last executing test programs: 1.377409672s ago: executing program 2 (id=3064): r0 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x80, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_deladdr={0x5c, 0x15, 0x300, 0x70bd2d, 0x25dfdbfe, {0xa, 0x8, 0x91, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x108}, @IFA_CACHEINFO={0x14, 0x6, {0x80000000, 0x8, 0x6, 0x7}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x5c}}, 0x0) 1.305221779s ago: executing program 2 (id=3065): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000c969f5ca0620f63c766e1d7464e572e11d"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00010000000000000000000000810010330ec2e6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 1.248940234s ago: executing program 2 (id=3070): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x0) 1.213822757s ago: executing program 3 (id=3072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) open(0x0, 0x64842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mount(0x0, &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)='dic\x00\x19\x00\x00\x93.cF\xb9H\x8b\xd5\x9egZ\xcd\xf2\a\xe5\xdf\xcb\b\xd5\xc1&\x8a\x9aA\x95c\x0e\xfc\x93B\xe2\xee\xa6\xb1\xdd\x99O\x1eAy\x12fc=\xd8\xe4\xf3}\x0f\x98\xc5*\xa7\x92\xef\xd26\\Q\x06W\xc6\xe7\xf1\xbe\xc5\xa4\x96\x9e_\x11\xb0N4\xd2\xf5jQ\x16\xb2\x84\xc2\x1dT\x19z\x8e\xd7\xcf\x12\xfd\'\x8b\xd03\xba\xe2\xb1w\x93(\x92V\xaa') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000300)="1dd96be46eb6cd8cf1706d562a66c5"}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000000000000000", @ANYRES32=r6, @ANYBLOB="009b590647000022f600"/20, @ANYRES64, @ANYBLOB="fa902ab93e8928664941c75dde594dd2272ee9607c5faadb81e2bee1ce06f32dc75b3198b16517c117fd5418aae1ce5d7ebb7793a0da18ffc8c6b2a2e20cf7a88b48bbbdef2e3a548013a0dd6eb56e608dc28b03cfd6c361a0ac8295186f8a771b02d0cf74b414a32d87229dd57a6ee5cb9cf8cc99d9bb12fa414ae1ffafc66c7e2c3aa9f396bb31d99725ba594e397752db76ddb54fc8ee59f10864fb32e5076e8296b659ce253578b2c93b379dfebe3d6632d56f10ae", @ANYRESDEC=r4], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b3300000000fdcbdf25150000000800178004000280"], 0x1c}}, 0x80) 1.213138637s ago: executing program 2 (id=3073): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509011f000000009500000000000000181000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="000000e8ff000000b703000000000000850000020c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xce8, 0x7, 0x2, 0x8, 0x17, "1e0f6809ab1db88301deada0c80737acc0263b"}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x110, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffffffff, @empty, 0x9}}, {0x20, 0x2, @in6={0xa, 0x9, 0x5, @empty, 0x101}}}}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5d54e05f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40855}, 0x2400c006) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) openat$pfkey(0xffffff9c, &(0x7f0000000600), 0x490000, 0x0) pwritev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0) 1.198301879s ago: executing program 3 (id=3074): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509011f00000000950000000000000018", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="000000e8ff000000b703000000000000850000020c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$eJzs3U1oHOUbAPBnZrPtv23+pgUFlR6KChVKN0k/tHpKr2Kh0IPgpS6bbQjZZEN2U5uQQ3ovYkFR6aXe9OBR8eBBvHj06kXxLIgGhaYHiUx2N/1Isq61ydbO7wezfT+GPu+bmWey7zBDAsitI9lHGvFMRJxPIobu6huIdueR1n6rK0uV2ytLlSTW1i78mkQSEbdWliqd/ZP2vwciYjkino6Ib4oRx9LNcRsLi1PlWq06164PN6dnhxsLi8cnp8sT1YnqzMmXXzl95tTp0ROjD22u1368/s617167ef3Tzw4vV94vJzEWg+2+u+fxMLV+JsUYu6/91E4E66Ok3wPggRTaeV6MiKdiKArtrAcef2t7I9aAnErkP+RU53tAtv7tbLv5/eOXs60FSBZ3tb21egZa9ybif+trk/2/J/esTLL15sHdHCiPpeWrETEyMLD5/E/a59+DG3kYA2RHfX22daA2H/904/oTW1x/Bjv3Tv+lzvVvddP17078wjbXv/M9xvjzzZ8+2jb+1Yhnt4yfbMRPtoifRsRbPca/8caXZ7brW/s44mhsHb8j6X5/ePjSZK060vrcMsZXRw+/2m3++7eJP9Zl/lnbbI/z/+Lbz59b7hL/xee7H/+t4u+LiHd7jH/o1ievb9eXxR/fZv7d4mdtN3uM/9LYkR963BUAAAAAAAAAAPgH0vVn2ZK0tFFO01Kp9Q7vk7E/rdUbzWOX6vMz461n3g5GMe08aTXUqidZfbT9PG6nfuK++smIOBQR7xX2rddLlXptvN+TBwAAAAAAAAAAAAAAAAAAgEfEgfve//+j0Hr/H8gJf/Ib8kv+Q37dm/9J38YB7D6//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAA74vy5c9m2dntlqZLVxy8vzE/VLx8frzamStPzlVKlPjdbmqjXJ2rVUqU+/Xf/X61enx2Jmfkrw81qozncWFi8OF2fn2lenJwuT1QvVou7MisAAAAAAAAAAAAAAAAAAAD4bxlc35K0FBHpejlNS6WI/0fEwSgmlyZr1ZGIeCIivi8U92b10X4PGgAAAAAAAAAAAAAAAAAAAB4zjYXFqXKtVp1T2FyIiOVHYBgKCn05+QEAAAAAAAAAAAAAAAAAgF1156Xffo8EAAAAAAAAAAAAAAAAAAAA8iz9OYmIbDs69MLg3T17I2JPslrIynsi4u0bFz64Um4250az9t822psftttP9GsOQC86edrJYwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCOxsLiVLlWq87tYKHfcwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4EH8FAAD//46R2W8=") socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xce8, 0x7, 0x2, 0x8, 0x17, "1e0f6809ab1db88301deada0c80737acc0263b"}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x110, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffffffff, @empty, 0x9}}, {0x20, 0x2, @in6={0xa, 0x9, 0x5, @empty, 0x101}}}}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5d54e05f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40855}, 0x2400c006) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) openat$pfkey(0xffffff9c, &(0x7f0000000600), 0x490000, 0x0) pwritev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0) 961.519391ms ago: executing program 3 (id=3076): getresuid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x0) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000140)=@v3={0x3000000, [{0xe, 0x7}, {0x8, 0xffffef7f}], r0}, 0x18, 0x2) (async) r2 = openat$vga_arbiter(0xffffff9c, &(0x7f0000000180), 0x100, 0x0) (async, rerun: 32) mount$9p_rdma(&(0x7f00000001c0), &(0x7f0000000200)='./file0/../file0\x00', &(0x7f0000000240), 0x1026802, &(0x7f0000000280)={'trans=rdma,', {'port', 0x3d, 0x4e21}, 0x2c, {[], [{@euid_gt={'euid>', r1}}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, ']'}}]}}) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000300)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'gretap0\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x700, 0x20, 0x0, 0x7, {{0x15, 0x4, 0x0, 0x38, 0x54, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0xbe, 0x3, 0x3, [{@broadcast, 0x6}, {@rand_addr=0x64010102, 0x4}, {@broadcast, 0x1}, {@rand_addr=0x64010100, 0x7}, {@multicast1, 0xffffffff}]}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0xe, 0x0, [{0x6, 0x8, "9f4980482879"}]}]}}}}}) (rerun: 32) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000600)={0x3, 0x0}, 0x8) (async, rerun: 32) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x8, 0xd, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff2, 0x0, 0x0, 0x0, 0x4}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}]}, &(0x7f00000006c0)='GPL\x00', 0x6000000, 0xbd, &(0x7f0000000700)=""/189, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[r2, 0x1, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000800)=[{0x3, 0x5, 0xa, 0xb}], 0x10, 0xfffffffb, @void, @value}, 0x94) (async, rerun: 32) r7 = openat$vcs(0xffffff9c, &(0x7f0000000900), 0x6000, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0x0, 0x10}, 0xc) r9 = open_tree(0xffffffffffffffff, &(0x7f0000000980)='./file0/../file0\x00', 0x41000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x19, 0xe, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, [@btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80}, @exit, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xd9e, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f00000003c0)='syzkaller\x00', 0x3, 0xec, &(0x7f0000000400)=""/236, 0x60980, 0x0, '\x00', r4, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x6, &(0x7f0000000a80)=[r7, r8, 0xffffffffffffffff, r9, r10], &(0x7f0000000ac0)=[{0x5, 0x4, 0xa, 0x3}, {0x4, 0x3, 0xb}, {0x2, 0x3, 0x10, 0x591ae5c1613e1e93}, {0x5, 0x2, 0x5, 0x6}, {0x2, 0x2, 0xc, 0x2}, {0x5, 0x1, 0xd}], 0x10, 0x2, @void, @value}, 0x94) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r9, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3ff}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'netpci0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$NFT_BATCH(r7, &(0x7f00000013c0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001380)={&(0x7f0000000d40)={{0x14}, [@NFT_MSG_NEWSET={0x260, 0x9, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}, @NFTA_SET_EXPRESSIONS={0x234, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x2a}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x164, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x154, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RANGE_FROM_DATA={0x148, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xa9, 0x1, "ed2a020d0c75ccfdcac786389785e98d4ff777cdc63c9bb366fc9e64a811253e2a9de546cca274a08fbec661a1b584d69c252997559a608601b542f0bdf1cc6106155e62d1ad410b993f386734d118cf8d980dd98641d0500fe6c3f4771d8a048b7237b9c1c3caf2264dc29a46de2fe6ab23f492b7c4a43435e3da7422c14f0585b6cd6ed8ba024ed32bf6329ace61420729cc02851901fc88ea74119f6b08000fa3e0dbb9"}, @NFTA_DATA_VALUE={0x3e, 0x1, "9d60c6f05c6a45e8654e01e97527f44a61fac571eeada6ac52dcf39befbd3c0877f960b5a624a4eaab00630e596143a49a362f5b3c5e5a71c95c"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}, @NFT_MSG_DELFLOWTABLE={0x50, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5a}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWRULE={0x19c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x94, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xb}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}, {0x40, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x200}, @NFTA_QUOTA_FLAGS={0x8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfe43}]}}}]}, @NFTA_RULE_USERDATA={0xbc, 0x7, 0x1, 0x0, "cd31ff50dec04f7a0268abc18dca6d3b92ae32207192803d743f46e4d96f65deee1784ee3704f02c0c9e3409a3e18475be7bf2ca7259e5240d483eef71cee90a04cbf10b93314186ca3f1451a5fb5f49ccdceaab52fccff4ce086347521c8a361f810f68c11c41b75f8fec15feaeca94a3f610ee4960863c22cec5308cea7248dbdf3d67f774035ad421b2c4fe878890bb3a240b20afcf60ebe5b92ecba96da07036e586fa96a13459272ef619b5e6ddf7157d777388469c"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x134, 0x14, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0xfb, 0x8, "18cc94426d780a8716735f9627748c85377280075770f44e90f1a484b645491436b511dda89b8fd05805dbdc51d1ffc3290635c9f783456515195312b9f56940d2a21c2e6a0d11a082743bb3e6485a77a081a1a5084b6c5fbb92d44ac49b3b6325547931780bd6a8791f39accd23f53f8723581daddc55f3ba08560cfd4de72d3abeb85859d5694405914f715a860db33bd09a6635519f00cd65c464e7625ba9f5207d8e4a22620dca612caac17d37bf4faa1cd57e4a1a6c336c91f6137ff88d00d8549749e324bfe0a3f2205db13d7089f5d73ee837b2efe0a1ccf4851eadbdb221e508bdff203dad57ff6d9b762a6d7a19a4f7185629"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x620}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r11 = openat$null(0xffffff9c, &(0x7f0000001400), 0x46c00, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r11, 0x8000000) time(&(0x7f0000001440)) (async, rerun: 32) ioctl$SIOCGETSGCNT_IN6(r11, 0x89e1, &(0x7f0000001480)={@mcast1, @remote}) (async, rerun: 32) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r9, 0x28, 0x6, &(0x7f00000014c0)={0x77359400}, 0x10) (async) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x4, &(0x7f0000fff000/0x1000)=nil) (async) r12 = syz_create_resource$binfmt(&(0x7f0000001500)='./file0\x00') execveat$binfmt(r3, r12, &(0x7f00000015c0)={[&(0x7f0000001540)='tunnel\x00', &(0x7f0000001580)='hash\x00']}, &(0x7f0000001740)={[&(0x7f0000001600)='smackfsfloor', &(0x7f0000001640)='%\x00', &(0x7f0000001680)='tunnel\x00', &(0x7f00000016c0)='\'}*(){\\\x00', &(0x7f0000001700)='GPL\x00']}, 0x400) (async) shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffe000/0x2000)=nil) ioctl$BTRFS_IOC_GET_DEV_STATS(r11, 0xc4089434, &(0x7f0000001780)={0x0, 0xbe0f, 0x1, [0x8, 0x7fff, 0x1, 0x6, 0x7], [0x20000000, 0x4, 0x81, 0x9, 0xb6, 0x0, 0x8000, 0x6, 0x7e8ab4e7, 0x8, 0x0, 0x7, 0x80000001, 0x8000000000000000, 0x1, 0x2, 0x8001, 0x3, 0x21c, 0x5, 0xffffffffffffffff, 0xa, 0x3, 0x2e1, 0x100, 0xce17, 0x1, 0xc0, 0xfff, 0xd48, 0x6, 0x2, 0x5, 0xfffffffffffff000, 0x6, 0x2, 0x1c, 0x9bb, 0xfff, 0xffffffff, 0xffff, 0x4600, 0x7, 0x9, 0x3, 0x8, 0x4, 0x9, 0x3c45, 0x5, 0x9, 0x7ff, 0xf994, 0x8, 0xab1, 0x3, 0x0, 0x9, 0x3, 0x6, 0xaa64, 0x4, 0x7, 0x0, 0x5, 0x0, 0x5, 0x1000, 0x9, 0x6, 0x9, 0x980000000000000, 0x8, 0x1, 0x48, 0x6, 0x100000000, 0x7, 0x8, 0x2, 0x2, 0x5, 0x3, 0x8, 0x40, 0x296, 0xfffffffffffffff8, 0x74dd, 0x2, 0x9, 0x7, 0x5a2996a5, 0x81, 0x3, 0x9, 0x7, 0x1c4160de, 0xffff000, 0x1000, 0x3, 0x0, 0x2, 0x6da7, 0x5, 0x1a67c58c, 0x4daf, 0x8, 0x7fffffff, 0x5, 0x9, 0xffffffffffffffff, 0x8, 0x463, 0x800, 0x10000000, 0x0, 0x2d, 0x1, 0x3, 0x5, 0x2]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000001bc0)={r13, 0x8, 0x1, [0x400, 0x2, 0x8000000000000000, 0x7, 0xb], [0x6, 0x4, 0xf, 0xa00, 0x3, 0xb, 0xb7c4, 0x5e, 0x7, 0x7, 0x0, 0x4, 0xfd53, 0x9, 0x96, 0x5, 0xb8, 0xffffffff, 0x8, 0xfffffffffffffffd, 0x5, 0x5, 0x3, 0x1, 0x7, 0x7, 0x5, 0x364000, 0x91ec, 0x2, 0x5, 0xffffffffffff0960, 0x2f, 0x81, 0x54178e7c, 0xf6b2, 0x4, 0x4, 0x4, 0x8, 0x7b5de08d, 0x100, 0x0, 0x8, 0x400, 0x10001, 0x8000000000000000, 0x9, 0x200, 0x4, 0x67ab, 0x1, 0xa9b, 0x6, 0x9, 0x80000000, 0x3424, 0x81, 0x0, 0x7, 0x8, 0x8, 0x100, 0x7fffffffffffffff, 0x3, 0x55a8, 0x401, 0x800, 0x0, 0x0, 0xffffffffffffffff, 0x8000000000000000, 0xe, 0x100000000, 0x4, 0x6, 0x5, 0x8000000000000001, 0x4, 0x80000000, 0xf1, 0x1, 0xfff, 0x20, 0x59, 0x9, 0x0, 0xe9cc, 0x4, 0x4, 0xfffffffffffffffb, 0x80, 0x81, 0x80, 0x2, 0xda99, 0x8, 0x2, 0xe4b, 0x1f4e0, 0x7, 0xc, 0x8, 0x1, 0x8000, 0x1, 0x153d, 0x9, 0x3ff, 0xe1c9, 0x9, 0x3, 0xa, 0x331c, 0x600000000000000, 0xfffffffffffffffc, 0xa000000000000000, 0x8000000000000001, 0x2, 0xa473, 0x80]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000002000), &(0x7f0000002040)=r7}, 0x20) r15 = socket$unix(0x1, 0x5, 0x0) fcntl$dupfd(r15, 0x0, r14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 915.355005ms ago: executing program 0 (id=3079): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x8b) mount$cgroup(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000040), 0x2214400, &(0x7f0000000180)={[{@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file1'}}]}) fchmodat(0xffffffffffffffff, 0x0, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000fa0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000040)=0x7ff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xffffffc1, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 894.344027ms ago: executing program 2 (id=3080): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000c969f5ca0620f63c766e1d7464e572e11d"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000140)="81", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1fffffff, 0x8, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, r7}, &(0x7f00000002c0)=0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000a80)={[{@user_xattr}, {@data_err_abort}, {@dax_inode}, {@acl}, {@norecovery}, {@nobh}, {@block_validity}, {@noinit_itable}, {@nomblk_io_submit}, {@nogrpid}, {@nogrpid}]}, 0x2, 0x54f, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 890.564217ms ago: executing program 0 (id=3081): r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r0, 0x10e, 0x2, 0x0, &(0x7f0000000240)=0xffffffffffffff6b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r1 = gettid() timer_create(0x9, &(0x7f0000000180)={0x0, 0x1e, 0x4, @tid=r1}, &(0x7f00000000c0)) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000bc0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x80, 0x0}, 0x0) timer_gettime(0x0, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0xfffffffffffffffe]}, 0x8, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000400)=""/226, 0xe2}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 868.051799ms ago: executing program 0 (id=3082): mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x1015, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x1, 0x237, &(0x7f0000000300)="$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") syz_mount_image$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3, 0x0, &(0x7f0000000000)) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@gettaction={0x88, 0x32, 0x0, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x88}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x7d}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=', @ANYRESHEX]) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r3}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r6}, 0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00'}, 0x18) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000) 620.763532ms ago: executing program 3 (id=3083): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, 0x0, 0x0) 610.474793ms ago: executing program 3 (id=3084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) open(0x0, 0x64842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mount(0x0, &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)='dic\x00\x19\x00\x00\x93.cF\xb9H\x8b\xd5\x9egZ\xcd\xf2\a\xe5\xdf\xcb\b\xd5\xc1&\x8a\x9aA\x95c\x0e\xfc\x93B\xe2\xee\xa6\xb1\xdd\x99O\x1eAy\x12fc=\xd8\xe4\xf3}\x0f\x98\xc5*\xa7\x92\xef\xd26\\Q\x06W\xc6\xe7\xf1\xbe\xc5\xa4\x96\x9e_\x11\xb0N4\xd2\xf5jQ\x16\xb2\x84\xc2\x1dT\x19z\x8e\xd7\xcf\x12\xfd\'\x8b\xd03\xba\xe2\xb1w\x93(\x92V\xaa') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000300)="1dd96be46eb6cd8cf1706d562a66c5"}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000000000000000", @ANYRES32=r6, @ANYBLOB="009b590647000022f600"/20, @ANYRES64, @ANYBLOB="fa902ab93e8928664941c75dde594dd2272ee9607c5faadb81e2bee1ce06f32dc75b3198b16517c117fd5418aae1ce5d7ebb7793a0da18ffc8c6b2a2e20cf7a88b48bbbdef2e3a548013a0dd6eb56e608dc28b03cfd6c361a0ac8295186f8a771b02d0cf74b414a32d87229dd57a6ee5cb9cf8cc99d9bb12fa414ae1ffafc66c7e2c3aa9f396bb31d99725ba594e397752db76ddb54fc8ee59f10864fb32e5076e8296b659ce253578b2c93b379dfebe3d6632d56f10ae", @ANYRESDEC=r4], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b3300000000fdcbdf25150000000800178004000280"], 0x1c}}, 0x80) 586.703385ms ago: executing program 3 (id=3085): gettid() timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_tid_address(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='\t') readahead(r0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) acct(&(0x7f0000002180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x11b, &(0x7f0000000000)={@random="1fe348d5c5a0", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0xe5, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x3}, {0x0, 0x1, "000000050000000026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}]}}}}}}, 0x0) unshare(0x66040200) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) 564.014448ms ago: executing program 0 (id=3087): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x4e24, @private=0xa010101}, 0xce, 0x0, 0x0, 0x0, 0xffffffffffffff9b}, 0x30004081) r1 = add_key(&(0x7f00000002c0)='pkcs7_test\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000380)="a63a6c508150144b88cdfaaa0b74d3eefdafa780007abb8c6b8f5528bf0b8f8771d7e0468ed81b5fd3c090569144afdb04891830e2e3db3db71aecc4e02d07f5bd39cffb2f92b35b711745a248ad2e2c7ecbccab888b4a0e13b7bb86ae0397e8ef68cbc62e13ed090af3dc197fa8dfb13844df47fc7587b6fed1f1fb246dec33d05cbe41d6be020ee0235ca615ee0f2ae2c01bfe0de81de4a8e033ec56c4c06490468fb976a767f2fc9ff711ff50", 0xae, 0xfffffffffffffffd) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000c00)="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", 0x1000, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r5) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000001c0)=r2, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0xffffc0f6, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) close(r6) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000004c0)={0x0, 0x4c, 0xe6}, &(0x7f00000006c0)={'enc=', 'oaep', ' hash=', {'sha384-generic\x00'}}, &(0x7f00000008c0)="8451fc272fe174fff5f306cb48ea52beefd1c0e3c91cbabfb93ea3fad3d8b7aeaf749fc55ceaa0517cecf625fb03bf433c7ff93db22765a9afe9e0d39b641bdc273d8bd107045992a4cd5380", &(0x7f0000000940)=""/230) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) write$cgroup_pid(r6, 0x0, 0x7ffffffff000) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="ed", 0x1}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 480.850435ms ago: executing program 4 (id=3090): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x16, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509011f000000009500000000000000181000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32, @ANYBLOB="000000e8ff000000b703000000000000850000020c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f00000005c0), 0x1, 0x54e, &(0x7f00000010c0)="$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") socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xce8, 0x7, 0x2, 0x8, 0x17, "1e0f6809ab1db88301deada0c80737acc0263b"}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r4, &(0x7f0000000540)={&(0x7f00000002c0), 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x110, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffffffff, @empty, 0x9}}, {0x20, 0x2, @in6={0xa, 0x9, 0x5, @empty, 0x101}}}}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5d54e05f}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40855}, 0x2400c006) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) openat$pfkey(0xffffff9c, &(0x7f0000000600), 0x490000, 0x0) pwritev(r4, &(0x7f00000001c0)=[{&(0x7f0000000200)='s', 0x1}], 0x1, 0xb9c4, 0x0) 480.399685ms ago: executing program 0 (id=3091): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001500)={0x2c, r3, 0x1, 0x0, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) 440.512879ms ago: executing program 0 (id=3092): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000014c5d9b5c86127f23395c2fae78d2251cb05353ad7a706631244353b4e8af98266269956d417e2012f9b6fd09b3cf4ea7282acdc4af5cb132cb1c1acbed47516bede6dde4f3f188a010aecda1bdc49ce0b804aa46b6965ea9315e8c078b6a7a5716e88b54149c27fb01c3cfdfcc52ba1750434fb0c1371853bb375bef98b849a13cdf88588ffb9501bcb6327c9e1dd8d0663788090b43fd75265cc70d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x31) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="160000000000000004000800011d000000000000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000000000000100008000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0x81, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000c0b18e254f7c", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xf, &(0x7f0000000880)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4000000, 0xffffffffffffffe1, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) sync_file_range(0xffffffffffffffff, 0x7fffffffffffffff, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r4, &(0x7f0000000400)="c80e6ed1ee7d75c42a6694ed2973e6093d551e3208f8e17e25b7cf00000000f4ff0000000000f90000", 0x29, 0x4004854, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500), 0x0) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303120008ff6000000002000020d3"]) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) timer_create(0x0, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 439.206819ms ago: executing program 2 (id=3093): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x401, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000051ce0e128b028e73838f9a8d5558feff640cc8647c4c92fc6736c969089286f13a008be692dc2b140a23b9680dddf05081feacab5526ede34d3e8a95dbbe89b2acbed4578d94c6113abdecc6c3279dd313a078486528112fc5f2c1f35b8218f11f40aabd1660b99a37fcebbda90257038317d085b4a27c31b77d8118e064106106a8382df16aabd5cbaf942185bf12f7c6cf312192382c71a3c15ee5d1e746c1bd9fa2513885fe4f75640b655f556112997689452fae", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x19, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRESHEX=r3, @ANYBLOB="a846e418fbe62878de319199756cc745f3c71a5b9392e240f7ad7d0e128495bd12a8d7e6b3dbbb45b6c60b0c269fd398ca181a84ea89bb09fd598f7a986d7611de11e27f94e6247bfb9a113a0cdd0e91712171438ca110f9f915f6c4c74371bd57775ad52e222685c22928fc1951749a68e3d9076e6127b5053f6cfdc7bcae5075ce63811c7244dd527d0e60cfecf747757afa4589510047bdf10cf78379bb9d6f647bfdee82c955edad8f756081bd56127661b84338d8418cb3", @ANYRES16=r2, @ANYRES8=r2], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x1000, 0x0) 361.779516ms ago: executing program 1 (id=3094): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) 351.407637ms ago: executing program 4 (id=3095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) open(0x0, 0x64842, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) mount(0x0, &(0x7f0000001fc0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)='dic\x00\x19\x00\x00\x93.cF\xb9H\x8b\xd5\x9egZ\xcd\xf2\a\xe5\xdf\xcb\b\xd5\xc1&\x8a\x9aA\x95c\x0e\xfc\x93B\xe2\xee\xa6\xb1\xdd\x99O\x1eAy\x12fc=\xd8\xe4\xf3}\x0f\x98\xc5*\xa7\x92\xef\xd26\\Q\x06W\xc6\xe7\xf1\xbe\xc5\xa4\x96\x9e_\x11\xb0N4\xd2\xf5jQ\x16\xb2\x84\xc2\x1dT\x19z\x8e\xd7\xcf\x12\xfd\'\x8b\xd03\xba\xe2\xb1w\x93(\x92V\xaa') bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000300)="1dd96be46eb6cd8cf1706d562a66c5"}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve1\x00'}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="05000000000000000000", @ANYRES32=r6, @ANYBLOB="009b590647000022f600"/20, @ANYRES64, @ANYBLOB="fa902ab93e8928664941c75dde594dd2272ee9607c5faadb81e2bee1ce06f32dc75b3198b16517c117fd5418aae1ce5d7ebb7793a0da18ffc8c6b2a2e20cf7a88b48bbbdef2e3a548013a0dd6eb56e608dc28b03cfd6c361a0ac8295186f8a771b02d0cf74b414a32d87229dd57a6ee5cb9cf8cc99d9bb12fa414ae1ffafc66c7e2c3aa9f396bb31d99725ba594e397752db76ddb54fc8ee59f10864fb32e5076e8296b659ce253578b2c93b379dfebe3d6632d56f10ae", @ANYRESDEC=r4], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400000000000000", 0x38}], 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b3300000000fdcbdf25150000000800178004000280"], 0x1c}}, 0x80) 92.937411ms ago: executing program 1 (id=3096): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x441) dup(r0) r1 = syz_io_uring_setup(0x4e5e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) writev(0xffffffffffffffff, 0x0, 0x0) memfd_secret(0x0) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x3, &(0x7f0000002180)=@framed={{0x18, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_emit_ethernet(0xfdef, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) 85.632182ms ago: executing program 4 (id=3097): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f0085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 81.402032ms ago: executing program 1 (id=3098): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffffffffffffffff, 0x11b0c0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x80000) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) (async) r1 = openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{}], 0xa, "98f380f53e43f0b0af2bdb35"}, 0x18) (async) ioctl$FIONCLEX(r1, 0x5450) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000000c0)={0x1f, @none}, 0x8) (async) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/212) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000240)="7eda9e15318a5ad15c0917020593c49730f906a9b15509d54f40f25add2e6945502c8bd770949d2448d7bf42927e3d7fc5bda5fa8a5fece59863a01961f9859382cdc49357f554690439a31df27ecd57942b10611bc7749420e04cdc0a57cc11424e620de96be45f25e4d4fb7c31bc42ba64201a1b758f752c35124aab", &(0x7f00000002c0)=@udp=r5, 0x4}, 0x20) (async, rerun: 32) symlinkat(&(0x7f0000000340)='./file0\x00', r3, &(0x7f0000000380)='./file0/file0\x00') (async, rerun: 32) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000003c0)={0x1, 0x9, 0x5}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) io_setup(0xa, &(0x7f0000000400)=0x0) io_pgetevents(r7, 0xc4fa, 0x4, &(0x7f0000000440)=[{}, {}, {}, {}], &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x2]}, 0x8}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000580)=0x1, 0x4) (async, rerun: 32) lsetxattr(&(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600)=@random={'trusted.', '},(\xf8@,&\x00'}, &(0x7f0000000640)='#! ', 0x3, 0x2) (async, rerun: 32) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000680), &(0x7f00000006c0)=0x4) (async) execveat$binfmt(r4, 0x0, &(0x7f0000000740)={[&(0x7f0000000700)='},(\xf8@,&\x00']}, &(0x7f00000007c0)={[&(0x7f0000000780)='\x00']}, 0x1000) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000840), r4) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40181}, 0x20000004) (async) getsockname$packet(r4, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000980)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a00)={'tunl0\x00', r9, 0x20, 0x80, 0x1000, 0x0, {{0x2c, 0x4, 0x3, 0x0, 0xb0, 0x66, 0x0, 0x4, 0x29, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x18}, {[@ra={0x94, 0x4, 0x9}, @ssrr={0x89, 0x27, 0x73, [@loopback, @local, @remote, @remote, @empty, @multicast1, @broadcast, @empty, @private=0xa010101]}, @ssrr={0x89, 0x1b, 0x3a, [@multicast2, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x5b, 0x1, 0xa, [{@rand_addr=0x64010100, 0xc}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x104}]}, @ra={0x94, 0x4, 0x1}, @generic={0x89, 0xa, "bf49cd3d98d886ac"}, @timestamp_prespec={0x44, 0x2c, 0x1a, 0x3, 0x5, [{@rand_addr=0x64010102, 0xf6f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9ad6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x8}, {@loopback}]}, @noop, @ra={0x94, 0x4}]}}}}}) (async, rerun: 64) getresuid(&(0x7f0000000b40), &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f0000000c00)='./file1\x00', &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) sendmsg$nl_xfrm(r4, &(0x7f00000010c0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000000cc0)=@delpolicy={0x3b0, 0x14, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x2, 0x4e22, 0x9, 0xa, 0x0, 0x20, 0x87, r10, 0xee00}, 0x6e6bb3}, [@etimer_thresh={0x8}, @sa={0xe4, 0x6, {{@in=@multicast1, @in=@multicast2, 0x4e21, 0x6, 0x4e21, 0x0, 0x0, 0xa0, 0x0, 0xc, 0x0, r11}, {@in=@multicast2, 0x4d3, 0x3c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, {0xad0, 0x1, 0x7c10, 0x3, 0x830, 0xb89, 0x2a7a, 0x10001}, {0x5, 0x8, 0x6, 0x5}, {0x9, 0x3, 0xa38}, 0x70bd2c, 0x0, 0xa, 0x1, 0x7, 0x40}}, @etimer_thresh={0x8, 0xc, 0x2}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast2, 0x2, 0xfe, 0x2}}, @migrate={0x134, 0x11, [{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3e}, @in6=@mcast2, @in=@empty, 0x32, 0x1, 0x0, 0x3502, 0x0, 0xa}, {@in6=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}, @in6=@local, @in=@multicast1, 0x33, 0x4, 0x0, 0x3507, 0x2, 0xa}, {@in=@rand_addr=0x64010100, @in=@remote, @in6=@mcast2, @in6=@local, 0x3c, 0x2, 0x0, 0x3501, 0x2, 0x2}, {@in=@multicast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, @in=@empty, 0x33, 0x4, 0x0, 0x0, 0x2, 0x2}]}, @sa={0xe4, 0x6, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@remote, 0x4e20, 0x8, 0x4e22, 0x9c2, 0xa, 0x80, 0xa0, 0x2f, 0x0, r12}, {@in=@empty, 0x4d4, 0x2b}, @in6=@private1, {0x98a4, 0x22, 0x70c, 0x7, 0x40, 0x800, 0x7ef, 0x4b65a7a}, {0x5, 0x100000000, 0x200, 0x7}, {0x3, 0x1, 0x800}, 0x70bd26, 0x3500, 0xa, 0x4, 0x3, 0xc8}}, @user_kmaddress={0x2c, 0x13, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010100, 0x0, 0xa}}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x40}, 0xc004) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, 0x2, 0x1, 0x201, 0x0, 0x0, {0xf, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x7006}]}, 0x34}, 0x1, 0x0, 0x0, 0x24044000}, 0x200000c4) umount2(&(0x7f0000001200)='./file1\x00', 0x5) 70.365563ms ago: executing program 1 (id=3099): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x28}}, 0x0) 59.395614ms ago: executing program 1 (id=3100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func={0x5, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {0x7}, {0xc}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 28.467237ms ago: executing program 1 (id=3101): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file2\x00', 0x0, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11e0, &(0x7f00000036c0)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eK4gjJmq7JR6KsFPK53PJD977wu9lYOAN8+bwja8+Hg2qbJDPY+PEidiYRqQ7KVJsxD8+j1df//GnF67duHml2+vtXk3pcvd657WU0taL37/36Tcv/TA/++63W9+djoPt9w9/3fnl4PzBhcM/rn80rNKwSuPJPOXp1mQyz2+VRdobVqMspXfKIq+KNBxXxezI+KCcTKeLlI/3NlvTWVFVKR8v0qhYpPkkzWeLlH+YD8cpy7K02Qr+j/7Xd+q6jqjrx+NU1HVdPxGtOBtPxmZsRTu246l4Op6Jc/FsnI/n4vm4sJzVdN8AAAAAAAAAAAAAAAAAAADwaHH+HwAAAAAAAAAAAAAAAAAAAJp37cbNK91eb/dqSmciyi/3+/v91e9qvDuIYZRRxKVox++xPP2/sqovv9XbvZSWtuOL8vbf+dv7/ceO5jvLzwmszXdW+XQ0fzpa9+Z3oh3n1ud31ubPxCsv35PPoh0/fxCTKGMv/srezX/WSenNt3v35S8u5wEAAMCjIEv/Wrt/z7L/Gl/lH+D5wH3765Nx8WSzayeiWnwyysuymCke+uJUs238Vtd183+C4piKpu9MHIe7F73pTgAAAAAAAAAAAHgQx/E6YdNrBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4kx04FgAAAAAQ5m+dRscGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVwEAAP//zI7XaA==") r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000500), 0xbf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4, 0x4}, 0xe}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0) ftruncate(r1, 0x200000d) sendfile(r0, r0, &(0x7f0000000240), 0x7f06) 27.710227ms ago: executing program 4 (id=3102): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x200000, 0x1000}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001500)={0x2c, r3, 0x1, 0x0, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}}, 0x0) 14.028629ms ago: executing program 4 (id=3103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}}, 0x0) 0s ago: executing program 4 (id=3104): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x54e, &(0x7f00000014c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff0000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r4, 0x40095505, 0x0) openat$cgroup_type(r1, &(0x7f0000000240), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) open(&(0x7f0000000040)='.\x00', 0x418601, 0x8) dup(0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 159.410138][T10333] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2409'. [ 159.438323][T10334] x_tables: duplicate entry at hook 3 [ 159.454632][ T9492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.483356][T10344] ebtables: ebtables: counters copy to user failed while replacing table [ 159.525638][T10351] loop3: detected capacity change from 0 to 512 [ 159.574202][T10353] loop3: detected capacity change from 0 to 2048 [ 159.597883][T10353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.651011][ T9492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.675983][T10359] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 159.689742][T10361] loop4: detected capacity change from 0 to 1024 [ 159.707459][T10361] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.719575][T10361] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.732898][T10361] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 159.745173][T10361] EXT4-fs (loop4): This should not happen!! Data will be lost [ 159.745173][T10361] [ 159.754793][T10361] EXT4-fs (loop4): Total free blocks count 0 [ 159.760767][T10361] EXT4-fs (loop4): Free/Dirty block details [ 159.766721][T10361] EXT4-fs (loop4): free_blocks=0 [ 159.771644][T10361] EXT4-fs (loop4): dirty_blocks=0 [ 159.776736][T10361] EXT4-fs (loop4): Block reservation details [ 159.782841][T10361] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 159.791479][T10364] loop3: detected capacity change from 0 to 512 [ 159.798932][ T8971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.011519][T10374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2072 sclass=netlink_route_socket pid=10374 comm=syz.4.2420 [ 160.092078][T10378] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2422'. [ 160.103366][T10378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2422'. [ 160.338923][T10382] ebtables: ebtables: counters copy to user failed while replacing table [ 160.529951][T10387] Cannot find del_set index 0 as target [ 160.572212][T10390] 9pnet_fd: Insufficient options for proto=fd [ 160.617304][T10392] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 160.650675][T10396] SELinux: policydb magic number 0x5 does not match expected magic number 0xf97cff8c [ 160.660434][T10396] SELinux: failed to load policy [ 160.667514][T10398] loop2: detected capacity change from 0 to 256 [ 160.673970][T10398] vfat: Unknown parameter 'rºir' [ 160.692056][T10401] loop1: detected capacity change from 0 to 1024 [ 160.707881][T10405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2432'. [ 160.708131][T10401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.722679][T10405] x_tables: duplicate entry at hook 3 [ 160.730479][T10401] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.769775][T10401] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 160.782244][T10401] EXT4-fs (loop1): This should not happen!! Data will be lost [ 160.782244][T10401] [ 160.791924][T10401] EXT4-fs (loop1): Total free blocks count 0 [ 160.797938][T10401] EXT4-fs (loop1): Free/Dirty block details [ 160.803833][T10401] EXT4-fs (loop1): free_blocks=0 [ 160.808803][T10401] EXT4-fs (loop1): dirty_blocks=0 [ 160.813836][T10401] EXT4-fs (loop1): Block reservation details [ 160.819836][T10401] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 160.838179][ T9009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.916744][T10428] loop1: detected capacity change from 0 to 2048 [ 160.938336][T10428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.976984][ T9009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.004540][T10434] loop0: detected capacity change from 0 to 512 [ 161.059764][T10438] loop1: detected capacity change from 0 to 512 [ 161.641397][T10449] loop4: detected capacity change from 0 to 1024 [ 161.657438][T10449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.666702][T10443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2072 sclass=netlink_route_socket pid=10443 comm=syz.2.2444 [ 161.670328][T10449] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.698067][T10449] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 161.710440][T10449] EXT4-fs (loop4): This should not happen!! Data will be lost [ 161.710440][T10449] [ 161.720118][T10449] EXT4-fs (loop4): Total free blocks count 0 [ 161.726166][T10449] EXT4-fs (loop4): Free/Dirty block details [ 161.732182][T10449] EXT4-fs (loop4): free_blocks=0 [ 161.737194][T10449] EXT4-fs (loop4): dirty_blocks=0 [ 161.742291][T10449] EXT4-fs (loop4): Block reservation details [ 161.748329][T10449] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 161.775944][ T8971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.795042][T10456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2449'. [ 161.813179][T10456] x_tables: duplicate entry at hook 3 [ 161.908157][T10466] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 161.939483][T10474] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2448'. [ 161.949474][T10474] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2448'. [ 162.014622][T10475] Cannot find del_set index 0 as target [ 162.022230][T10473] Cannot find del_set index 0 as target [ 162.192629][T10490] loop1: detected capacity change from 0 to 1024 [ 162.208151][T10490] EXT4-fs: dax option not supported [ 162.235949][T10490] pim6reg1: entered promiscuous mode [ 162.241315][T10490] pim6reg1: entered allmulticast mode [ 162.361219][T10503] loop4: detected capacity change from 0 to 2048 [ 162.379926][T10503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.522971][T10514] netlink: 'syz.2.2472': attribute type 39 has an invalid length. [ 162.596075][T10514] veth1_macvtap: left promiscuous mode [ 162.619196][ T8971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.668910][T10521] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2474'. [ 162.717676][T10527] loop4: detected capacity change from 0 to 2048 [ 162.721361][T10523] Cannot find del_set index 0 as target [ 162.732899][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 162.732913][ T29] audit: type=1326 audit(1728107907.861:18821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e620fdff9 code=0x7ffc0000 [ 162.762656][ T29] audit: type=1326 audit(1728107907.861:18822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e620fdff9 code=0x7ffc0000 [ 162.786354][ T29] audit: type=1326 audit(1728107907.861:18823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e620fdff9 code=0x7ffc0000 [ 162.809943][ T29] audit: type=1326 audit(1728107907.871:18824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e620fdff9 code=0x7ffc0000 [ 162.833577][ T29] audit: type=1326 audit(1728107907.871:18825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e620fdff9 code=0x7ffc0000 [ 162.857784][ T29] audit: type=1326 audit(1728107907.871:18826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e620fdff9 code=0x7ffc0000 [ 162.889456][T10527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.902141][ T29] audit: type=1326 audit(1728107908.041:18827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e620fdff9 code=0x7ffc0000 [ 162.948052][T10535] netlink: 'syz.3.2478': attribute type 29 has an invalid length. [ 162.956751][ T29] audit: type=1326 audit(1728107908.041:18828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e620fdff9 code=0x7ffc0000 [ 162.980390][ T29] audit: type=1326 audit(1728107908.071:18829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f9e620fdff9 code=0x7ffc0000 [ 163.004339][ T29] audit: type=1326 audit(1728107908.071:18830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10525 comm="syz.3.2475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e620fdff9 code=0x7ffc0000 [ 163.030654][ T8971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.046879][T10535] netlink: 'syz.3.2478': attribute type 29 has an invalid length. [ 163.097297][T10549] FAULT_INJECTION: forcing a failure. [ 163.097297][T10549] name failslab, interval 1, probability 0, space 0, times 0 [ 163.109967][T10549] CPU: 1 UID: 0 PID: 10549 Comm: syz.4.2485 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 163.120784][T10549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.130829][T10549] Call Trace: [ 163.134091][T10549] [ 163.137009][T10549] dump_stack_lvl+0xf2/0x150 [ 163.141662][T10549] dump_stack+0x15/0x20 [ 163.145804][T10549] should_fail_ex+0x223/0x230 [ 163.150513][T10549] ? __se_sys_mount+0xf7/0x2d0 [ 163.155273][T10549] should_failslab+0x8f/0xb0 [ 163.159938][T10549] __kmalloc_cache_noprof+0x4b/0x2a0 [ 163.165222][T10549] __se_sys_mount+0xf7/0x2d0 [ 163.169902][T10549] ? fput+0x14e/0x190 [ 163.173876][T10549] ? ksys_write+0x17a/0x1b0 [ 163.178375][T10549] __x64_sys_mount+0x67/0x80 [ 163.182959][T10549] x64_sys_call+0x203e/0x2d60 [ 163.187643][T10549] do_syscall_64+0xc9/0x1c0 [ 163.192140][T10549] ? clear_bhb_loop+0x55/0xb0 [ 163.196822][T10549] ? clear_bhb_loop+0x55/0xb0 [ 163.201592][T10549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.207484][T10549] RIP: 0033:0x7fd31390dff9 [ 163.211900][T10549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.231513][T10549] RSP: 002b:00007fd312581038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 163.239977][T10549] RAX: ffffffffffffffda RBX: 00007fd313ac5f80 RCX: 00007fd31390dff9 [ 163.247993][T10549] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 163.255957][T10549] RBP: 00007fd312581090 R08: 00000000200007c0 R09: 0000000000000000 [ 163.263960][T10549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.271983][T10549] R13: 0000000000000000 R14: 00007fd313ac5f80 R15: 00007ffcb9d78498 [ 163.279986][T10549] [ 163.287147][T10550] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10550 comm=syz.1.2484 [ 163.314614][T10552] loop2: detected capacity change from 0 to 512 [ 163.358910][T10552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.371733][T10552] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.388555][T10552] syz.2.2486[10552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.388633][T10552] syz.2.2486[10552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.402107][T10560] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 163.420280][T10552] syz.2.2486[10552] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.443044][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.477995][T10567] loop4: detected capacity change from 0 to 2048 [ 163.481775][T10571] FAULT_INJECTION: forcing a failure. [ 163.481775][T10571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.497685][T10571] CPU: 1 UID: 0 PID: 10571 Comm: syz.2.2492 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 163.508444][T10571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.518492][T10571] Call Trace: [ 163.521924][T10571] [ 163.524834][T10571] dump_stack_lvl+0xf2/0x150 [ 163.529453][T10571] dump_stack+0x15/0x20 [ 163.533600][T10571] should_fail_ex+0x223/0x230 [ 163.538341][T10571] should_fail+0xb/0x10 [ 163.542496][T10571] should_fail_usercopy+0x1a/0x20 [ 163.547509][T10571] _copy_to_user+0x1e/0xa0 [ 163.551978][T10571] simple_read_from_buffer+0xa0/0x110 [ 163.557351][T10571] proc_fail_nth_read+0xf9/0x140 [ 163.562294][T10571] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 163.567833][T10571] vfs_read+0x195/0x720 [ 163.571990][T10571] ? __rcu_read_unlock+0x4e/0x70 [ 163.576912][T10571] ? __fget_files+0x1d4/0x210 [ 163.581678][T10571] ksys_read+0xeb/0x1b0 [ 163.585825][T10571] __x64_sys_read+0x42/0x50 [ 163.590327][T10571] x64_sys_call+0x27d3/0x2d60 [ 163.595066][T10571] do_syscall_64+0xc9/0x1c0 [ 163.599551][T10571] ? clear_bhb_loop+0x55/0xb0 [ 163.604214][T10571] ? clear_bhb_loop+0x55/0xb0 [ 163.608886][T10571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.614766][T10571] RIP: 0033:0x7fd6c332ca3c [ 163.619260][T10571] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 163.638982][T10571] RSP: 002b:00007fd6c1fa1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 163.647372][T10571] RAX: ffffffffffffffda RBX: 00007fd6c34e5f80 RCX: 00007fd6c332ca3c [ 163.655319][T10571] RDX: 000000000000000f RSI: 00007fd6c1fa10a0 RDI: 0000000000000005 [ 163.663271][T10571] RBP: 00007fd6c1fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 163.671220][T10571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.679219][T10571] R13: 0000000000000000 R14: 00007fd6c34e5f80 R15: 00007ffe2beccac8 [ 163.687172][T10571] [ 163.691969][T10573] @: renamed from bond0 (while UP) [ 163.707461][T10567] Alternate GPT is invalid, using primary GPT. [ 163.713796][T10567] loop4: p1 p2 p3 [ 163.719579][T10577] cgroup: release_agent respecified [ 163.725656][T10577] netlink: 'syz.2.2495': attribute type 10 has an invalid length. [ 163.773330][T10584] loop0: detected capacity change from 0 to 1024 [ 163.801071][T10586] loop2: detected capacity change from 0 to 1024 [ 163.810788][T10590] loop4: detected capacity change from 0 to 512 [ 163.812725][T10584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.817395][T10590] EXT4-fs: Ignoring removed bh option [ 163.829900][T10584] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.835634][T10590] ext4: Unknown parameter 'fsname' [ 163.857322][T10584] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 163.869638][T10584] EXT4-fs (loop0): This should not happen!! Data will be lost [ 163.869638][T10584] [ 163.879313][T10584] EXT4-fs (loop0): Total free blocks count 0 [ 163.885311][T10584] EXT4-fs (loop0): Free/Dirty block details [ 163.891224][T10584] EXT4-fs (loop0): free_blocks=0 [ 163.896249][T10584] EXT4-fs (loop0): dirty_blocks=0 [ 163.901304][T10584] EXT4-fs (loop0): Block reservation details [ 163.907309][T10584] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 163.916372][T10586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.928562][T10586] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.941198][T10586] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 163.953554][T10586] EXT4-fs (loop2): This should not happen!! Data will be lost [ 163.953554][T10586] [ 163.963273][T10586] EXT4-fs (loop2): Total free blocks count 0 [ 163.969374][T10586] EXT4-fs (loop2): Free/Dirty block details [ 163.975261][T10586] EXT4-fs (loop2): free_blocks=0 [ 163.980207][T10586] EXT4-fs (loop2): dirty_blocks=0 [ 163.985313][T10586] EXT4-fs (loop2): Block reservation details [ 163.991402][T10586] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 164.008401][ T8693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.018452][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.038063][T10595] Process accounting resumed [ 164.073090][T10600] loop2: detected capacity change from 0 to 4096 [ 164.080239][T10604] FAULT_INJECTION: forcing a failure. [ 164.080239][T10604] name failslab, interval 1, probability 0, space 0, times 0 [ 164.092960][T10604] CPU: 1 UID: 0 PID: 10604 Comm: syz.4.2506 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 164.103727][T10604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.112809][T10608] cgroup: release_agent respecified [ 164.113789][T10604] Call Trace: [ 164.119800][T10608] netlink: 'syz.0.2508': attribute type 10 has an invalid length. [ 164.122233][T10604] [ 164.122242][T10604] dump_stack_lvl+0xf2/0x150 [ 164.137661][T10604] dump_stack+0x15/0x20 [ 164.141817][T10604] should_fail_ex+0x223/0x230 [ 164.146522][T10604] ? __alloc_skb+0x10b/0x310 [ 164.151112][T10604] should_failslab+0x8f/0xb0 [ 164.155707][T10604] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 164.161601][T10604] __alloc_skb+0x10b/0x310 [ 164.166024][T10604] audit_log_start+0x368/0x6b0 [ 164.170817][T10604] audit_seccomp+0x4b/0x130 [ 164.175322][T10604] __seccomp_filter+0x6fa/0x1180 [ 164.180268][T10604] ? proc_fail_nth_write+0x12a/0x150 [ 164.185554][T10604] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 164.191266][T10604] ? vfs_write+0x580/0x910 [ 164.195728][T10604] __secure_computing+0x9f/0x1c0 [ 164.200749][T10604] syscall_trace_enter+0xd1/0x1f0 [ 164.205943][T10604] do_syscall_64+0xaa/0x1c0 [ 164.210449][T10604] ? clear_bhb_loop+0x55/0xb0 [ 164.215209][T10604] ? clear_bhb_loop+0x55/0xb0 [ 164.219899][T10604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.225817][T10604] RIP: 0033:0x7fd31390dff9 [ 164.230272][T10604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.234425][T10600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.249990][T10604] RSP: 002b:00007fd312581038 EFLAGS: 00000246 ORIG_RAX: 0000000000000132 [ 164.250039][T10604] RAX: ffffffffffffffda RBX: 00007fd313ac5f80 RCX: 00007fd31390dff9 [ 164.250052][T10604] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 164.250063][T10604] RBP: 00007fd312581090 R08: 0000000000000000 R09: 0000000000000000 [ 164.294902][T10604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.294916][T10604] R13: 0000000000000000 R14: 00007fd313ac5f80 R15: 00007ffcb9d78498 [ 164.294932][T10604] [ 164.313139][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.356971][T10615] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2509'. [ 164.374335][T10615] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2509'. [ 164.413680][T10621] loop4: detected capacity change from 0 to 1024 [ 164.414055][T10627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2516'. [ 164.421742][T10625] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 164.443501][T10623] loop1: detected capacity change from 0 to 1024 [ 164.450847][T10621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.456235][T10623] EXT4-fs: dax option not supported [ 164.463769][T10621] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.479756][T10627] 9pnet_fd: Insufficient options for proto=fd [ 164.510089][T10631] loop2: detected capacity change from 0 to 512 [ 164.554466][T10621] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 164.566830][T10621] EXT4-fs (loop4): This should not happen!! Data will be lost [ 164.566830][T10621] [ 164.576483][T10621] EXT4-fs (loop4): Total free blocks count 0 [ 164.582459][T10621] EXT4-fs (loop4): Free/Dirty block details [ 164.588411][T10621] EXT4-fs (loop4): free_blocks=0 [ 164.593333][T10621] EXT4-fs (loop4): dirty_blocks=0 [ 164.598377][T10621] EXT4-fs (loop4): Block reservation details [ 164.604368][T10621] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 164.668931][ T8971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.701054][T10644] loop4: detected capacity change from 0 to 512 [ 164.719382][T10644] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.730063][T10645] loop1: detected capacity change from 0 to 2048 [ 164.750463][T10645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.763472][T10644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.816341][ T9009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.843906][T10654] loop1: detected capacity change from 0 to 512 [ 164.873317][T10654] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.885830][T10656] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 164.897087][T10654] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.992822][T10644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.001127][T10660] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 165.015167][T10644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.117817][T10669] loop3: detected capacity change from 0 to 512 [ 165.150758][T10668] loop0: detected capacity change from 0 to 1024 [ 165.157352][T10668] EXT4-fs: dax option not supported [ 165.167509][T10668] pim6reg1: entered promiscuous mode [ 165.172851][T10668] pim6reg1: entered allmulticast mode [ 165.189001][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.197458][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.448277][T10684] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 165.489454][T10686] loop0: detected capacity change from 0 to 512 [ 165.496210][T10686] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 165.507487][T10686] EXT4-fs (loop0): 1 truncate cleaned up [ 165.513447][T10686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.534297][ T8971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.720222][ T9009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.752964][T10699] ebtables: ebtables: counters copy to user failed while replacing table [ 165.855030][T10703] loop3: detected capacity change from 0 to 2048 [ 165.878790][T10703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.925406][T10707] loop1: detected capacity change from 0 to 1024 [ 165.932220][T10707] EXT4-fs: dax option not supported [ 165.933076][ T9492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.943085][T10707] pim6reg1: entered promiscuous mode [ 165.951751][T10707] pim6reg1: entered allmulticast mode [ 166.024912][T10713] loop1: detected capacity change from 0 to 512 [ 166.037457][T10713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.050013][T10713] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.065334][T10713] syz.1.2545[10713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.065458][T10713] syz.1.2545[10713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.099984][T10713] syz.1.2545[10713] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.123221][ T9009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.166851][T10711] Cannot find del_set index 0 as target [ 166.168314][T10720] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 166.209144][T10722] loop1: detected capacity change from 0 to 2048 [ 166.227585][T10722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.247710][T10724] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 166.288780][ T9009] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.308579][T10734] ebtables: ebtables: counters copy to user failed while replacing table [ 166.326160][ T8693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.328120][T10739] loop2: detected capacity change from 0 to 512 [ 166.354574][T10743] loop1: detected capacity change from 0 to 256 [ 166.361250][T10743] vfat: Unknown parameter 'rºir' [ 166.418529][T10745] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 166.446090][T10749] loop4: detected capacity change from 0 to 512 [ 166.470420][T10749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.495094][T10754] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 166.504111][T10749] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.517867][T10749] syz.4.2557[10749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.517995][T10749] syz.4.2557[10749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.530572][T10749] syz.4.2557[10749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 166.551672][ T8971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.628030][T10759] loop1: detected capacity change from 0 to 512 [ 166.729753][T10771] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2560'. [ 166.744259][T10771] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2560'. [ 166.768380][T10775] cgroup: release_agent respecified [ 166.774197][T10775] netlink: 'syz.4.2566': attribute type 10 has an invalid length. [ 166.804301][T10777] loop4: detected capacity change from 0 to 1024 [ 166.820291][T10777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.832670][T10777] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.854392][T10777] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 166.866826][T10777] EXT4-fs (loop4): This should not happen!! Data will be lost [ 166.866826][T10777] [ 166.876506][T10777] EXT4-fs (loop4): Total free blocks count 0 [ 166.882488][T10777] EXT4-fs (loop4): Free/Dirty block details [ 166.888483][T10777] EXT4-fs (loop4): free_blocks=0 [ 166.893442][T10777] EXT4-fs (loop4): dirty_blocks=0 [ 166.898493][T10777] EXT4-fs (loop4): Block reservation details [ 166.904505][T10777] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 166.929499][ T8971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.154003][T10786] loop2: detected capacity change from 0 to 2048 [ 167.177594][T10786] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.241733][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.363733][T10800] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 167.429894][T10792] Cannot find del_set index 0 as target [ 167.484103][T10804] cgroup: release_agent respecified [ 167.497825][T10804] netlink: 'syz.2.2577': attribute type 10 has an invalid length. [ 167.555596][T10815] loop0: detected capacity change from 0 to 2048 [ 167.568378][T10815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.611171][T10818] loop1: detected capacity change from 0 to 512 [ 167.665189][ T8693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.698420][T10823] FAULT_INJECTION: forcing a failure. [ 167.698420][T10823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.711587][T10823] CPU: 1 UID: 0 PID: 10823 Comm: syz.0.2584 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 167.722384][T10823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 167.732533][T10823] Call Trace: [ 167.735881][T10823] [ 167.738843][T10823] dump_stack_lvl+0xf2/0x150 [ 167.743425][T10823] dump_stack+0x15/0x20 [ 167.747666][T10823] should_fail_ex+0x223/0x230 [ 167.752410][T10823] should_fail+0xb/0x10 [ 167.756648][T10823] should_fail_usercopy+0x1a/0x20 [ 167.761750][T10823] _copy_to_user+0x1e/0xa0 [ 167.766219][T10823] simple_read_from_buffer+0xa0/0x110 [ 167.771630][T10823] proc_fail_nth_read+0xf9/0x140 [ 167.776644][T10823] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 167.782183][T10823] vfs_read+0x195/0x720 [ 167.786403][T10823] ksys_read+0xeb/0x1b0 [ 167.790571][T10823] __x64_sys_read+0x42/0x50 [ 167.795093][T10823] x64_sys_call+0x27d3/0x2d60 [ 167.799848][T10823] do_syscall_64+0xc9/0x1c0 [ 167.804339][T10823] ? clear_bhb_loop+0x55/0xb0 [ 167.809019][T10823] ? clear_bhb_loop+0x55/0xb0 [ 167.813691][T10823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.819743][T10823] RIP: 0033:0x7f4b5685ca3c [ 167.824142][T10823] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 167.843793][T10823] RSP: 002b:00007f4b554d7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 167.852246][T10823] RAX: ffffffffffffffda RBX: 00007f4b56a15f80 RCX: 00007f4b5685ca3c [ 167.860204][T10823] RDX: 000000000000000f RSI: 00007f4b554d70a0 RDI: 0000000000000000 [ 167.868166][T10823] RBP: 00007f4b554d7090 R08: 0000000000000000 R09: 0000000000000000 [ 167.876192][T10823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.884146][T10823] R13: 0000000000000000 R14: 00007f4b56a15f80 R15: 00007ffe21b91aa8 [ 167.892149][T10823] [ 167.960820][T10831] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2587'. [ 168.073703][T10840] loop0: detected capacity change from 0 to 2048 [ 168.097317][T10840] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.155478][T10843] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2588'. [ 168.196583][ T8693] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.206905][T10843] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2588'. [ 168.230684][ T29] kauditd_printk_skb: 722 callbacks suppressed [ 168.230699][ T29] audit: type=1326 audit(1728107913.371:19551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 168.261614][ T29] audit: type=1326 audit(1728107913.371:19552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 168.285368][ T29] audit: type=1326 audit(1728107913.371:19553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 168.309063][ T29] audit: type=1326 audit(1728107913.371:19554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 168.332903][ T29] audit: type=1326 audit(1728107913.371:19555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 168.376352][T10848] cgroup: release_agent respecified [ 168.386541][T10848] netlink: 'syz.1.2594': attribute type 10 has an invalid length. [ 168.444235][ T29] audit: type=1326 audit(1728107913.581:19556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c332dff9 code=0x7ffc0000 [ 168.467851][ T29] audit: type=1326 audit(1728107913.581:19557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6c332dff9 code=0x7ffc0000 [ 168.491449][ T29] audit: type=1326 audit(1728107913.581:19558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c332dff9 code=0x7ffc0000 [ 168.515165][ T29] audit: type=1326 audit(1728107913.581:19559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6c332dff9 code=0x7ffc0000 [ 168.539542][ T29] audit: type=1326 audit(1728107913.581:19560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.2.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c332dff9 code=0x7ffc0000 [ 168.579493][T10857] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2598'. [ 168.586950][T10867] loop0: detected capacity change from 0 to 512 [ 168.610553][T10867] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 168.623257][T10870] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 168.759869][T10889] FAULT_INJECTION: forcing a failure. [ 168.759869][T10889] name failslab, interval 1, probability 0, space 0, times 0 [ 168.772559][T10889] CPU: 1 UID: 0 PID: 10889 Comm: syz.2.2613 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 168.783325][T10889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.793567][T10889] Call Trace: [ 168.796837][T10889] [ 168.799751][T10889] dump_stack_lvl+0xf2/0x150 [ 168.804331][T10889] dump_stack+0x15/0x20 [ 168.808511][T10889] should_fail_ex+0x223/0x230 [ 168.813181][T10889] ? audit_log_start+0x34c/0x6b0 [ 168.818207][T10889] should_failslab+0x8f/0xb0 [ 168.822829][T10889] kmem_cache_alloc_noprof+0x4c/0x290 [ 168.828317][T10889] audit_log_start+0x34c/0x6b0 [ 168.833108][T10889] audit_seccomp+0x4b/0x130 [ 168.837642][T10889] __seccomp_filter+0x6fa/0x1180 [ 168.842621][T10889] ? proc_fail_nth_write+0x12a/0x150 [ 168.847887][T10889] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 168.853559][T10889] ? vfs_write+0x580/0x910 [ 168.856115][T10867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.857965][T10889] __secure_computing+0x9f/0x1c0 [ 168.871194][T10889] syscall_trace_enter+0xd1/0x1f0 [ 168.876294][T10889] do_syscall_64+0xaa/0x1c0 [ 168.880780][T10889] ? clear_bhb_loop+0x55/0xb0 [ 168.885493][T10889] ? clear_bhb_loop+0x55/0xb0 [ 168.890186][T10889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.896146][T10889] RIP: 0033:0x7fd6c332dff9 [ 168.900549][T10889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.920139][T10889] RSP: 002b:00007fd6c1fa1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 168.928564][T10889] RAX: ffffffffffffffda RBX: 00007fd6c34e5f80 RCX: 00007fd6c332dff9 [ 168.936632][T10889] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 00000000000008fd [ 168.944637][T10889] RBP: 00007fd6c1fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 168.952587][T10889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.960586][T10889] R13: 0000000000000000 R14: 00007fd6c34e5f80 R15: 00007ffe2beccac8 [ 168.968625][T10889] [ 168.973562][T10867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.082491][T10901] Cannot find del_set index 0 as target [ 169.162138][T10909] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 169.198955][T10911] loop2: detected capacity change from 0 to 512 [ 169.217667][T10911] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.232274][T10911] syz.2.2622[10911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.232330][T10911] syz.2.2622[10911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.244152][T10911] syz.2.2622[10911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.286840][T10919] loop2: detected capacity change from 0 to 2048 [ 169.357452][T10923] loop2: detected capacity change from 0 to 512 [ 169.364264][T10923] EXT4-fs (loop2): filesystem is read-only [ 169.429665][T10928] loop2: detected capacity change from 0 to 1024 [ 169.446888][T10928] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 169.455046][T10928] System zones: 0-1, 3-12 [ 169.462691][T10927] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 169.471276][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2626'. [ 169.520193][T10933] loop2: detected capacity change from 0 to 1024 [ 169.534334][T10936] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2627'. [ 169.544827][T10936] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2627'. [ 169.563569][T10933] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.584341][T10940] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 169.598032][T10933] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 169.610443][T10933] EXT4-fs (loop2): This should not happen!! Data will be lost [ 169.610443][T10933] [ 169.620093][T10933] EXT4-fs (loop2): Total free blocks count 0 [ 169.626107][T10933] EXT4-fs (loop2): Free/Dirty block details [ 169.632038][T10933] EXT4-fs (loop2): free_blocks=0 [ 169.637007][T10933] EXT4-fs (loop2): dirty_blocks=0 [ 169.642026][T10933] EXT4-fs (loop2): Block reservation details [ 169.647533][T10943] loop1: detected capacity change from 0 to 2048 [ 169.648028][T10933] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 169.708403][T10951] loop0: detected capacity change from 0 to 512 [ 169.747598][T10953] loop2: detected capacity change from 0 to 512 [ 169.760482][T10951] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.779664][T10953] ext4 filesystem being mounted at /171/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.806597][T10959] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.817123][T10951] syz.0.2634[10951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.817260][T10951] syz.0.2634[10951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.832900][T10953] syz.2.2635[10953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.847029][T10951] syz.0.2634[10951] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.859733][T10953] syz.2.2635[10953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.871819][T10953] syz.2.2635[10953] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.937259][T10965] loop0: detected capacity change from 0 to 256 [ 169.955299][T10965] vfat: Unknown parameter 'rºir' [ 169.985377][T10966] loop1: detected capacity change from 0 to 512 [ 170.242116][T10983] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 170.300686][T10985] xt_hashlimit: size too large, truncated to 1048576 [ 170.646113][T10998] loop1: detected capacity change from 0 to 256 [ 170.652688][T10998] vfat: Unknown parameter 'rºir' [ 170.770489][T11000] Cannot find del_set index 0 as target [ 170.863549][T11011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9506 sclass=netlink_route_socket pid=11011 comm=syz.1.2654 [ 171.315498][T11015] loop3: detected capacity change from 0 to 1024 [ 171.327541][T11015] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.341204][T11015] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 171.353489][T11015] EXT4-fs (loop3): This should not happen!! Data will be lost [ 171.353489][T11015] [ 171.363194][T11015] EXT4-fs (loop3): Total free blocks count 0 [ 171.369248][T11015] EXT4-fs (loop3): Free/Dirty block details [ 171.375155][T11015] EXT4-fs (loop3): free_blocks=0 [ 171.380086][T11015] EXT4-fs (loop3): dirty_blocks=0 [ 171.385111][T11015] EXT4-fs (loop3): Block reservation details [ 171.391117][T11015] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 171.544365][T11028] loop3: detected capacity change from 0 to 512 [ 171.558282][T11028] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.589895][T11032] loop3: detected capacity change from 0 to 512 [ 171.596729][T11032] EXT4-fs: Ignoring removed bh option [ 171.602285][T11032] ext4: Unknown parameter 'fsname' [ 171.711482][T11040] loop0: detected capacity change from 0 to 512 [ 171.718272][T11040] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.738454][T11043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2072 sclass=netlink_route_socket pid=11043 comm=syz.3.2663 [ 171.902234][T11046] Cannot find del_set index 0 as target [ 171.927231][T11049] loop3: detected capacity change from 0 to 512 [ 171.933978][T11049] EXT4-fs: Ignoring removed bh option [ 171.939531][T11049] ext4: Unknown parameter 'fsname' [ 171.954413][T11040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.967026][T11040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.449339][T11062] loop2: detected capacity change from 0 to 512 [ 172.467571][T11062] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.497963][T11067] loop2: detected capacity change from 0 to 512 [ 172.499677][T11068] loop0: detected capacity change from 0 to 512 [ 172.511195][T11068] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 172.511629][T11067] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 172.539730][T11068] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 172.539906][T11067] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 172.547696][T11068] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 172.555562][T11067] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e800e118, mo2=0003] [ 172.563822][T11068] System zones: 0-1, 15-15, 18-18, 34-34 [ 172.573433][T11067] System zones: 0-1, 15-15, 18-18, 34-34 [ 172.583437][T11067] EXT4-fs (loop2): orphan cleanup on readonly fs [ 172.589923][T11067] EXT4-fs warning (device loop2): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 172.592978][T11074] loop1: detected capacity change from 0 to 512 [ 172.604666][T11068] EXT4-fs (loop0): orphan cleanup on readonly fs [ 172.611526][T11067] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 172.617432][T11068] EXT4-fs warning (device loop0): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 172.639612][T11067] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2673: bg 0: block 40: padding at end of block bitmap is not set [ 172.646073][T11068] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 172.655219][T11067] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 172.669888][T11068] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2672: bg 0: block 40: padding at end of block bitmap is not set [ 172.669978][T11067] EXT4-fs (loop2): 1 truncate cleaned up [ 172.684439][T11068] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 172.699638][T11068] EXT4-fs (loop0): 1 truncate cleaned up [ 172.705829][T11074] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.726826][T11074] syz.1.2674[11074] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.770711][T11088] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 172.829424][T11093] geneve0: entered promiscuous mode [ 172.843651][T11093] geneve0: left promiscuous mode [ 172.849439][T11098] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 172.869220][T11100] loop0: detected capacity change from 0 to 512 [ 172.907658][T11100] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.919632][T11109] loop3: detected capacity change from 0 to 512 [ 172.927818][T11109] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 172.971542][T11110] Cannot find del_set index 0 as target [ 172.973085][T11116] __nla_validate_parse: 2 callbacks suppressed [ 172.973097][T11116] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2685'. [ 173.000942][T11116] loop0: detected capacity change from 0 to 1024 [ 173.008644][T11116] EXT4-fs: Ignoring removed oldalloc option [ 173.018748][T11116] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 173.075665][T11129] netlink: 1020 bytes leftover after parsing attributes in process `syz.0.2689'. [ 173.076637][T11127] loop2: detected capacity change from 0 to 512 [ 173.092249][T11127] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.102183][T11127] EXT4-fs (loop2): orphan cleanup on readonly fs [ 173.109835][T11127] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 173.128558][T11127] EXT4-fs (loop2): 1 truncate cleaned up [ 173.137964][T11127] hsr_slave_0: left promiscuous mode [ 173.143769][T11127] hsr_slave_1: left promiscuous mode [ 173.161821][T11136] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 173.188549][T11139] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 173.200196][T11109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.210036][T11109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.242482][ T29] kauditd_printk_skb: 707 callbacks suppressed [ 173.242565][ T29] audit: type=1326 audit(1728107918.381:20264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.1.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc7e1524fa7 code=0x7ffc0000 [ 173.273112][ T29] audit: type=1400 audit(1728107918.381:20265): avc: denied { create } for pid=11140 comm="syz.2.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.276891][T11144] cgroup: release_agent respecified [ 173.292879][ T29] audit: type=1400 audit(1728107918.381:20266): avc: denied { setopt } for pid=11140 comm="syz.2.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.301088][T11144] netlink: 'syz.2.2695': attribute type 10 has an invalid length. [ 173.317801][ T29] audit: type=1400 audit(1728107918.381:20267): avc: denied { ioctl } for pid=11140 comm="syz.2.2694" path="socket:[39222]" dev="sockfs" ino=39222 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.317829][ T29] audit: type=1400 audit(1728107918.381:20268): avc: denied { write } for pid=11140 comm="syz.2.2694" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 173.369935][ T29] audit: type=1400 audit(1728107918.381:20269): avc: denied { getopt } for pid=11140 comm="syz.2.2694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.389587][ T29] audit: type=1400 audit(1728107918.381:20270): avc: denied { read } for pid=11140 comm="syz.2.2694" name="uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 173.412727][ T29] audit: type=1400 audit(1728107918.381:20271): avc: denied { open } for pid=11140 comm="syz.2.2694" path="/dev/uhid" dev="devtmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 173.430511][T11150] loop2: detected capacity change from 0 to 512 [ 173.436229][ T29] audit: type=1400 audit(1728107918.381:20272): avc: denied { setattr } for pid=11140 comm="syz.2.2694" name="SCTPv6" dev="sockfs" ino=39222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 173.465440][ T29] audit: type=1326 audit(1728107918.391:20273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11111 comm="syz.1.2684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc7e14c9959 code=0x7ffc0000 [ 173.477918][T11150] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 173.891782][T11165] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 173.909580][T11167] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 174.036400][T11170] loop3: detected capacity change from 0 to 512 [ 174.133101][T11178] loop1: detected capacity change from 0 to 1024 [ 174.140139][T11178] EXT4-fs: dax option not supported [ 174.152406][T11178] pim6reg1: entered promiscuous mode [ 174.153587][T11180] loop4: detected capacity change from 0 to 512 [ 174.157762][T11178] pim6reg1: entered allmulticast mode [ 174.177780][T11180] ext4 filesystem being mounted at /140/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.211897][T11185] loop4: detected capacity change from 0 to 512 [ 174.218915][T11185] EXT4-fs: Ignoring removed bh option [ 174.224540][T11185] ext4: Unknown parameter 'fsname' [ 174.312273][T11195] cgroup: release_agent respecified [ 174.318061][T11195] netlink: 'syz.4.2715': attribute type 10 has an invalid length. [ 174.758502][T11209] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 174.795933][T11211] loop3: detected capacity change from 0 to 1024 [ 174.807848][T11211] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.821163][T11211] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 174.833486][T11211] EXT4-fs (loop3): This should not happen!! Data will be lost [ 174.833486][T11211] [ 174.843223][T11211] EXT4-fs (loop3): Total free blocks count 0 [ 174.849272][T11211] EXT4-fs (loop3): Free/Dirty block details [ 174.855144][T11211] EXT4-fs (loop3): free_blocks=0 [ 174.860178][T11211] EXT4-fs (loop3): dirty_blocks=0 [ 174.865181][T11211] EXT4-fs (loop3): Block reservation details [ 174.871173][T11211] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 174.992462][T11219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2717'. [ 175.009109][T11219] loop4: detected capacity change from 0 to 2048 [ 175.042002][T11223] loop3: detected capacity change from 0 to 512 [ 175.067453][T11223] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.079122][T11223] bpf_get_probe_write_proto: 8 callbacks suppressed [ 175.079131][T11223] syz.3.2724[11223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.085825][T11223] syz.3.2724[11223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.097502][T11223] syz.3.2724[11223] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.133780][T11231] loop3: detected capacity change from 0 to 512 [ 175.152095][T11231] EXT4-fs: dax option not supported [ 175.241605][T11236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2072 sclass=netlink_route_socket pid=11236 comm=syz.1.2725 [ 175.260197][T11238] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.282173][T11240] SELinux: security_context_str_to_sid (ñ) failed with errno=-22 [ 175.453521][T11245] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.544049][T11247] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.600083][T11248] loop2: detected capacity change from 0 to 128 [ 175.666454][T11249] loop4: detected capacity change from 0 to 512 [ 175.963656][T11256] FAULT_INJECTION: forcing a failure. [ 175.963656][T11256] name failslab, interval 1, probability 0, space 0, times 0 [ 175.970855][T11258] 9pnet_fd: Insufficient options for proto=fd [ 175.976254][T11256] CPU: 0 UID: 0 PID: 11256 Comm: syz.1.2735 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 175.976281][T11256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.976293][T11256] Call Trace: [ 175.976299][T11256] [ 175.976305][T11256] dump_stack_lvl+0xf2/0x150 [ 175.976362][T11256] dump_stack+0x15/0x20 [ 176.000429][T11260] loop2: detected capacity change from 0 to 512 [ 176.003273][T11256] should_fail_ex+0x223/0x230 [ 176.029192][T11256] ? __sigqueue_alloc+0xf6/0x180 [ 176.034131][T11256] should_failslab+0x8f/0xb0 [ 176.038715][T11256] kmem_cache_alloc_noprof+0x4c/0x290 [ 176.044116][T11256] __sigqueue_alloc+0xf6/0x180 [ 176.048875][T11256] __send_signal_locked+0x139/0x700 [ 176.054084][T11256] send_signal_locked+0x28f/0x3a0 [ 176.059121][T11256] do_send_sig_info+0x9f/0xf0 [ 176.063805][T11256] group_send_sig_info+0x6d/0x90 [ 176.068789][T11256] bpf_send_signal_common+0x1a5/0x230 [ 176.074243][T11256] bpf_send_signal_thread+0x16/0x20 [ 176.079462][T11256] bpf_prog_b7be628660dc1b90+0x23/0x29 [ 176.084912][T11256] bpf_trace_run2+0x104/0x1d0 [ 176.089658][T11256] ? kernfs_free_fs_context+0x2a/0x50 [ 176.095030][T11256] ? kernfs_free_fs_context+0x2a/0x50 [ 176.100474][T11256] __traceiter_kfree+0x2b/0x50 [ 176.105287][T11256] ? kernfs_free_fs_context+0x2a/0x50 [ 176.110655][T11256] kfree+0x247/0x2f0 [ 176.114629][T11256] kernfs_free_fs_context+0x2a/0x50 [ 176.119943][T11256] cgroup_fs_context_free+0xa4/0xd0 [ 176.125138][T11256] ? __pfx_cgroup_fs_context_free+0x10/0x10 [ 176.131031][T11256] vfs_clean_context+0x74/0x140 [ 176.135875][T11256] __se_sys_fsmount+0x353/0x6a0 [ 176.140850][T11256] __x64_sys_fsmount+0x43/0x50 [ 176.145609][T11256] x64_sys_call+0x2cfb/0x2d60 [ 176.150341][T11256] do_syscall_64+0xc9/0x1c0 [ 176.154913][T11256] ? clear_bhb_loop+0x55/0xb0 [ 176.159630][T11256] ? clear_bhb_loop+0x55/0xb0 [ 176.164335][T11256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.170252][T11256] RIP: 0033:0x7fc7e152dff9 [ 176.174672][T11256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.194351][T11256] RSP: 002b:00007fc7e01a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 176.202756][T11256] RAX: ffffffffffffffda RBX: 00007fc7e16e5f80 RCX: 00007fc7e152dff9 [ 176.210713][T11256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 176.218671][T11256] RBP: 00007fc7e01a7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.226646][T11256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.234616][T11256] R13: 0000000000000000 R14: 00007fc7e16e5f80 R15: 00007ffc1449a6d8 [ 176.242688][T11256] [ 176.264969][T11260] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.278867][T11260] syz.2.2737[11260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.278962][T11260] syz.2.2737[11260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.291533][T11260] syz.2.2737[11260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.462019][T11271] Cannot find del_set index 0 as target [ 176.491923][T11277] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 176.518642][T11273] Cannot find del_set index 0 as target [ 176.648756][T11285] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 176.670208][T11287] loop4: detected capacity change from 0 to 512 [ 176.670509][T11288] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 176.758493][T11291] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2745'. [ 176.770799][T11291] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2745'. [ 177.251287][T11313] pim6reg1: entered promiscuous mode [ 177.251957][T11309] Cannot find del_set index 0 as target [ 177.256613][T11313] pim6reg1: entered allmulticast mode [ 177.278430][T11315] cgroup: release_agent respecified [ 177.287832][T11315] netlink: 'syz.4.2757': attribute type 10 has an invalid length. [ 177.302980][T11317] loop0: detected capacity change from 0 to 512 [ 177.320730][T11317] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.322286][T11319] loop3: detected capacity change from 0 to 1024 [ 177.350578][T11319] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.364310][T11319] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 177.376740][T11319] EXT4-fs (loop3): This should not happen!! Data will be lost [ 177.376740][T11319] [ 177.386502][T11319] EXT4-fs (loop3): Total free blocks count 0 [ 177.392517][T11319] EXT4-fs (loop3): Free/Dirty block details [ 177.398449][T11319] EXT4-fs (loop3): free_blocks=0 [ 177.403472][T11319] EXT4-fs (loop3): dirty_blocks=0 [ 177.408566][T11319] EXT4-fs (loop3): Block reservation details [ 177.414612][T11319] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 177.475785][T11340] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 177.534891][T11352] cgroup: release_agent respecified [ 177.541075][T11352] netlink: 'syz.2.2772': attribute type 10 has an invalid length. [ 177.613880][T11363] loop1: detected capacity change from 0 to 512 [ 177.670565][T11366] loop2: detected capacity change from 0 to 1024 [ 177.687527][T11366] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.700968][T11366] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 177.713346][T11366] EXT4-fs (loop2): This should not happen!! Data will be lost [ 177.713346][T11366] [ 177.723302][T11366] EXT4-fs (loop2): Total free blocks count 0 [ 177.729308][T11366] EXT4-fs (loop2): Free/Dirty block details [ 177.735179][T11366] EXT4-fs (loop2): free_blocks=0 [ 177.740314][T11366] EXT4-fs (loop2): dirty_blocks=0 [ 177.745393][T11366] EXT4-fs (loop2): Block reservation details [ 177.751400][T11366] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 177.967347][T11374] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2778'. [ 177.978392][T11374] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2778'. [ 178.348626][T11389] cgroup: release_agent respecified [ 178.355507][T11389] netlink: 'syz.1.2784': attribute type 10 has an invalid length. [ 178.381789][T11395] loop4: detected capacity change from 0 to 512 [ 178.388653][T11396] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.396925][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 178.396994][ T29] audit: type=1326 audit(1728107923.541:20682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11394 comm="syz.1.2787" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7e152dff9 code=0x0 [ 178.434238][T11400] loop3: detected capacity change from 0 to 256 [ 178.437570][T11395] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.441016][T11400] vfat: Unknown parameter 'rºir' [ 178.463694][T11395] FAULT_INJECTION: forcing a failure. [ 178.463694][T11395] name failslab, interval 1, probability 0, space 0, times 0 [ 178.464610][T11403] loop1: detected capacity change from 0 to 512 [ 178.476409][T11395] CPU: 0 UID: 0 PID: 11395 Comm: syz.4.2786 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 178.493463][T11395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.503517][T11395] Call Trace: [ 178.506784][T11395] [ 178.509772][T11395] dump_stack_lvl+0xf2/0x150 [ 178.514355][T11395] dump_stack+0x15/0x20 [ 178.518562][T11395] should_fail_ex+0x223/0x230 [ 178.523349][T11395] ? __d_alloc+0x3d/0x340 [ 178.527680][T11395] should_failslab+0x8f/0xb0 [ 178.532293][T11395] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 178.538023][T11395] __d_alloc+0x3d/0x340 [ 178.542171][T11395] d_alloc_parallel+0x54/0xc80 [ 178.546928][T11395] ? selinux_inode_permission+0x341/0x410 [ 178.552727][T11395] ? lockref_get_not_dead+0x118/0x1b0 [ 178.558097][T11395] ? down_read+0x171/0x4b0 [ 178.562516][T11395] __lookup_slow+0x8d/0x250 [ 178.567065][T11395] lookup_slow+0x3c/0x60 [ 178.571354][T11395] walk_component+0x1f5/0x230 [ 178.576033][T11395] ? path_lookupat+0xfd/0x2b0 [ 178.580723][T11395] path_lookupat+0x10a/0x2b0 [ 178.585306][T11395] filename_lookup+0x127/0x300 [ 178.590116][T11395] user_path_at+0x3c/0x110 [ 178.594526][T11395] __se_sys_mount+0x248/0x2d0 [ 178.599252][T11395] __x64_sys_mount+0x67/0x80 [ 178.603847][T11395] x64_sys_call+0x203e/0x2d60 [ 178.608516][T11395] do_syscall_64+0xc9/0x1c0 [ 178.613083][T11395] ? clear_bhb_loop+0x55/0xb0 [ 178.617771][T11395] ? clear_bhb_loop+0x55/0xb0 [ 178.622450][T11395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.628352][T11395] RIP: 0033:0x7fd31390dff9 [ 178.632874][T11395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.652471][T11395] RSP: 002b:00007fd312581038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 178.660872][T11395] RAX: ffffffffffffffda RBX: 00007fd313ac5f80 RCX: 00007fd31390dff9 [ 178.668888][T11395] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 178.676864][T11395] RBP: 00007fd312581090 R08: 0000000020000f80 R09: 0000000000000000 [ 178.684819][T11395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.692774][T11395] R13: 0000000000000000 R14: 00007fd313ac5f80 R15: 00007ffcb9d78498 [ 178.700735][T11395] [ 178.704034][ T29] audit: type=1400 audit(1728107923.621:20683): avc: denied { write } for pid=11404 comm="syz.0.2790" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 178.727209][ T29] audit: type=1400 audit(1728107923.621:20684): avc: denied { open } for pid=11404 comm="syz.0.2790" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 178.779264][ T29] audit: type=1400 audit(1728107923.911:20685): avc: denied { ioctl } for pid=11404 comm="syz.0.2790" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 178.801591][T11409] 9pnet: Could not find request transport: r [ 178.804108][ T29] audit: type=1400 audit(1728107923.921:20686): avc: denied { mounton } for pid=11408 comm="syz.3.2793" path="/138/file0" dev="tmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 178.847170][ T29] audit: type=1326 audit(1728107923.991:20687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11412 comm="syz.4.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31390dff9 code=0x7ffc0000 [ 178.852809][T11413] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 178.871014][ T29] audit: type=1326 audit(1728107923.991:20688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11412 comm="syz.4.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31390dff9 code=0x7ffc0000 [ 178.908515][ T29] audit: type=1326 audit(1728107923.991:20689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11412 comm="syz.4.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd31390dff9 code=0x7ffc0000 [ 178.932484][ T29] audit: type=1326 audit(1728107923.991:20690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11412 comm="syz.4.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd31390dff9 code=0x7ffc0000 [ 178.934082][T11417] 9pnet: Could not find request transport: r [ 178.956199][ T29] audit: type=1326 audit(1728107923.991:20691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11412 comm="syz.4.2792" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd31390dff9 code=0x7ffc0000 [ 179.015042][T11413] loop4: detected capacity change from 0 to 512 [ 179.027772][T11426] loop2: detected capacity change from 0 to 1024 [ 179.047316][T11426] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.047584][T11430] loop4: detected capacity change from 0 to 256 [ 179.061190][T11426] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 179.064338][T11430] vfat: Unknown parameter 'rºir' [ 179.076332][T11426] EXT4-fs (loop2): This should not happen!! Data will be lost [ 179.076332][T11426] [ 179.076349][T11426] EXT4-fs (loop2): Total free blocks count 0 [ 179.076361][T11426] EXT4-fs (loop2): Free/Dirty block details [ 179.102959][T11426] EXT4-fs (loop2): free_blocks=0 [ 179.107909][T11426] EXT4-fs (loop2): dirty_blocks=0 [ 179.112939][T11426] EXT4-fs (loop2): Block reservation details [ 179.118955][T11426] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 179.146502][T11437] SET target dimension over the limit! [ 179.157801][T11439] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 179.244699][T11445] pim6reg: entered allmulticast mode [ 179.257771][T11444] pim6reg: left allmulticast mode [ 179.286028][T11446] Cannot find del_set index 0 as target [ 179.295328][T11448] loop4: detected capacity change from 0 to 512 [ 179.358368][T11452] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 179.366279][T11453] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2805'. [ 179.377058][T11453] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2805'. [ 179.430915][T11459] loop1: detected capacity change from 0 to 1024 [ 179.448800][T11459] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.466010][T11459] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 179.478403][T11459] EXT4-fs (loop1): This should not happen!! Data will be lost [ 179.478403][T11459] [ 179.488110][T11459] EXT4-fs (loop1): Total free blocks count 0 [ 179.494164][T11459] EXT4-fs (loop1): Free/Dirty block details [ 179.500145][T11459] EXT4-fs (loop1): free_blocks=0 [ 179.505074][T11459] EXT4-fs (loop1): dirty_blocks=0 [ 179.510239][T11459] EXT4-fs (loop1): Block reservation details [ 179.516239][T11459] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 179.574670][T11467] loop1: detected capacity change from 0 to 256 [ 179.581465][T11467] vfat: Unknown parameter 'rºir' [ 179.640406][T11473] FAULT_INJECTION: forcing a failure. [ 179.640406][T11473] name failslab, interval 1, probability 0, space 0, times 0 [ 179.653167][T11473] CPU: 0 UID: 0 PID: 11473 Comm: syz.1.2817 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 179.664017][T11473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.674069][T11473] Call Trace: [ 179.677382][T11473] [ 179.680307][T11473] dump_stack_lvl+0xf2/0x150 [ 179.684953][T11473] dump_stack+0x15/0x20 [ 179.689173][T11473] should_fail_ex+0x223/0x230 [ 179.693886][T11473] ? fasync_alloc+0x26/0x30 [ 179.698388][T11473] should_failslab+0x8f/0xb0 [ 179.702977][T11473] kmem_cache_alloc_noprof+0x4c/0x290 [ 179.708361][T11473] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 179.714003][T11473] fasync_alloc+0x26/0x30 [ 179.718346][T11473] fcntl_setlease+0x220/0x300 [ 179.723130][T11473] do_fcntl+0x471/0xd70 [ 179.727532][T11473] __se_sys_fcntl+0xbf/0x1b0 [ 179.732205][T11473] __x64_sys_fcntl+0x43/0x50 [ 179.736807][T11473] x64_sys_call+0x209e/0x2d60 [ 179.741621][T11473] do_syscall_64+0xc9/0x1c0 [ 179.746128][T11473] ? clear_bhb_loop+0x55/0xb0 [ 179.750823][T11473] ? clear_bhb_loop+0x55/0xb0 [ 179.755531][T11473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.761521][T11473] RIP: 0033:0x7fc7e152dff9 [ 179.765932][T11473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.785612][T11473] RSP: 002b:00007fc7e01a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 179.794076][T11473] RAX: ffffffffffffffda RBX: 00007fc7e16e5f80 RCX: 00007fc7e152dff9 [ 179.802026][T11473] RDX: 0000000000000001 RSI: 0000000000000400 RDI: 0000000000000004 [ 179.809981][T11473] RBP: 00007fc7e01a7090 R08: 0000000000000000 R09: 0000000000000000 [ 179.817935][T11473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.825931][T11473] R13: 0000000000000000 R14: 00007fc7e16e5f80 R15: 00007ffc1449a6d8 [ 179.831934][T11476] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 179.833899][T11473] [ 179.859776][T11480] syz.0.2820[11480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.859832][T11480] syz.0.2820[11480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.874767][T11480] syz.0.2820[11480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 179.929594][T11486] loop2: detected capacity change from 0 to 512 [ 179.959725][T11483] Cannot find del_set index 0 as target [ 180.010367][T11494] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 180.025138][T11491] loop4: detected capacity change from 0 to 512 [ 180.043455][T11491] EXT4-fs: Ignoring removed bh option [ 180.053087][T11491] ext4: Unknown parameter 'fsname' [ 180.073500][T11496] 9pnet_fd: p9_fd_create_unix (11496): problem connecting socket: éq‰Y’3aK: -111 [ 180.131406][T11501] FAULT_INJECTION: forcing a failure. [ 180.131406][T11501] name failslab, interval 1, probability 0, space 0, times 0 [ 180.144519][T11501] CPU: 0 UID: 0 PID: 11501 Comm: syz.3.2829 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 180.155290][T11501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 180.165399][T11501] Call Trace: [ 180.168677][T11501] [ 180.171599][T11501] dump_stack_lvl+0xf2/0x150 [ 180.176218][T11501] dump_stack+0x15/0x20 [ 180.180380][T11501] should_fail_ex+0x223/0x230 [ 180.185067][T11501] ? iter_file_splice_write+0x102/0x980 [ 180.190710][T11501] should_failslab+0x8f/0xb0 [ 180.195396][T11501] __kmalloc_noprof+0xa5/0x370 [ 180.200214][T11501] iter_file_splice_write+0x102/0x980 [ 180.205586][T11501] ? __traceiter_kfree+0x2b/0x50 [ 180.210577][T11501] ? copy_splice_read+0x597/0x5d0 [ 180.215647][T11501] ? __pfx_iter_file_splice_write+0x10/0x10 [ 180.221624][T11501] direct_splice_actor+0x160/0x2c0 [ 180.222936][T11503] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2830'. [ 180.226803][T11501] splice_direct_to_actor+0x302/0x670 [ 180.226831][T11501] ? __pfx_direct_splice_actor+0x10/0x10 [ 180.236911][T11504] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 180.241168][T11501] do_splice_direct+0xd7/0x150 [ 180.248590][T11504] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 180.254243][T11501] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 180.272003][T11501] do_sendfile+0x39b/0x970 [ 180.274826][T11507] syz.4.2831[11507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.276420][T11501] __x64_sys_sendfile64+0x110/0x150 [ 180.276450][T11501] x64_sys_call+0xed5/0x2d60 [ 180.297651][T11501] do_syscall_64+0xc9/0x1c0 [ 180.298124][T11507] syz.4.2831[11507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.302144][T11501] ? clear_bhb_loop+0x55/0xb0 [ 180.317954][T11507] syz.4.2831[11507] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 180.318145][T11501] ? clear_bhb_loop+0x55/0xb0 [ 180.334178][T11501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.340091][T11501] RIP: 0033:0x7f9e620fdff9 [ 180.344521][T11501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.359500][T11513] netlink: 'syz.4.2833': attribute type 10 has an invalid length. [ 180.364202][T11501] RSP: 002b:00007f9e60d71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 180.380367][T11501] RAX: ffffffffffffffda RBX: 00007f9e622b5f80 RCX: 00007f9e620fdff9 [ 180.388349][T11501] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 180.396352][T11501] RBP: 00007f9e60d71090 R08: 0000000000000000 R09: 0000000000000000 [ 180.404361][T11501] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 180.412317][T11501] R13: 0000000000000000 R14: 00007f9e622b5f80 R15: 00007ffff13ed3d8 [ 180.420341][T11501] [ 180.503664][T11523] loop3: detected capacity change from 0 to 164 [ 180.512036][T11523] Unable to read rock-ridge attributes [ 180.540067][T11523] Unable to read rock-ridge attributes [ 180.583158][T11534] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.592882][T11520] Cannot find del_set index 0 as target [ 180.648927][T11537] loop0: detected capacity change from 0 to 512 [ 180.680857][T11538] loop4: detected capacity change from 0 to 512 [ 180.721745][T11538] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.803915][T11552] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 180.918511][T11556] loop4: detected capacity change from 0 to 512 [ 181.080036][T11563] loop1: detected capacity change from 0 to 1024 [ 181.086693][T11563] EXT4-fs: dax option not supported [ 181.097062][T11563] pim6reg1: entered promiscuous mode [ 181.102373][T11563] pim6reg1: entered allmulticast mode [ 181.162797][T11566] loop1: detected capacity change from 0 to 256 [ 181.197135][T11572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2852'. [ 181.206691][T11572] netlink: 'syz.1.2852': attribute type 14 has an invalid length. [ 181.250351][T11578] loop2: detected capacity change from 0 to 512 [ 181.278220][T11578] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.311485][T11582] loop2: detected capacity change from 0 to 256 [ 181.318072][T11582] vfat: Unknown parameter 'rºir' [ 181.423282][T11592] loop3: detected capacity change from 0 to 1024 [ 181.430572][T11592] EXT4-fs: dax option not supported [ 181.440698][T11594] loop0: detected capacity change from 0 to 512 [ 181.440780][T11592] pim6reg1: entered promiscuous mode [ 181.448173][T11594] EXT4-fs: Ignoring removed bh option [ 181.452297][T11592] pim6reg1: entered allmulticast mode [ 181.458603][T11594] ext4: Unknown parameter 'fsname' [ 181.494946][T11598] FAULT_INJECTION: forcing a failure. [ 181.494946][T11598] name failslab, interval 1, probability 0, space 0, times 0 [ 181.507680][T11598] CPU: 0 UID: 0 PID: 11598 Comm: syz.2.2864 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 181.518511][T11598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.528619][T11598] Call Trace: [ 181.531893][T11598] [ 181.534827][T11598] dump_stack_lvl+0xf2/0x150 [ 181.539417][T11598] dump_stack+0x15/0x20 [ 181.543673][T11598] should_fail_ex+0x223/0x230 [ 181.548381][T11598] ? audit_log_start+0x34c/0x6b0 [ 181.553325][T11598] should_failslab+0x8f/0xb0 [ 181.557929][T11598] kmem_cache_alloc_noprof+0x4c/0x290 [ 181.563381][T11598] audit_log_start+0x34c/0x6b0 [ 181.568137][T11598] audit_seccomp+0x4b/0x130 [ 181.572760][T11598] __seccomp_filter+0x6fa/0x1180 [ 181.577828][T11598] ? proc_fail_nth_write+0x12a/0x150 [ 181.583105][T11598] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 181.588730][T11598] ? vfs_write+0x580/0x910 [ 181.593141][T11598] ? __fget_files+0x1d4/0x210 [ 181.597855][T11598] __secure_computing+0x9f/0x1c0 [ 181.602855][T11598] syscall_trace_enter+0xd1/0x1f0 [ 181.607958][T11598] ? fpregs_assert_state_consistent+0x83/0xa0 [ 181.614025][T11598] do_syscall_64+0xaa/0x1c0 [ 181.618516][T11598] ? clear_bhb_loop+0x55/0xb0 [ 181.623227][T11598] ? clear_bhb_loop+0x55/0xb0 [ 181.627900][T11598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.633807][T11598] RIP: 0033:0x7fd6c332dff9 [ 181.638212][T11598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.657860][T11598] RSP: 002b:00007fd6c1fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 181.666356][T11598] RAX: ffffffffffffffda RBX: 00007fd6c34e5f80 RCX: 00007fd6c332dff9 [ 181.674400][T11598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 181.682357][T11598] RBP: 00007fd6c1fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 181.690498][T11598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.698457][T11598] R13: 0000000000000000 R14: 00007fd6c34e5f80 R15: 00007ffe2beccac8 [ 181.706473][T11598] [ 181.724068][T11600] loop0: detected capacity change from 0 to 128 [ 181.732314][T11602] syz.4.2866[11602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.732463][T11602] syz.4.2866[11602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.738500][T11604] loop2: detected capacity change from 0 to 256 [ 181.756269][T11602] syz.4.2866[11602] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.762012][T11604] vfat: Unknown parameter 'rºir' [ 181.798903][T11600] ext4 filesystem being mounted at /181/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 181.802511][T11610] loop2: detected capacity change from 0 to 512 [ 181.858028][T11610] ext4 filesystem being mounted at /238/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.872891][T11623] loop4: detected capacity change from 0 to 512 [ 181.881230][T11623] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 181.924147][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'. [ 182.000890][T11637] loop2: detected capacity change from 0 to 256 [ 182.007767][T11637] vfat: Unknown parameter 'rºir' [ 182.009169][T11617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2873'. [ 182.038615][T11639] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 182.097173][T11643] FAULT_INJECTION: forcing a failure. [ 182.097173][T11643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.110280][T11643] CPU: 1 UID: 0 PID: 11643 Comm: syz.1.2882 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 182.121045][T11643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 182.121063][T11643] Call Trace: [ 182.121069][T11643] [ 182.121077][T11643] dump_stack_lvl+0xf2/0x150 [ 182.135261][T11647] loop2: detected capacity change from 0 to 512 [ 182.137293][T11643] dump_stack+0x15/0x20 [ 182.137331][T11643] should_fail_ex+0x223/0x230 [ 182.143153][T11647] EXT4-fs: Ignoring removed bh option [ 182.148113][T11643] should_fail+0xb/0x10 [ 182.148142][T11643] should_fail_usercopy+0x1a/0x20 [ 182.153179][T11647] ext4: Unknown parameter 'fsname' [ 182.156940][T11643] _copy_from_user+0x1e/0xd0 [ 182.156966][T11643] move_addr_to_kernel+0x82/0x120 [ 182.156990][T11643] __sys_connect+0x74/0x1b0 [ 182.164231][T11623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.166480][T11643] __x64_sys_connect+0x41/0x50 [ 182.166509][T11643] x64_sys_call+0x2220/0x2d60 [ 182.208517][T11643] do_syscall_64+0xc9/0x1c0 [ 182.213053][T11643] ? clear_bhb_loop+0x55/0xb0 [ 182.217744][T11643] ? clear_bhb_loop+0x55/0xb0 [ 182.222430][T11643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.228376][T11643] RIP: 0033:0x7fc7e152dff9 [ 182.232912][T11643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.252665][T11643] RSP: 002b:00007fc7e01a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 182.252685][T11643] RAX: ffffffffffffffda RBX: 00007fc7e16e5f80 RCX: 00007fc7e152dff9 [ 182.252697][T11643] RDX: 0000000000000010 RSI: 0000000020772000 RDI: 0000000000000009 [ 182.252709][T11643] RBP: 00007fc7e01a7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.252720][T11643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.252730][T11643] R13: 0000000000000000 R14: 00007fc7e16e5f80 R15: 00007ffc1449a6d8 [ 182.300986][T11643] [ 182.305009][T11623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.338570][T11654] loop1: detected capacity change from 0 to 512 [ 182.361517][T11654] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.423977][T11660] loop1: detected capacity change from 0 to 512 [ 182.437229][T11658] IPVS: You probably need to specify IP address on multicast interface. [ 182.445976][T11658] IPVS: Error connecting to the multicast addr [ 182.467016][T11664] loop2: detected capacity change from 0 to 256 [ 182.473521][T11664] vfat: Unknown parameter 'rºir' [ 182.492388][T11660] EXT4-fs (loop1): too many log groups per flexible block group [ 182.497162][T11668] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 182.500193][T11660] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 182.512372][T11662] IPVS: You probably need to specify IP address on multicast interface. [ 182.517601][T11660] EXT4-fs (loop1): mount failed [ 182.530019][T11662] IPVS: Error connecting to the multicast addr [ 182.562121][T11670] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 182.562865][T11672] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 182.582841][T11670] loop2: detected capacity change from 0 to 1024 [ 182.602218][T11670] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 182.607046][T11678] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 182.672728][T11680] loop2: detected capacity change from 0 to 1024 [ 182.679529][T11680] EXT4-fs: dax option not supported [ 182.709639][T11680] pim6reg1: entered promiscuous mode [ 182.715150][T11680] pim6reg1: entered allmulticast mode [ 182.725690][T11684] loop0: detected capacity change from 0 to 512 [ 182.761259][T11684] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.796790][T11689] loop0: detected capacity change from 0 to 1024 [ 182.803537][T11689] EXT4-fs: quotafile must be on filesystem root [ 182.815485][T11689] 9pnet_virtio: no channels available for device [ 182.836301][T11687] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 182.845210][T11687] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 182.903304][T11697] loop4: detected capacity change from 0 to 256 [ 182.909988][T11697] vfat: Unknown parameter 'rºir' [ 182.936435][T11703] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 182.960545][T11702] netlink: 'syz.4.2906': attribute type 10 has an invalid length. [ 183.002430][T11710] loop2: detected capacity change from 0 to 1024 [ 183.017673][T11710] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.020528][T11709] 9pnet: Could not find request transport: r [ 183.033904][T11710] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 183.046651][T11710] EXT4-fs (loop2): This should not happen!! Data will be lost [ 183.046651][T11710] [ 183.056312][T11710] EXT4-fs (loop2): Total free blocks count 0 [ 183.062323][T11710] EXT4-fs (loop2): Free/Dirty block details [ 183.068233][T11710] EXT4-fs (loop2): free_blocks=0 [ 183.073172][T11710] EXT4-fs (loop2): dirty_blocks=0 [ 183.078223][T11710] EXT4-fs (loop2): Block reservation details [ 183.079413][T11720] loop1: detected capacity change from 0 to 1024 [ 183.084185][T11710] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 183.092030][T11720] EXT4-fs: dax option not supported [ 183.133511][T11724] loop2: detected capacity change from 0 to 512 [ 183.140335][T11724] EXT4-fs: Ignoring removed bh option [ 183.145771][T11724] ext4: Unknown parameter 'fsname' [ 183.181116][T11731] loop4: detected capacity change from 0 to 512 [ 183.188781][T11731] EXT4-fs: Ignoring removed orlov option [ 183.195122][T11731] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.209669][T11732] loop1: detected capacity change from 0 to 512 [ 183.216350][T11731] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.231205][T11732] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 183.241204][T11736] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 183.303981][T11739] loop2: detected capacity change from 0 to 512 [ 183.424409][T11745] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 183.448531][T11747] loop4: detected capacity change from 0 to 128 [ 183.455337][T11747] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 183.464931][T11732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.476069][T11732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.482398][T11749] 9pnet: Could not find request transport: r [ 183.488838][ T29] kauditd_printk_skb: 1149 callbacks suppressed [ 183.488850][ T29] audit: type=1400 audit(1728107928.621:21839): avc: denied { setopt } for pid=11746 comm="syz.4.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 183.516755][ T29] audit: type=1400 audit(1728107928.621:21840): avc: denied { getopt } for pid=11746 comm="syz.4.2921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 183.541764][ T29] audit: type=1400 audit(1728107928.681:21841): avc: denied { mounton } for pid=11746 comm="syz.4.2921" path="/183/file0/file0" dev="loop4" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 183.565099][ T29] audit: type=1400 audit(1728107928.691:21842): avc: denied { create } for pid=11752 comm="syz.3.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.584758][ T29] audit: type=1400 audit(1728107928.691:21843): avc: denied { write } for pid=11752 comm="syz.3.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 183.663677][T11762] loop3: detected capacity change from 0 to 1024 [ 183.670388][T11762] EXT4-fs: dax option not supported [ 183.800256][T11768] Cannot find del_set index 0 as target [ 183.809689][T11769] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2927'. [ 183.819389][T11769] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2927'. [ 184.091133][T11781] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 184.325558][T11788] loop1: detected capacity change from 0 to 2048 [ 184.340113][T11791] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 184.350201][T11791] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 184.452074][T11798] loop2: detected capacity change from 0 to 1024 [ 184.459900][T11798] EXT4-fs: dax option not supported [ 184.547405][T11803] loop2: detected capacity change from 0 to 1024 [ 184.577867][T11803] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.591605][T11803] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 184.603956][T11803] EXT4-fs (loop2): This should not happen!! Data will be lost [ 184.603956][T11803] [ 184.613598][T11803] EXT4-fs (loop2): Total free blocks count 0 [ 184.619686][T11803] EXT4-fs (loop2): Free/Dirty block details [ 184.625578][T11803] EXT4-fs (loop2): free_blocks=0 [ 184.630539][T11803] EXT4-fs (loop2): dirty_blocks=0 [ 184.635564][T11803] EXT4-fs (loop2): Block reservation details [ 184.641605][T11803] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 184.701580][T11814] loop2: detected capacity change from 0 to 512 [ 184.714306][T11814] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 184.738999][T11813] loop4: detected capacity change from 0 to 1024 [ 184.759456][T11813] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.796362][T11813] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 184.808673][T11813] EXT4-fs (loop4): This should not happen!! Data will be lost [ 184.808673][T11813] [ 184.818347][T11813] EXT4-fs (loop4): Total free blocks count 0 [ 184.824322][T11813] EXT4-fs (loop4): Free/Dirty block details [ 184.830302][T11813] EXT4-fs (loop4): free_blocks=0 [ 184.835250][T11813] EXT4-fs (loop4): dirty_blocks=0 [ 184.840281][T11813] EXT4-fs (loop4): Block reservation details [ 184.846405][T11813] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 184.930814][T11824] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 184.949530][T11814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.959065][T11814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.976122][T11828] loop0: detected capacity change from 0 to 256 [ 184.986223][T11828] vfat: Unknown parameter 'rºir' [ 184.993040][T11797] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 185.009348][T11797] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 185.021868][T11797] EXT4-fs (loop1): This should not happen!! Data will be lost [ 185.021868][T11797] [ 185.031527][T11797] EXT4-fs (loop1): Total free blocks count 0 [ 185.037749][T11797] EXT4-fs (loop1): Free/Dirty block details [ 185.043731][T11797] EXT4-fs (loop1): free_blocks=2415919104 [ 185.049473][T11797] EXT4-fs (loop1): dirty_blocks=8192 [ 185.054778][T11797] EXT4-fs (loop1): Block reservation details [ 185.060788][T11797] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 185.080326][T11797] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 185.082120][T11834] loop4: detected capacity change from 0 to 1024 [ 185.093060][T11797] EXT4-fs (loop1): This should not happen!! Data will be lost [ 185.093060][T11797] [ 185.102652][T11834] EXT4-fs: dax option not supported [ 185.209683][T11847] loop1: detected capacity change from 0 to 1024 [ 185.228601][T11847] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.239571][T11851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2950'. [ 185.258168][T11851] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2950'. [ 185.315890][T11847] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 185.328492][T11847] EXT4-fs (loop1): This should not happen!! Data will be lost [ 185.328492][T11847] [ 185.338165][T11847] EXT4-fs (loop1): Total free blocks count 0 [ 185.344164][T11847] EXT4-fs (loop1): Free/Dirty block details [ 185.350081][T11847] EXT4-fs (loop1): free_blocks=0 [ 185.355026][T11847] EXT4-fs (loop1): dirty_blocks=0 [ 185.360073][T11847] EXT4-fs (loop1): Block reservation details [ 185.366147][T11847] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 185.393392][T11858] Cannot find del_set index 0 as target [ 185.583803][T11872] loop0: detected capacity change from 0 to 256 [ 185.629074][T11872] vfat: Unknown parameter 'rºir' [ 185.715207][ T29] audit: type=1326 audit(1728107930.851:21844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e152dff9 code=0x7ffc0000 [ 185.738921][ T29] audit: type=1326 audit(1728107930.851:21845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e152dff9 code=0x7ffc0000 [ 185.762671][ T29] audit: type=1326 audit(1728107930.851:21846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fc7e152dff9 code=0x7ffc0000 [ 185.786306][ T29] audit: type=1326 audit(1728107930.851:21847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e152dff9 code=0x7ffc0000 [ 185.810012][ T29] audit: type=1326 audit(1728107930.851:21848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11877 comm="syz.1.2965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7e152dff9 code=0x7ffc0000 [ 185.821354][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2965'. [ 185.885938][T11886] SELinux: Context system_u:object_r:dpkg_var_lib_t:s0 is not valid (left unmapped). [ 186.048473][T11900] loop2: detected capacity change from 0 to 128 [ 186.058330][T11894] loop1: detected capacity change from 0 to 512 [ 186.066670][T11894] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 186.091489][T11894] EXT4-fs (loop1): 1 truncate cleaned up [ 186.101340][T11903] FAULT_INJECTION: forcing a failure. [ 186.101340][T11903] name failslab, interval 1, probability 0, space 0, times 0 [ 186.113994][T11903] CPU: 0 UID: 0 PID: 11903 Comm: +}[@ Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 186.124244][T11903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 186.134381][T11903] Call Trace: [ 186.137661][T11903] [ 186.137656][T11907] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 186.148614][T11903] dump_stack_lvl+0xf2/0x150 [ 186.153228][T11903] dump_stack+0x15/0x20 [ 186.157440][T11903] should_fail_ex+0x223/0x230 [ 186.162253][T11903] ? gen_new_estimator+0x11f/0x430 [ 186.167354][T11903] should_failslab+0x8f/0xb0 [ 186.171937][T11903] __kmalloc_cache_noprof+0x4b/0x2a0 [ 186.177213][T11903] ? pcpu_block_update_hint_alloc+0x67e/0x6a0 [ 186.183361][T11903] gen_new_estimator+0x11f/0x430 [ 186.188305][T11903] ? should_fail_ex+0xd7/0x230 [ 186.193055][T11903] ? sized_strscpy+0x13a/0x170 [ 186.197803][T11903] xt_rateest_tg_checkentry+0x21c/0x550 [ 186.203397][T11903] xt_check_target+0x266/0x480 [ 186.208189][T11903] ? strnlen+0x28/0x50 [ 186.212239][T11903] ? xt_find_target+0x1bd/0x1e0 [ 186.217129][T11903] ? xt_find_target+0x19e/0x1e0 [ 186.221960][T11903] translate_table+0xdc0/0x1090 [ 186.226800][T11903] do_arpt_set_ctl+0x876/0xa20 [ 186.231554][T11903] ? kstrtoull+0x110/0x140 [ 186.235971][T11903] ? tcp_release_cb+0xfe/0x380 [ 186.240761][T11903] ? _raw_spin_unlock_bh+0x36/0x40 [ 186.245870][T11903] nf_setsockopt+0x195/0x1b0 [ 186.250515][T11903] ip_setsockopt+0xea/0x100 [ 186.255064][T11903] tcp_setsockopt+0x93/0xb0 [ 186.259561][T11903] sock_common_setsockopt+0x64/0x80 [ 186.264828][T11903] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 186.270774][T11903] __sys_setsockopt+0x1cc/0x240 [ 186.275723][T11903] __x64_sys_setsockopt+0x66/0x80 [ 186.280805][T11903] x64_sys_call+0x278d/0x2d60 [ 186.285473][T11903] do_syscall_64+0xc9/0x1c0 [ 186.290017][T11903] ? clear_bhb_loop+0x55/0xb0 [ 186.294703][T11903] ? clear_bhb_loop+0x55/0xb0 [ 186.299382][T11903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.305347][T11903] RIP: 0033:0x7fd6c332dff9 [ 186.309758][T11903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.329567][T11903] RSP: 002b:00007fd6c1fa1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 186.337970][T11903] RAX: ffffffffffffffda RBX: 00007fd6c34e5f80 RCX: 00007fd6c332dff9 [ 186.345934][T11903] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000006 [ 186.353896][T11903] RBP: 00007fd6c1fa1090 R08: 0000000000000438 R09: 0000000000000000 [ 186.361853][T11903] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.369910][T11903] R13: 0000000000000000 R14: 00007fd6c34e5f80 R15: 00007ffe2beccac8 [ 186.377874][T11903] [ 186.528778][T11918] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 186.563850][T11922] loop4: detected capacity change from 0 to 1024 [ 186.638141][T11922] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.651369][T11922] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 186.663664][T11922] EXT4-fs (loop4): This should not happen!! Data will be lost [ 186.663664][T11922] [ 186.673429][T11922] EXT4-fs (loop4): Total free blocks count 0 [ 186.673446][T11927] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 186.679468][T11922] EXT4-fs (loop4): Free/Dirty block details [ 186.679482][T11922] EXT4-fs (loop4): free_blocks=0 [ 186.679494][T11922] EXT4-fs (loop4): dirty_blocks=0 [ 186.687021][T11927] vhci_hcd: default hub control req: d300 v0000 i0000 l0 [ 186.692739][T11922] EXT4-fs (loop4): Block reservation details [ 186.715854][T11922] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 186.758531][T11935] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2984'. [ 186.796863][T11938] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 186.801320][T11935] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2984'. [ 186.818096][T11939] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 186.969224][T11948] netlink: 'syz.2.2991': attribute type 29 has an invalid length. [ 186.977133][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'. [ 186.991858][T11948] netlink: 'syz.2.2991': attribute type 29 has an invalid length. [ 186.999858][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'. [ 187.442121][T11970] block device autoloading is deprecated and will be removed. [ 187.550430][T11979] FAULT_INJECTION: forcing a failure. [ 187.550430][T11979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.552193][T11977] loop4: detected capacity change from 0 to 1024 [ 187.563573][T11979] CPU: 1 UID: 0 PID: 11979 Comm: syz.3.2999 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 187.578151][T11977] EXT4-fs: dax option not supported [ 187.580609][T11979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.580624][T11979] Call Trace: [ 187.580631][T11979] [ 187.591466][T11977] pim6reg1: entered promiscuous mode [ 187.595828][T11979] dump_stack_lvl+0xf2/0x150 [ 187.599150][T11977] pim6reg1: entered allmulticast mode [ 187.602000][T11979] dump_stack+0x15/0x20 [ 187.621385][T11979] should_fail_ex+0x223/0x230 [ 187.626165][T11979] should_fail+0xb/0x10 [ 187.630326][T11979] should_fail_usercopy+0x1a/0x20 [ 187.635478][T11979] _copy_from_user+0x1e/0xd0 [ 187.640131][T11979] copy_msghdr_from_user+0x54/0x2a0 [ 187.645394][T11979] __sys_sendmmsg+0x21a/0x500 [ 187.650196][T11979] __x64_sys_sendmmsg+0x57/0x70 [ 187.655186][T11979] x64_sys_call+0xa49/0x2d60 [ 187.659782][T11979] do_syscall_64+0xc9/0x1c0 [ 187.664296][T11979] ? clear_bhb_loop+0x55/0xb0 [ 187.668995][T11979] ? clear_bhb_loop+0x55/0xb0 [ 187.673761][T11979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.679669][T11979] RIP: 0033:0x7f9e620fdff9 [ 187.684151][T11979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.703742][T11979] RSP: 002b:00007f9e60d50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 187.712134][T11979] RAX: ffffffffffffffda RBX: 00007f9e622b6058 RCX: 00007f9e620fdff9 [ 187.720121][T11979] RDX: 0000000000000651 RSI: 0000000020000000 RDI: 0000000000000009 [ 187.728170][T11979] RBP: 00007f9e60d50090 R08: 0000000000000000 R09: 0000000000000000 [ 187.736127][T11979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.744122][T11979] R13: 0000000000000000 R14: 00007f9e622b6058 R15: 00007ffff13ed3d8 [ 187.752150][T11979] [ 187.793131][T11986] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 187.895718][T11993] Cannot find del_set index 0 as target [ 187.933803][T12000] loop1: detected capacity change from 0 to 512 [ 187.986504][T12003] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2072 sclass=netlink_route_socket pid=12003 comm=syz.3.3006 [ 188.027409][T12013] blktrace: Concurrent blktraces are not allowed on loop5 [ 188.140040][T12029] capability: warning: `syz.4.3022' uses deprecated v2 capabilities in a way that may be insecure [ 188.209526][T12033] loop2: detected capacity change from 0 to 512 [ 188.250891][T12036] Cannot find del_set index 0 as target [ 188.254160][T12033] EXT4-fs mount: 98 callbacks suppressed [ 188.254174][T12033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.274619][T12033] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.294608][T12033] Process accounting resumed [ 188.300632][T12033] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 188.303071][T12041] blktrace: Concurrent blktraces are not allowed on loop9 [ 188.318990][T12033] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3024'. [ 188.339196][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.353028][T12043] blktrace: Concurrent blktraces are not allowed on loop9 [ 188.372453][T12049] syz.2.3028[12049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.372523][T12049] syz.2.3028[12049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.384290][T12049] syz.2.3028[12049] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.477350][T12059] netlink: 'syz.4.3032': attribute type 10 has an invalid length. [ 188.515670][T12063] loop4: detected capacity change from 0 to 512 [ 188.571101][T12063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.584453][T12063] ext4 filesystem being mounted at /215/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.648908][ T8971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.718731][T12080] syz.1.3040[12080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.718841][T12080] syz.1.3040[12080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.730530][T12082] FAULT_INJECTION: forcing a failure. [ 188.730530][T12082] name failslab, interval 1, probability 0, space 0, times 0 [ 188.754671][T12082] CPU: 1 UID: 0 PID: 12082 Comm: syz.3.3041 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 188.761920][T12068] Cannot find del_set index 0 as target [ 188.765413][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 188.765427][T12082] Call Trace: [ 188.765433][T12082] [ 188.765439][T12082] dump_stack_lvl+0xf2/0x150 [ 188.765464][T12082] dump_stack+0x15/0x20 [ 188.765482][T12082] should_fail_ex+0x223/0x230 [ 188.771194][T12080] syz.1.3040[12080] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.781061][T12082] ? vm_area_alloc+0x2c/0x130 [ 188.816783][T12082] should_failslab+0x8f/0xb0 [ 188.821369][T12082] kmem_cache_alloc_noprof+0x4c/0x290 [ 188.826792][T12082] vm_area_alloc+0x2c/0x130 [ 188.831401][T12082] mmap_region+0x938/0x16e0 [ 188.836049][T12082] do_mmap+0x718/0xb60 [ 188.840114][T12082] vm_mmap_pgoff+0x133/0x290 [ 188.844810][T12082] ksys_mmap_pgoff+0xd0/0x330 [ 188.849476][T12082] ? fpregs_assert_state_consistent+0x83/0xa0 [ 188.855614][T12082] x64_sys_call+0x1884/0x2d60 [ 188.860282][T12082] do_syscall_64+0xc9/0x1c0 [ 188.864773][T12082] ? clear_bhb_loop+0x55/0xb0 [ 188.869493][T12082] ? clear_bhb_loop+0x55/0xb0 [ 188.874244][T12082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.880132][T12082] RIP: 0033:0x7f9e620fdff9 [ 188.884534][T12082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.904212][T12082] RSP: 002b:00007f9e60d71038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 188.912613][T12082] RAX: ffffffffffffffda RBX: 00007f9e622b5f80 RCX: 00007f9e620fdff9 [ 188.920581][T12082] RDX: b635773f07ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 188.928539][T12082] RBP: 00007f9e60d71090 R08: ffffffffffffffff R09: 00000000ffffe000 [ 188.936524][T12082] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 188.944491][T12082] R13: 0000000000000000 R14: 00007f9e622b5f80 R15: 00007ffff13ed3d8 [ 188.952470][T12082] [ 188.964333][T12079] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 189.003907][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 189.003921][ T29] audit: type=1326 audit(1728107934.141:21951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 189.050210][ T29] audit: type=1326 audit(1728107934.181:21952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 189.073929][ T29] audit: type=1326 audit(1728107934.181:21953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 189.097636][ T29] audit: type=1326 audit(1728107934.181:21954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 189.121402][ T29] audit: type=1326 audit(1728107934.181:21955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=251 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 189.145169][ T29] audit: type=1326 audit(1728107934.181:21956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 189.168951][ T29] audit: type=1326 audit(1728107934.181:21957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 189.192527][ T29] audit: type=1326 audit(1728107934.181:21958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 189.216135][ T29] audit: type=1326 audit(1728107934.181:21959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 189.239740][ T29] audit: type=1326 audit(1728107934.181:21960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12087 comm="syz.0.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4b5685dff9 code=0x7ffc0000 [ 189.264611][T12086] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 189.276730][T12090] FAULT_INJECTION: forcing a failure. [ 189.276730][T12090] name failslab, interval 1, probability 0, space 0, times 0 [ 189.289354][T12090] CPU: 1 UID: 0 PID: 12090 Comm: syz.0.3046 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 189.300271][T12090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.310326][T12090] Call Trace: [ 189.313716][T12090] [ 189.316641][T12090] dump_stack_lvl+0xf2/0x150 [ 189.321308][T12090] dump_stack+0x15/0x20 [ 189.325469][T12090] should_fail_ex+0x223/0x230 [ 189.330155][T12090] ? audit_log_start+0x34c/0x6b0 [ 189.335163][T12090] should_failslab+0x8f/0xb0 [ 189.339822][T12090] kmem_cache_alloc_noprof+0x4c/0x290 [ 189.345268][T12090] audit_log_start+0x34c/0x6b0 [ 189.350066][T12090] audit_seccomp+0x4b/0x130 [ 189.350167][T12099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.354589][T12090] __seccomp_filter+0x6fa/0x1180 [ 189.367843][T12090] ? proc_fail_nth_write+0x12a/0x150 [ 189.373137][T12090] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 189.378817][T12090] ? vfs_write+0x580/0x910 [ 189.383243][T12090] ? __fget_files+0x1d4/0x210 [ 189.388050][T12090] __secure_computing+0x9f/0x1c0 [ 189.392985][T12090] syscall_trace_enter+0xd1/0x1f0 [ 189.398009][T12090] ? fpregs_assert_state_consistent+0x83/0xa0 [ 189.404110][T12090] do_syscall_64+0xaa/0x1c0 [ 189.408598][T12090] ? clear_bhb_loop+0x55/0xb0 [ 189.413394][T12090] ? clear_bhb_loop+0x55/0xb0 [ 189.418130][T12090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.424195][T12090] RIP: 0033:0x7f4b5685dff9 [ 189.428590][T12090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.448244][T12090] RSP: 002b:00007f4b554d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 189.456696][T12090] RAX: ffffffffffffffda RBX: 00007f4b56a15f80 RCX: 00007f4b5685dff9 [ 189.464680][T12090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.472665][T12090] RBP: 00007f4b554d7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.480615][T12090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.488665][T12090] R13: 0000000000000000 R14: 00007f4b56a15f80 R15: 00007ffe21b91aa8 [ 189.496677][T12090] [ 189.500306][T12099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.510354][T12100] loop3: detected capacity change from 0 to 256 [ 189.517175][T12102] FAULT_INJECTION: forcing a failure. [ 189.517175][T12102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.523775][T12100] vfat: Unknown parameter '00000000000000000000ÿÿ' [ 189.530275][T12102] CPU: 1 UID: 0 PID: 12102 Comm: syz.4.3051 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 189.547626][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.557660][T12102] Call Trace: [ 189.560945][T12102] [ 189.563856][T12102] dump_stack_lvl+0xf2/0x150 [ 189.568439][T12102] dump_stack+0x15/0x20 [ 189.572611][T12102] should_fail_ex+0x223/0x230 [ 189.577335][T12102] should_fail+0xb/0x10 [ 189.581475][T12102] should_fail_usercopy+0x1a/0x20 [ 189.586508][T12102] strncpy_from_user+0x25/0x200 [ 189.591370][T12102] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 189.597021][T12102] getname_flags+0xb0/0x3b0 [ 189.601561][T12102] user_path_at+0x26/0x110 [ 189.606056][T12102] __se_sys_mount+0x248/0x2d0 [ 189.610785][T12102] __x64_sys_mount+0x67/0x80 [ 189.615376][T12102] x64_sys_call+0x203e/0x2d60 [ 189.620192][T12102] do_syscall_64+0xc9/0x1c0 [ 189.624694][T12102] ? clear_bhb_loop+0x55/0xb0 [ 189.629450][T12102] ? clear_bhb_loop+0x55/0xb0 [ 189.634193][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.640108][T12102] RIP: 0033:0x7fd31390dff9 [ 189.644504][T12102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.664294][T12102] RSP: 002b:00007fd312581038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 189.672687][T12102] RAX: ffffffffffffffda RBX: 00007fd313ac5f80 RCX: 00007fd31390dff9 [ 189.680663][T12102] RDX: 00000000200000c0 RSI: 0000000020000080 RDI: 0000000000000000 [ 189.688683][T12102] RBP: 00007fd312581090 R08: 00000000200036c0 R09: 0000000000000000 [ 189.696642][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.704616][T12102] R13: 0000000000000000 R14: 00007fd313ac5f80 R15: 00007ffcb9d78498 [ 189.712664][T12102] [ 189.722211][T12105] pim6reg1: entered promiscuous mode [ 189.727794][T12105] pim6reg1: entered allmulticast mode [ 189.812545][T12112] loop4: detected capacity change from 0 to 512 [ 189.839108][T12112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.852709][T12112] ext4 filesystem being mounted at /219/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.877071][ T8971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.894121][T12120] cgroup: release_agent respecified [ 189.900772][T12120] netlink: 'syz.4.3056': attribute type 10 has an invalid length. [ 189.941460][T12124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.950337][T12124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.336667][T12132] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 190.411173][T12143] pim6reg1: entered promiscuous mode [ 190.416634][T12143] pim6reg1: entered allmulticast mode [ 190.438251][T12145] cgroup: release_agent respecified [ 190.444587][T12145] netlink: 'syz.1.3067': attribute type 10 has an invalid length. [ 190.546167][T12155] loop2: detected capacity change from 0 to 1024 [ 190.562102][T12160] loop3: detected capacity change from 0 to 1024 [ 190.599991][T12160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.613426][T12155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.644227][T12160] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.665103][T12155] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.680244][T12149] Cannot find del_set index 0 as target [ 190.691287][T12160] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 190.703659][T12160] EXT4-fs (loop3): This should not happen!! Data will be lost [ 190.703659][T12160] [ 190.713352][T12160] EXT4-fs (loop3): Total free blocks count 0 [ 190.719371][T12160] EXT4-fs (loop3): Free/Dirty block details [ 190.725249][T12160] EXT4-fs (loop3): free_blocks=0 [ 190.730292][T12160] EXT4-fs (loop3): dirty_blocks=0 [ 190.735378][T12160] EXT4-fs (loop3): Block reservation details [ 190.741430][T12160] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 190.742770][T12157] loop1: detected capacity change from 0 to 32768 [ 190.759535][T12155] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 190.771893][T12155] EXT4-fs (loop2): This should not happen!! Data will be lost [ 190.771893][T12155] [ 190.781650][T12155] EXT4-fs (loop2): Total free blocks count 0 [ 190.787670][T12155] EXT4-fs (loop2): Free/Dirty block details [ 190.793557][T12155] EXT4-fs (loop2): free_blocks=0 [ 190.798545][T12155] EXT4-fs (loop2): dirty_blocks=0 [ 190.803671][T12155] EXT4-fs (loop2): Block reservation details [ 190.809725][T12155] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 190.818262][ T9492] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.829608][T12174] cgroup: release_agent respecified [ 190.835449][T12174] netlink: 'syz.0.3079': attribute type 10 has an invalid length. [ 190.838412][T12157] loop1: p1 p2 p3 < p5 p6 p7 > [ 190.864834][ T8732] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.892388][T12184] loop0: detected capacity change from 0 to 128 [ 190.900157][T12184] msdos: Unknown parameter '0xffffffffffffffff' [ 190.916052][T12172] FAULT_INJECTION: forcing a failure. [ 190.916052][T12172] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.929254][T12172] CPU: 0 UID: 0 PID: 12172 Comm: syz.4.3078 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 190.940057][T12172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 190.950102][T12172] Call Trace: [ 190.953381][T12172] [ 190.956299][T12172] dump_stack_lvl+0xf2/0x150 [ 190.960879][T12172] dump_stack+0x15/0x20 [ 190.965060][T12172] should_fail_ex+0x223/0x230 [ 190.969809][T12172] should_fail+0xb/0x10 [ 190.974063][T12172] should_fail_usercopy+0x1a/0x20 [ 190.979083][T12172] _copy_to_user+0x1e/0xa0 [ 190.983490][T12172] simple_read_from_buffer+0xa0/0x110 [ 190.988854][T12172] proc_fail_nth_read+0xf9/0x140 [ 190.993851][T12172] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.999415][T12172] vfs_read+0x195/0x720 [ 191.003587][T12172] ? __rcu_read_unlock+0x4e/0x70 [ 191.008524][T12172] ? __fget_files+0x1d4/0x210 [ 191.013239][T12172] ksys_read+0xeb/0x1b0 [ 191.017394][T12172] __x64_sys_read+0x42/0x50 [ 191.021946][T12172] x64_sys_call+0x27d3/0x2d60 [ 191.026626][T12172] do_syscall_64+0xc9/0x1c0 [ 191.031147][T12172] ? clear_bhb_loop+0x55/0xb0 [ 191.035901][T12172] ? clear_bhb_loop+0x55/0xb0 [ 191.040585][T12172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.046523][T12172] RIP: 0033:0x7fd31390ca3c [ 191.050929][T12172] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 191.070586][T12172] RSP: 002b:00007fd312581030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 191.079023][T12172] RAX: ffffffffffffffda RBX: 00007fd313ac5f80 RCX: 00007fd31390ca3c [ 191.087060][T12172] RDX: 000000000000000f RSI: 00007fd3125810a0 RDI: 0000000000000004 [ 191.095064][T12172] RBP: 00007fd312581090 R08: 0000000000000000 R09: 0000000000000000 [ 191.103034][T12172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.111000][T12172] R13: 0000000000000000 R14: 00007fd313ac5f80 R15: 00007ffcb9d78498 [ 191.118966][T12172] [ 191.149267][T12190] 9pnet: Could not find request transport: 0xffffffffffffffff [ 191.184346][T12202] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 191.203924][T12189] loop2: detected capacity change from 0 to 1024 [ 191.212022][T12189] EXT4-fs: dax option not supported [ 191.223054][T12189] pim6reg1: entered promiscuous mode [ 191.228513][T12189] pim6reg1: entered allmulticast mode [ 191.247961][T12206] loop4: detected capacity change from 0 to 1024 [ 191.269925][T12206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.306742][T12206] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.314659][T12213] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 191.319762][T12206] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 46 with max blocks 1 with error 28 [ 191.336903][T12206] EXT4-fs (loop4): This should not happen!! Data will be lost [ 191.336903][T12206] [ 191.346753][T12206] EXT4-fs (loop4): Total free blocks count 0 [ 191.352718][T12206] EXT4-fs (loop4): Free/Dirty block details [ 191.358675][T12206] EXT4-fs (loop4): free_blocks=0 [ 191.363619][T12206] EXT4-fs (loop4): dirty_blocks=0 [ 191.368651][T12206] EXT4-fs (loop4): Block reservation details [ 191.374651][T12206] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 191.392947][ T8971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.410153][T12220] FAULT_INJECTION: forcing a failure. [ 191.410153][T12220] name failslab, interval 1, probability 0, space 0, times 0 [ 191.422936][T12220] CPU: 0 UID: 0 PID: 12220 Comm: syz.1.3096 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 191.433704][T12220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.443825][T12220] Call Trace: [ 191.447153][T12220] [ 191.450065][T12220] dump_stack_lvl+0xf2/0x150 [ 191.454684][T12220] dump_stack+0x15/0x20 [ 191.458816][T12220] should_fail_ex+0x223/0x230 [ 191.463566][T12220] ? io_alloc_async_data+0x4a/0xb0 [ 191.468664][T12220] should_failslab+0x8f/0xb0 [ 191.473326][T12220] __kmalloc_noprof+0xa5/0x370 [ 191.478146][T12220] io_alloc_async_data+0x4a/0xb0 [ 191.483125][T12220] io_prep_rw+0x2ec/0x440 [ 191.487437][T12220] io_prep_writev+0x5a/0x1d0 [ 191.492059][T12220] io_submit_sqes+0x64c/0x1090 [ 191.496880][T12220] ? __rcu_read_unlock+0x4e/0x70 [ 191.501804][T12220] ? xa_load+0xb9/0xe0 [ 191.505883][T12220] __se_sys_io_uring_enter+0x1ce/0x17b0 [ 191.511486][T12220] ? get_pid_task+0x8e/0xc0 [ 191.515978][T12220] ? proc_fail_nth_write+0x12a/0x150 [ 191.521290][T12220] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 191.526932][T12220] ? vfs_write+0x580/0x910 [ 191.531336][T12220] ? __fget_files+0x1d4/0x210 [ 191.536001][T12220] ? fput+0x14e/0x190 [ 191.539965][T12220] ? ksys_write+0x17a/0x1b0 [ 191.544454][T12220] __x64_sys_io_uring_enter+0x78/0x90 [ 191.549876][T12220] x64_sys_call+0x2567/0x2d60 [ 191.554535][T12220] do_syscall_64+0xc9/0x1c0 [ 191.559041][T12220] ? clear_bhb_loop+0x55/0xb0 [ 191.563702][T12220] ? clear_bhb_loop+0x55/0xb0 [ 191.568364][T12220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.574265][T12220] RIP: 0033:0x7fc7e152dff9 [ 191.578663][T12220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.598448][T12220] RSP: 002b:00007fc7e01a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 191.606938][T12220] RAX: ffffffffffffffda RBX: 00007fc7e16e5f80 RCX: 00007fc7e152dff9 [ 191.614987][T12220] RDX: 0000000000000000 RSI: 0000000000007a98 RDI: 0000000000000005 [ 191.622937][T12220] RBP: 00007fc7e01a7090 R08: 0000000000000000 R09: 0000000000000000 [ 191.630913][T12220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.638884][T12220] R13: 0000000000000000 R14: 00007fc7e16e5f80 R15: 00007ffc1449a6d8 [ 191.646868][T12220] [ 191.735487][T12237] loop1: detected capacity change from 0 to 8192 [ 191.749329][T12243] loop4: detected capacity change from 0 to 512 [ 191.757137][T12243] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.778254][T12243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.852949][T12237] ================================================================== [ 191.861035][T12237] BUG: KCSAN: data-race in mark_buffer_dirty_inode / sync_mapping_buffers [ 191.869519][T12237] [ 191.871835][T12237] write to 0xffff888113a9f4d0 of 8 bytes by task 12247 on cpu 0: [ 191.879528][T12237] sync_mapping_buffers+0x156/0x7b0 [ 191.884711][T12237] fat_file_fsync+0xa7/0x100 [ 191.889289][T12237] vfs_fsync_range+0x116/0x130 [ 191.894034][T12237] generic_file_write_iter+0x185/0x1c0 [ 191.899469][T12237] iter_file_splice_write+0x5f1/0x980 [ 191.904826][T12237] direct_splice_actor+0x160/0x2c0 [ 191.909917][T12237] splice_direct_to_actor+0x302/0x670 [ 191.915269][T12237] do_splice_direct+0xd7/0x150 [ 191.920012][T12237] do_sendfile+0x39b/0x970 [ 191.924412][T12237] __x64_sys_sendfile64+0xbd/0x150 [ 191.929545][T12237] x64_sys_call+0xed5/0x2d60 [ 191.934133][T12237] do_syscall_64+0xc9/0x1c0 [ 191.938620][T12237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.944588][T12237] [ 191.946901][T12237] read to 0xffff888113a9f4d0 of 8 bytes by task 12237 on cpu 1: [ 191.954508][T12237] mark_buffer_dirty_inode+0x96/0x1c0 [ 191.959862][T12237] fat16_ent_put+0x4f/0x60 [ 191.964260][T12237] fat_alloc_clusters+0x4c9/0xa80 [ 191.969264][T12237] fat_get_block+0x25c/0x5e0 [ 191.973853][T12237] __block_write_begin_int+0x417/0xfa0 [ 191.979295][T12237] cont_write_begin+0x546/0x860 [ 191.984129][T12237] fat_write_begin+0x51/0xe0 [ 191.988719][T12237] cont_write_begin+0x18b/0x860 [ 191.993679][T12237] fat_write_begin+0x51/0xe0 [ 191.996257][T12243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.998528][T12237] generic_cont_expand_simple+0xaa/0x150 [ 192.012472][T12237] fat_cont_expand+0x3a/0x160 [ 192.017146][T12237] fat_setattr+0x2aa/0x840 [ 192.021556][T12237] notify_change+0x85c/0x8e0 [ 192.026143][T12237] do_ftruncate+0x3cf/0x460 [ 192.030646][T12237] __x64_sys_ftruncate+0x6a/0xc0 [ 192.035586][T12237] x64_sys_call+0x8e5/0x2d60 [ 192.040174][T12237] do_syscall_64+0xc9/0x1c0 [ 192.044665][T12237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.050568][T12237] [ 192.052891][T12237] value changed: 0xffff8881068e8808 -> 0x0000000000000000 [ 192.059988][T12237] [ 192.062297][T12237] Reported by Kernel Concurrency Sanitizer on: [ 192.068434][T12237] CPU: 1 UID: 0 PID: 12237 Comm: syz.1.3101 Not tainted 6.12.0-rc1-syzkaller-00257-g2f91ff27b0ee #0 [ 192.079192][T12237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 192.089238][T12237] ================================================================== [ 192.100371][T12243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.632848][ T8971] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.