.4.814': attribute type 29 has an invalid length. [ 175.489071][ T28] audit: type=1400 audit(1777256800.914:1755): avc: denied { search } for pid=3019 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.511233][ T49] tipc: Left network mode [ 175.531433][ T28] audit: type=1400 audit(1777256800.914:1756): avc: denied { search } for pid=3019 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.658021][ T28] audit: type=1400 audit(1777256800.914:1757): avc: denied { search } for pid=3019 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.681431][ T6408] tipc: Started in network mode [ 175.686333][ T6408] tipc: Node identity 4, cluster identity 4711 [ 175.817244][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.2.821'. [ 175.852900][ T6408] tipc: Node number set to 4 [ 175.876357][ T6434] loop5: detected capacity change from 0 to 512 [ 176.048704][ T6434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.189348][ T6421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.208103][ T6434] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.259813][ T49] hsr_slave_0: left promiscuous mode [ 176.281752][ T49] hsr_slave_1: left promiscuous mode [ 176.288460][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.299443][ T6421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.378526][ T49] veth1_macvtap: left promiscuous mode [ 176.425655][ T49] veth0_macvtap: left promiscuous mode [ 176.435490][ T49] veth1_vlan: left promiscuous mode [ 176.440864][ T49] veth0_vlan: left promiscuous mode [ 176.524101][ T6455] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 176.552473][ T6455] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 176.683872][ T6459] loop4: detected capacity change from 0 to 512 [ 176.845436][ T6459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.886364][ T6459] ext4 filesystem being mounted at /171/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.020198][ T6449] EXT4-fs: Remounting file system with no journal so ignoring journalled data option [ 177.029859][ T6449] EXT4-fs: Cannot change quota options when quota turned on [ 177.039485][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.822'. [ 177.115059][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 177.115074][ T28] audit: type=1400 audit(1777256802.554:1769): avc: denied { remove_name } for pid=6468 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=7024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.167528][ T28] audit: type=1400 audit(1777256802.584:1770): avc: denied { unlink } for pid=6468 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=7024 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.213701][ T6414] Set syz1 is full, maxelem 65536 reached [ 177.222992][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 177.269449][ T6428] gre0 speed is unknown, defaulting to 1000 [ 177.341931][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.354379][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.381223][ T28] audit: type=1400 audit(1777256802.814:1771): avc: denied { ioctl } for pid=6476 comm="syz.4.828" path="socket:[16385]" dev="sockfs" ino=16385 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 177.603423][ T6428] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.620924][ T6428] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.634759][ T6428] bridge_slave_0: entered allmulticast mode [ 177.645668][ T6428] bridge_slave_0: entered promiscuous mode [ 177.657687][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 177.669154][ T6428] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.679532][ T6428] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.686871][ T6428] bridge_slave_1: entered allmulticast mode [ 177.693370][ T6428] bridge_slave_1: entered promiscuous mode [ 177.719323][ T6428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.730266][ T6428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.754277][ T6428] team0: Port device team_slave_0 added [ 177.761185][ T6428] team0: Port device team_slave_1 added [ 177.792086][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.811214][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.846459][ T6428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.858137][ T6428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.865453][ T6428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.907844][ T6428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.924020][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.832'. [ 177.947937][ T6518] netlink: 'syz.2.833': attribute type 21 has an invalid length. [ 177.986498][ T6518] netlink: 156 bytes leftover after parsing attributes in process `syz.2.833'. [ 178.011331][ T6518] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 178.021169][ T6428] hsr_slave_0: entered promiscuous mode [ 178.036520][ T6428] hsr_slave_1: entered promiscuous mode [ 178.101188][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 178.205519][ T6428] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 178.219210][ T6428] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 178.230169][ T6428] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 178.248687][ T6428] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 178.256588][ T6428] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 178.336011][ T6428] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 178.375435][ T6428] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 179.071940][ T28] audit: type=1400 audit(1777256804.504:1772): avc: denied { read } for pid=6562 comm="syz.3.839" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 179.095438][ T28] audit: type=1400 audit(1777256804.504:1773): avc: denied { open } for pid=6562 comm="syz.3.839" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 179.184374][ T6428] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.205172][ T3019] 8021q: adding VLAN 0 to HW filter on device eth8 [ 179.218838][ T6556] bridge_slave_0: entered promiscuous mode [ 179.230248][ T6543] bridge_slave_0: left promiscuous mode [ 179.301945][ T6428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.316673][ T6428] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.334407][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.341539][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.381070][ T6586] loop5: detected capacity change from 0 to 512 [ 179.473489][ T28] audit: type=1400 audit(1777256804.814:1774): avc: denied { ioctl } for pid=6585 comm="syz.5.851" path="mnt:[4026532383]" dev="nsfs" ino=4026532383 ioctlcmd=0x940b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 179.508055][ T28] audit: type=1400 audit(1777256804.824:1775): avc: denied { create } for pid=6585 comm="syz.5.851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 179.562724][ T6428] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.573509][ T6428] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.592404][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.599637][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.640504][ T6593] netlink: 60 bytes leftover after parsing attributes in process `syz.5.845'. [ 179.650305][ T6593] netlink: 60 bytes leftover after parsing attributes in process `syz.5.845'. [ 180.398662][ T6614] Process accounting resumed [ 180.419158][ T28] audit: type=1400 audit(1777256805.854:1776): avc: denied { create } for pid=6623 comm="syz.3.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 180.442755][ T6625] netlink: 'syz.4.853': attribute type 2 has an invalid length. [ 180.459730][ T6428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.487557][ T28] audit: type=1400 audit(1777256805.924:1777): avc: denied { create } for pid=6629 comm="syz.5.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 180.585272][ T6630] loop5: detected capacity change from 0 to 512 [ 180.599022][ T6628] netlink: 96 bytes leftover after parsing attributes in process `syz.2.855'. [ 180.667164][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.857'. [ 180.717094][ T6630] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 180.727321][ T6630] System zones: 0-2, 18-18, 34-34 [ 180.795188][ T6653] loop4: detected capacity change from 0 to 512 [ 180.808954][ T6653] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 180.829242][ T6653] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 180.830028][ T6630] EXT4-fs (loop5): 1 orphan inode deleted [ 180.851268][ T30] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 180.860042][ T6653] EXT4-fs (loop4): orphan cleanup on readonly fs [ 180.861992][ T30] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 180.871433][ T6630] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.879086][ T30] loop5: lost filesystem error report for type 5 error -117 [ 180.891850][ T30] EXT4-fs (loop5): Remounting filesystem read-only [ 180.896730][ T6630] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.904630][ T6653] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 180.931778][ T6653] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 180.941124][ T6653] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.861: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 180.959232][ T6653] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 180.959522][ T6653] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.861: couldn't read orphan inode 13 (err -117) [ 180.963804][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.968781][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 180.995866][ C0] EXT4-fs (loop4): last error at time 1777256806: ext4_ext_check_inode:521: inode 13 [ 181.008640][ T6653] loop4: lost filesystem error report for type 5 error -117 [ 181.009500][ T6653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 181.038864][ T6428] veth0_vlan: entered promiscuous mode [ 181.064422][ T6662] loop5: detected capacity change from 0 to 512 [ 181.074322][ T6662] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.862: EA inode hash validation failed [ 181.075086][ T6428] veth1_vlan: entered promiscuous mode [ 181.101389][ T6662] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #11: comm syz.5.862: iget: bad extra_isize 90 (inode size 256) [ 181.115018][ T6662] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 181.116443][ T6662] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.862: error while reading EA inode 11 err=-117 [ 181.125637][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 181.125659][ C0] EXT4-fs (loop5): initial error at time 1777256806: ext4_xattr_inode_iget:441: inode 11 [ 181.125711][ C0] EXT4-fs (loop5): last error at time 1777256806: ext4_xattr_inode_iget:441: inode 11 [ 181.165096][ T6428] veth0_macvtap: entered promiscuous mode [ 181.171495][ T3293] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.172281][ T6662] loop5: lost filesystem error report for type 5 error -117 [ 181.182609][ T6428] veth1_macvtap: entered promiscuous mode [ 181.195924][ T6662] EXT4-fs (loop5): 1 orphan inode deleted [ 181.205032][ T3293] ================================================================== [ 181.206035][ T6662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.213155][ T3293] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 181.213190][ T3293] [ 181.213197][ T3293] read-write to 0xffff888237d277a0 of 8 bytes by task 3019 on cpu 1: [ 181.213218][ T3293] find_get_block_common+0x459/0x870 [ 181.213246][ T3293] bdev_getblk+0x4d/0x3f0 [ 181.213270][ T3293] ext4_getblk+0x1ca/0x530 [ 181.213301][ T3293] ext4_bread_batch+0x5c/0x320 [ 181.213339][ T3293] __ext4_find_entry+0x852/0xdf0 [ 181.213369][ T3293] ext4_lookup+0xcd/0x3a0 [ 181.213395][ T3293] path_openat+0xbf0/0x2050 [ 181.213427][ T3293] do_file_open+0x16c/0x290 [ 181.213458][ T3293] do_sys_openat2+0x94/0x130 [ 181.213485][ T3293] __x64_sys_openat+0xf2/0x120 [ 181.213510][ T3293] x64_sys_call+0x1e39/0x3020 [ 181.213541][ T3293] do_syscall_64+0x12c/0x3b0 [ 181.213564][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.213589][ T3293] [ 181.213596][ T3293] read to 0xffff888237d277a0 of 8 bytes by task 3293 on cpu 0: [ 181.259858][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.262992][ T3293] has_bh_in_lru+0x35/0x1f0 [ 181.263028][ T3293] smp_call_function_many_cond+0x2a7/0xb70 [ 181.263063][ T3293] on_each_cpu_cond_mask+0x3c/0x80 [ 181.263096][ T3293] invalidate_bh_lrus+0x2a/0x30 [ 181.263123][ T3293] blkdev_flush_mapping+0x94/0x1a0 [ 181.263154][ T3293] bdev_release+0x2bf/0x3d0 [ 181.263179][ T3293] blkdev_release+0x15/0x20 [ 181.292838][ T6428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.295607][ T3293] __fput+0x29b/0x630 [ 181.311714][ T60] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.316024][ T3293] ____fput+0x1c/0x30 [ 181.316055][ T3293] task_work_run+0x130/0x1a0 [ 181.316081][ T3293] exit_to_user_mode_loop+0x1f4/0x6f0 [ 181.316106][ T3293] do_syscall_64+0x232/0x3b0 [ 181.316127][ T3293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.316154][ T3293] [ 181.316159][ T3293] value changed: 0x0000000000000000 -> 0xffff8881006df888 [ 181.411615][ T3293] [ 181.413966][ T3293] Reported by Kernel Concurrency Sanitizer on: [ 181.420153][ T3293] CPU: 0 UID: 0 PID: 3293 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 181.431232][ T3293] Tainted: [W]=WARN [ 181.435077][ T3293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.445235][ T3293] ================================================================== [ 181.472692][ T60] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.533241][ T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.542046][ T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.562857][ T3562] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.