last executing test programs:

24.905929716s ago: executing program 0 (id=7609):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000080)=0x6)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x87)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000080000009500000000000000357ae3c9e105f7eb08be8451c66a8460af2f686f678d978f348b4410491820babfdd1df1497d46d703546ab478bf0ce402a313737c58a8a1e23b04f2dda60e4121888b34975c83e3e7da128763999e53193f75d3e36875a31fb4171b55546c3143d5833aabd7682252261e465ca44a9316bb2ed81476f5858bd4b389f8a1f2c5aa8da1d37390d36937f577b7eb91373a47f46faaf2"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r4, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)

24.04314481s ago: executing program 0 (id=7618):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0xa2bc0000000}, 0x18)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000b00)={0x12})
set_robust_list(0x0, 0x0)
futex_waitv(0x0, 0x0, 0x0, 0x0, 0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = gettid()
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000007, 0x12, r2, 0x825bb000)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000004c0)={<r4=>0xffffffffffffffff}, 0x13f, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xffe0000, @remote, 0xeedc}, r4}}, 0x30)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)={0x14, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}}, 0x14}}, 0x0)
ioctl$TIOCMIWAIT(r5, 0x545c, 0x200000000000000)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48)
r6 = syz_usbip_server_init(0x5)
write$usbip_server(r6, &(0x7f00000005c0)=ANY=[], 0x30)

22.576877275s ago: executing program 0 (id=7646):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) (fail_nth: 6)

22.502163605s ago: executing program 0 (id=7647):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x3, 0x8)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0080ff0000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x4}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x370)
syz_emit_ethernet(0x46, &(0x7f0000000940)={@local, @empty, @void, {@ipv6={0x86dd, @dccp_packet={0x2, 0x6, "1c0adf", 0x10, 0x21, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {{0x4e20, 0x4e21, 0x4, 0x1, 0xe, 0x0, 0x0, 0xa, 0x1, "a43a72", 0x6, "5e6a98"}}}}}}}, 0x0)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000140))
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.self_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000020840)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040), 0x10)
listen(r6, 0x0)
r7 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r7, &(0x7f0000000080), 0x10)
sendmmsg(r7, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
r8 = accept4$unix(r6, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
recvfrom$unix(r8, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0)
syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0)

22.461104566s ago: executing program 0 (id=7648):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000b00)={0x12})
set_robust_list(0x0, 0x0)
r2 = gettid()
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x9}}, 0x20)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x200000000000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
write$usbip_server(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x30)

22.014928654s ago: executing program 0 (id=7649):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x3a)

21.997911594s ago: executing program 32 (id=7649):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0)
r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r3, r2, 0x0, 0x3a)

1.14759958s ago: executing program 4 (id=8170):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x42000000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000009240001801400018008000100e000000108000200ac1414aa0c00b3ed"], 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65)

1.130212761s ago: executing program 3 (id=8171):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18)
unlink(0x0)

1.129589061s ago: executing program 5 (id=8172):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x6bbc}, 0x18)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])

1.079602872s ago: executing program 3 (id=8174):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10011, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x10, 0x23, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000420b000000000000ac00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000ca4f0000000000000000000095000000000000001034000002000000000000000000000018180000", @ANYRES32=r0, @ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e22, @private=0xa010102}], 0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @private=0xa010102}}, 0x9, 0x401}, &(0x7f0000000080)=0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000bf6769cd8e444fc97600851000", @ANYRES32=r1, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xffffff81, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, r0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r7, 0x0, 0xfffffffffffffffd}, 0x18)
sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}}, 0x2000c010)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000040000003003e00ebffffff940200000000000040000000000000000000000000000000000000002c8f3800010000000200000003000000970f0000040000000000"], 0xe6)
close(r8)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r2], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x61, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x58, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000"], 0x254}}, 0x40808)

1.065157832s ago: executing program 2 (id=8176):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, 0x0, 0x20040000)

1.054763352s ago: executing program 5 (id=8177):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]})
r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c)
utime(0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8005, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xd}, 0x100000, 0x0, 0x0, 0x9, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x110, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0)={<r7=>0xffffffffffffffff}, 0x13f, 0x5}}, 0x20)
stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, <r8=>0x0, <r9=>0x0})
r10 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, r9)
getegid()
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64=r5, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8=r7, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8=r10, @ANYBLOB, @ANYRESDEC=r8, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32=r9, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)

993.003653ms ago: executing program 4 (id=8179):
pipe2$9p(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200))
r0 = mq_open(0x0, 0x42, 0x0, 0x0)
mq_notify(r0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r2, 0x1, 0x2}}, 0x20) (fail_nth: 3)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10)
chown(0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r4}, 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075000000b7080000000000007b8af8ff00000000b70800"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r5}, 0x10)

690.331708ms ago: executing program 4 (id=8180):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000640)={0x2, 0x0, @loopback}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x7, &(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYRES16=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0xf4c2976d1cf75e2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x18)
sendmsg$rds(r1, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000200001800d0001007564703a73797a32000000000c000280080003000700000057a90880dbaa47a180cb878c8ff3a7e7b4fc9fb077b2723918830f926f9e7186a92e188931cf910f393500000000c1112d0eec29a88aa65bb993ea7a9dd4ee52e4160983930e747060e553cf3f120fd856c825263bec8378d40b3397d3962ab78be8af5b51f8e638049fff5d2ac8bc5d"], 0x34}}, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setresuid(0x0, 0xee00, 0x0)
syz_clone3(&(0x7f0000000380)={0x20080, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}, 0x58)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r7}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0)
r10 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r10, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000400)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x60, &(0x7f0000000300)='M', 0x1, 0xc, 0x0, 0x0, 0x5, 0x5f8480, 0x0})

689.964808ms ago: executing program 2 (id=8181):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040))
syz_io_uring_setup(0x498, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x2, 0x0, 0x0, 0x0, 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x48)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r1)

689.599198ms ago: executing program 4 (id=8182):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0x0, 0x0, 0x0, 0x369eaee7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r1 = dup(r0)
write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
stat(&(0x7f0000001c40)='./file0\x00', 0x0)

651.297269ms ago: executing program 5 (id=8183):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

650.541109ms ago: executing program 2 (id=8184):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fchmodat(0xffffffffffffffff, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfffffffb)

643.943819ms ago: executing program 5 (id=8185):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1d, 0x0, 0x0, 0x0, 0x369eaee7, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
r1 = dup(r0)
write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94)
write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8)
stat(&(0x7f0000001c40)='./file0\x00', 0x0)

635.534119ms ago: executing program 4 (id=8186):
perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x38, 0x1, 0x0, 0x6, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x100200, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x7, 0xffffffffffffffff, 0x2)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200a80b15"], 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x26, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYRESHEX=r3, @ANYRESHEX=r0], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x3, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r6 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x0, 0x4d299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x3f)
ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000000040))
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r6, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x18)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x4, @local, 0x4}, 0x1c)
connect$pppl2tp(r10, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r10, &(0x7f0000000180)=[{&(0x7f00000000c0)="06", 0x1}], 0x1)

634.770259ms ago: executing program 2 (id=8187):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6bbc}, 0x18)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])

592.64257ms ago: executing program 2 (id=8188):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1d9)
socket$unix(0x1, 0x1, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94)
mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x882)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0x5})

590.64072ms ago: executing program 5 (id=8189):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x42000000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000009240001801400018008000100e000000108000200ac1414aa0c00b3ed"], 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65)

540.14195ms ago: executing program 2 (id=8190):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000b00)={0x12})
set_robust_list(0x0, 0x0)
r2 = gettid()
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x9}}, 0x20)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x200000000000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48)
write$usbip_server(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x30)

525.179741ms ago: executing program 5 (id=8191):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$PTP_SYS_OFFSET_EXTENDED(r1, 0xc4c03d09, &(0x7f0000000b00)={0x12})
set_robust_list(0x0, 0x0)
r2 = gettid()
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x9}}, 0x20)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMIWAIT(r3, 0x545c, 0x200000000000000)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48)
write$usbip_server(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x30)

508.520881ms ago: executing program 4 (id=8192):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000001f02000000000000bc26100000000000bf67200000000000160200000fff0700670200000a000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x100)
pidfd_getfd(0xffffffffffffffff, r0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, 0x0})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r1, &(0x7f00000000c0)="dc76672a00c24e35725ac85aa993790e4992eaee962668ac7ea66d4b729ddd43aff8c8e278490719262a60945d2cb5093436e1cea2bdef02c6a911b6f68a19007c0463813545ce431f14bcd0b203644c4860806fdea642da8f"}, 0x20)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r3})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000000), 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0)
creat(0x0, 0x0)
r6 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r6, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000001c00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001bc0)={0x0, 0x1bc}, 0x1, 0x0, 0x0, 0x40d1}, 0x4044045)
chroot(&(0x7f00000001c0)='./file0\x00')

241.799296ms ago: executing program 3 (id=8193):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20040000)

162.047767ms ago: executing program 3 (id=8195):
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000040))
syz_io_uring_setup(0x498, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x2, 0x0, 0x0, 0x0, 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r2 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x48)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000740)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0)
close(r1)

149.241727ms ago: executing program 1 (id=8197):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fchmodat(0xffffffffffffffff, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfffffffb)

137.396137ms ago: executing program 1 (id=8198):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000001c00)={[{@jqfmt_vfsv0}, {@delalloc}, {@resgid}, {@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x0, 0x43c, &(0x7f0000002000)="$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")
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x40}, 0x1}}, 0x10)
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz0\x00'}, &(0x7f0000000080)=0x2c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100))
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0xfd, 0x0, 0x0, 0x2, 0x88094, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000400), 0x8}, 0x100000, 0xa, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x3)
perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00'}, 0x18)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)

113.938447ms ago: executing program 1 (id=8199):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6bbc}, 0x18)
creat(&(0x7f00000000c0)='./file0\x00', 0x48)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX])

112.996567ms ago: executing program 3 (id=8200):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r4}, 0x10)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x56, &(0x7f0000000780)={[{@data_err_ignore}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@delalloc}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}, {@quota}]}, 0x41, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r5 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$VT_DISALLOCATE(r5, 0x5608)

86.370338ms ago: executing program 1 (id=8201):
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x42000000)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000009240001801400018008000100e000000108000200ac1414aa0c00b3ed"], 0x6c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757818"], 0x65)

30.980619ms ago: executing program 1 (id=8202):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
fchmodat(0xffffffffffffffff, &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfffffffb)

12.643839ms ago: executing program 1 (id=8203):
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14)
munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2000008, 0x1a2930, 0xffffffffffffffff, 0x0)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x6)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000)
r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="030000000000fa00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000280), 0xfd, r6}, 0x38)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000001400038008000240000000000800014000000000140000001100010000000000000000000000000a82d9535511a50b9b399c8067ee45d3d0ee44f4acb72a9c0ebbf0c98f4a62efc51fe8aab4cee01034cf6ba5f3901f1a3aa69f2a14ca1b3255b1f53f4b689287b94202b11cd3059bda8a24a0c8e500"/197], 0x68}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0xd, 0x1, 'batadv_slave_1\x00'}]}]}]}], {0xfffffffffffffc4a}}, 0x70}}, 0x24040880)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x18)
openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0)

0s ago: executing program 3 (id=8204):
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="06ddcb206d92050e1c00000500e3629223bc4b8422a929c581aa0db642a23d06752f8542432f25446e91c51f47ba98d12ead7e81d3f2f5c4ec6bd20892cbfbfb0ae5e5915aed07dca4b6fa724bac6f647a9fa0a0a36b7b10f9e38fd99cc96cadeaa32754c5de4d26870e80aa8475f2e02cd553c87fddd8d3e5c860221ff82dac0efb73b8bd5a0824a6014bba62d8e3"], 0x50)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = syz_io_uring_setup(0x410d2, &(0x7f0000000340)={0x0, 0x7737, 0x800, 0x1, 0xe9}, &(0x7f00000001c0), &(0x7f0000000140))
r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000280)=r1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010800f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r2 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588)

kernel console output (not intermixed with test programs):

489.494144][T25705] RAX: ffffffffffffffda RBX: 00007f1092f05fa0 RCX: 00007f1092cde9a9
[  489.494157][T25705] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000019
[  489.494228][T25705] RBP: 00007f109133f090 R08: 0000000000000000 R09: 0000000000000000
[  489.494257][T25705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  489.494270][T25705] R13: 0000000000000000 R14: 00007f1092f05fa0 R15: 00007ffdbd067e78
[  489.494311][T25705]  </TASK>
[  489.494446][T25705] netlink: 'syz.0.7443': attribute type 24 has an invalid length.
[  489.512397][T25706] EXT4-fs: Ignoring removed i_version option
[  489.540055][T25708] FAULT_INJECTION: forcing a failure.
[  489.540055][T25708] name failslab, interval 1, probability 0, space 0, times 0
[  489.541664][T25706] EXT4-fs: Ignoring removed orlov option
[  489.546472][T25708] CPU: 0 UID: 0 PID: 25708 Comm: syz.0.7445 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  489.546498][T25708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  489.546517][T25708] Call Trace:
[  489.546523][T25708]  <TASK>
[  489.546531][T25708]  __dump_stack+0x1d/0x30
[  489.546553][T25708]  dump_stack_lvl+0xe8/0x140
[  489.546572][T25708]  dump_stack+0x15/0x1b
[  489.546588][T25708]  should_fail_ex+0x265/0x280
[  489.546678][T25708]  should_failslab+0x8c/0xb0
[  489.546698][T25708]  __kmalloc_noprof+0xa5/0x3e0
[  489.546741][T25708]  ? security_sk_alloc+0x52/0x120
[  489.546769][T25708]  ? should_failslab+0x8c/0xb0
[  489.546789][T25708]  security_sk_alloc+0x52/0x120
[  489.546817][T25708]  sk_prot_alloc+0xc2/0x190
[  489.546871][T25708]  sk_alloc+0x34/0x360
[  489.546898][T25708]  bpf_prog_test_run_skb+0x234/0xbd0
[  489.546992][T25708]  ? __rcu_read_unlock+0x4f/0x70
[  489.547012][T25708]  ? __fget_files+0x184/0x1c0
[  489.547029][T25708]  ? __rcu_read_unlock+0x4f/0x70
[  489.547050][T25708]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  489.547083][T25708]  bpf_prog_test_run+0x22a/0x390
[  489.547113][T25708]  __sys_bpf+0x3dc/0x790
[  489.547171][T25708]  __x64_sys_bpf+0x41/0x50
[  489.547195][T25708]  x64_sys_call+0x2478/0x2fb0
[  489.547216][T25708]  do_syscall_64+0xd2/0x200
[  489.547267][T25708]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  489.547291][T25708]  ? clear_bhb_loop+0x40/0x90
[  489.547311][T25708]  ? clear_bhb_loop+0x40/0x90
[  489.547361][T25708]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  489.547382][T25708] RIP: 0033:0x7f1092cde9a9
[  489.547397][T25708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  489.547413][T25708] RSP: 002b:00007f109133f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  489.547510][T25708] RAX: ffffffffffffffda RBX: 00007f1092f05fa0 RCX: 00007f1092cde9a9
[  489.547521][T25708] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a
[  489.547585][T25708] RBP: 00007f109133f090 R08: 0000000000000000 R09: 0000000000000000
[  489.547598][T25708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  489.547610][T25708] R13: 0000000000000000 R14: 00007f1092f05fa0 R15: 00007ffdbd067e78
[  489.547632][T25708]  </TASK>
[  489.979066][T25706] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  489.994822][T25719] loop3: detected capacity change from 0 to 512
[  490.016571][T25719] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  490.031386][T25719] EXT4-fs (loop3): mount failed
[  490.044830][T25719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7450'.
[  490.097770][T25737] 9pnet_fd: Insufficient options for proto=fd
[  490.106280][T25732] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  490.163221][T25739] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  490.285466][T25754] loop4: detected capacity change from 0 to 512
[  490.307556][T25754] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  490.322584][T25754] EXT4-fs (loop4): mount failed
[  490.330916][T25754] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7463'.
[  490.346887][T25759] FAULT_INJECTION: forcing a failure.
[  490.346887][T25759] name failslab, interval 1, probability 0, space 0, times 0
[  490.359579][T25759] CPU: 1 UID: 0 PID: 25759 Comm: syz.0.7464 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  490.359604][T25759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  490.359617][T25759] Call Trace:
[  490.359623][T25759]  <TASK>
[  490.359629][T25759]  __dump_stack+0x1d/0x30
[  490.359649][T25759]  dump_stack_lvl+0xe8/0x140
[  490.359737][T25759]  dump_stack+0x15/0x1b
[  490.359753][T25759]  should_fail_ex+0x265/0x280
[  490.359778][T25759]  should_failslab+0x8c/0xb0
[  490.359832][T25759]  kmem_cache_alloc_noprof+0x50/0x310
[  490.359856][T25759]  ? skb_clone+0x151/0x1f0
[  490.359954][T25759]  skb_clone+0x151/0x1f0
[  490.359973][T25759]  __netlink_deliver_tap+0x2c9/0x500
[  490.359996][T25759]  netlink_unicast+0x653/0x680
[  490.360026][T25759]  netlink_sendmsg+0x58b/0x6b0
[  490.360047][T25759]  ? __pfx_netlink_sendmsg+0x10/0x10
[  490.360190][T25759]  __sock_sendmsg+0x145/0x180
[  490.360212][T25759]  ____sys_sendmsg+0x31e/0x4e0
[  490.360234][T25759]  ___sys_sendmsg+0x17b/0x1d0
[  490.360263][T25759]  __x64_sys_sendmsg+0xd4/0x160
[  490.360327][T25759]  x64_sys_call+0x2999/0x2fb0
[  490.360345][T25759]  do_syscall_64+0xd2/0x200
[  490.360364][T25759]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  490.360388][T25759]  ? clear_bhb_loop+0x40/0x90
[  490.360408][T25759]  ? clear_bhb_loop+0x40/0x90
[  490.360502][T25759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.360520][T25759] RIP: 0033:0x7f1092cde9a9
[  490.360533][T25759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  490.360550][T25759] RSP: 002b:00007f109133f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  490.360593][T25759] RAX: ffffffffffffffda RBX: 00007f1092f05fa0 RCX: 00007f1092cde9a9
[  490.360604][T25759] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000001b
[  490.360615][T25759] RBP: 00007f109133f090 R08: 0000000000000000 R09: 0000000000000000
[  490.360628][T25759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  490.360641][T25759] R13: 0000000000000000 R14: 00007f1092f05fa0 R15: 00007ffdbd067e78
[  490.360658][T25759]  </TASK>
[  490.366087][T25761] loop4: detected capacity change from 0 to 1024
[  490.418921][T25767] FAULT_INJECTION: forcing a failure.
[  490.418921][T25767] name failslab, interval 1, probability 0, space 0, times 0
[  490.429025][T25764] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7466'.
[  490.432028][T25767] CPU: 1 UID: 0 PID: 25767 Comm: syz.2.7467 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  490.432056][T25767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  490.432069][T25767] Call Trace:
[  490.432076][T25767]  <TASK>
[  490.432083][T25767]  __dump_stack+0x1d/0x30
[  490.432105][T25767]  dump_stack_lvl+0xe8/0x140
[  490.432134][T25767]  dump_stack+0x15/0x1b
[  490.432150][T25767]  should_fail_ex+0x265/0x280
[  490.432178][T25767]  should_failslab+0x8c/0xb0
[  490.432239][T25767]  __kmalloc_noprof+0xa5/0x3e0
[  490.432286][T25767]  ? security_sk_alloc+0x52/0x120
[  490.432314][T25767]  ? should_failslab+0x8c/0xb0
[  490.432335][T25767]  security_sk_alloc+0x52/0x120
[  490.432363][T25767]  sk_prot_alloc+0xc2/0x190
[  490.432397][T25767]  sk_alloc+0x34/0x360
[  490.432424][T25767]  bpf_prog_test_run_skb+0x234/0xbd0
[  490.432521][T25767]  ? __rcu_read_unlock+0x4f/0x70
[  490.432541][T25767]  ? __fget_files+0x184/0x1c0
[  490.432558][T25767]  ? __rcu_read_unlock+0x4f/0x70
[  490.432594][T25767]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  490.432622][T25767]  bpf_prog_test_run+0x22a/0x390
[  490.432738][T25767]  __sys_bpf+0x3dc/0x790
[  490.432770][T25767]  __x64_sys_bpf+0x41/0x50
[  490.432817][T25767]  x64_sys_call+0x2478/0x2fb0
[  490.432838][T25767]  do_syscall_64+0xd2/0x200
[  490.432856][T25767]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  490.432902][T25767]  ? clear_bhb_loop+0x40/0x90
[  490.432922][T25767]  ? clear_bhb_loop+0x40/0x90
[  490.432943][T25767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  490.432962][T25767] RIP: 0033:0x7fa24edee9a9
[  490.433046][T25767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  490.433082][T25767] RSP: 002b:00007fa24d457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  490.433181][T25767] RAX: ffffffffffffffda RBX: 00007fa24f015fa0 RCX: 00007fa24edee9a9
[  490.433193][T25767] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a
[  490.433206][T25767] RBP: 00007fa24d457090 R08: 0000000000000000 R09: 0000000000000000
[  490.433219][T25767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  490.433231][T25767] R13: 0000000000000000 R14: 00007fa24f015fa0 R15: 00007ffc59efd558
[  490.433249][T25767]  </TASK>
[  490.438368][T25761] EXT4-fs: Ignoring removed i_version option
[  490.542402][T25771] 9pnet_fd: Insufficient options for proto=fd
[  490.542905][T25761] EXT4-fs: Ignoring removed orlov option
[  490.548532][T25761] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  490.578341][T25774] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  490.903795][T25787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7475'.
[  490.924065][T25790] netlink: 'syz.1.7476': attribute type 24 has an invalid length.
[  490.961899][T25792] SELinux:  policydb version 150994968 does not match my version range 15-34
[  490.971134][T25792] SELinux: failed to load policy
[  490.983871][T25796] 9pnet_fd: Insufficient options for proto=fd
[  490.983935][T25798] loop4: detected capacity change from 0 to 128
[  490.996938][T25798] EXT4-fs: Ignoring removed nobh option
[  491.074259][T25811] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  491.102885][T25816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7487'.
[  491.146496][T25822] netlink: 'syz.2.7489': attribute type 13 has an invalid length.
[  491.176561][T25824] loop3: detected capacity change from 0 to 512
[  491.236398][T25798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  491.244907][T25798] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  491.286202][T25831] 9pnet_fd: Insufficient options for proto=fd
[  491.332907][T25833] hub 6-0:1.0: USB hub found
[  491.337625][T25833] hub 6-0:1.0: 8 ports detected
[  491.547922][T25843] loop3: detected capacity change from 0 to 1024
[  491.554679][T25843] EXT4-fs: Ignoring removed i_version option
[  491.560884][T25843] EXT4-fs: Ignoring removed orlov option
[  491.572323][T25843] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  491.641892][T25846] loop3: detected capacity change from 0 to 512
[  491.653217][T25846] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  491.668269][T25846] EXT4-fs (loop3): mount failed
[  491.674917][T25846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7498'.
[  491.859692][T25860] hub 6-0:1.0: USB hub found
[  491.864782][T25860] hub 6-0:1.0: 8 ports detected
[  491.871365][T25871] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  491.877943][T25871] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  491.885710][T25871] vhci_hcd vhci_hcd.0: Device attached
[  491.913011][T25872] usbip_core: unknown command
[  491.917770][T25872] vhci_hcd: unknown pdu 1937339231
[  491.923053][T25872] usbip_core: unknown command
[  491.930821][T25396] vhci_hcd: stop threads
[  491.935101][T25396] vhci_hcd: release socket
[  491.939564][T25396] vhci_hcd: disconnect device
[  491.965591][T25875] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  492.167913][T25902] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  492.200419][T25906] hub 6-0:1.0: USB hub found
[  492.212673][T25906] hub 6-0:1.0: 8 ports detected
[  492.229338][T25907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7515'.
[  492.411049][   T29] kauditd_printk_skb: 670 callbacks suppressed
[  492.411062][   T29] audit: type=1400 audit(51904994.355:70580): avc:  denied  { relabelfrom } for  pid=25887 comm="syz.2.7515" name="" dev="pipefs" ino=95650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  492.439806][   T29] audit: type=1400 audit(51904994.464:70581): avc:  denied  { create } for  pid=25887 comm="syz.2.7515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  492.530303][T25912] netlink: 'syz.1.7524': attribute type 13 has an invalid length.
[  492.545174][   T29] audit: type=1326 audit(51904994.664:70582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25911 comm="syz.1.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e104de9a9 code=0x7ffc0000
[  492.568798][   T29] audit: type=1326 audit(51904994.664:70583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25911 comm="syz.1.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e104de9a9 code=0x7ffc0000
[  492.592213][   T29] audit: type=1326 audit(51904994.664:70584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25911 comm="syz.1.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e104de9a9 code=0x7ffc0000
[  492.615694][   T29] audit: type=1326 audit(51904994.664:70585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25911 comm="syz.1.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e104de9a9 code=0x7ffc0000
[  492.639272][   T29] audit: type=1326 audit(51904994.664:70586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25911 comm="syz.1.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e104de9a9 code=0x7ffc0000
[  492.676591][T25917] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  492.680341][   T29] audit: type=1326 audit(51904994.664:70587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25911 comm="syz.1.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9e104de9a9 code=0x7ffc0000
[  492.707487][   T29] audit: type=1326 audit(51904994.664:70588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25911 comm="syz.1.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e104de9a9 code=0x7ffc0000
[  492.730957][   T29] audit: type=1326 audit(51904994.664:70589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25911 comm="syz.1.7524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9e104de9a9 code=0x7ffc0000
[  492.766857][T25919] loop3: detected capacity change from 0 to 512
[  492.773738][T25919] EXT4-fs: Ignoring removed nomblk_io_submit option
[  492.781007][T25919] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  492.926140][T25928] loop3: detected capacity change from 0 to 512
[  492.939250][T25928] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  492.947841][T25928] EXT4-fs (loop3): bad geometry: block count 204800 exceeds size of device (128 blocks)
[  492.994771][T25934] loop3: detected capacity change from 0 to 1024
[  493.004255][T25934] EXT4-fs: Ignoring removed i_version option
[  493.010344][T25934] EXT4-fs: Ignoring removed orlov option
[  493.027763][T25934] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  493.102079][T25940] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  493.147504][T25944] hub 6-0:1.0: USB hub found
[  493.154283][T25948] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  493.155982][T25944] hub 6-0:1.0: 8 ports detected
[  493.189420][T25950] loop3: detected capacity change from 0 to 512
[  493.199142][T25950] EXT4-fs: Ignoring removed nomblk_io_submit option
[  493.207529][T25950] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  493.226770][T25956] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7542'.
[  493.247752][T25956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  493.266804][T25956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  493.279201][T25956] bond0 (unregistering): Released all slaves
[  493.343216][T25963] SELinux:  policydb version 150994968 does not match my version range 15-34
[  493.357947][T25963] SELinux: failed to load policy
[  493.452157][T25976] SELinux:  policydb version 150994968 does not match my version range 15-34
[  493.464614][T25971] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  493.468634][T25976] SELinux: failed to load policy
[  493.487859][T25979] 9pnet_fd: Insufficient options for proto=fd
[  493.545266][T25980] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  493.695372][T25999] netlink: 'syz.1.7558': attribute type 13 has an invalid length.
[  493.796984][T26009] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7557'.
[  493.989872][T26011] SELinux:  policydb version 150994968 does not match my version range 15-34
[  494.009236][T26013] loop4: detected capacity change from 0 to 512
[  494.057902][T26013] EXT4-fs mount: 14 callbacks suppressed
[  494.057975][T26013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  494.063396][T26011] SELinux: failed to load policy
[  494.098664][T22604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  494.150124][T26018] 9pnet_fd: Insufficient options for proto=fd
[  494.168213][T26020] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  494.220154][T26023] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  494.260825][T26026] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
crond[3096]: time disparity of 17477 minutes detected

[  494.555048][T26044] 9pnet_fd: Insufficient options for proto=fd
[  494.596067][T26046] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  494.596380][T26049] xt_hashlimit: size too large, truncated to 1048576
[  494.655831][T26053] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  494.724355][T26057] loop4: detected capacity change from 0 to 1024
[  494.731218][T26057] EXT4-fs: Ignoring removed i_version option
[  494.737301][T26057] EXT4-fs: Ignoring removed orlov option
[  494.754324][T26057] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  494.822064][T26066] netlink: 'syz.0.7584': attribute type 13 has an invalid length.
[  494.905093][T26073] 9pnet_fd: Insufficient options for proto=fd
[  494.938432][T26077] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  495.046537][T26084] loop3: detected capacity change from 0 to 512
[  495.058261][T26084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.086533][T21589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.106223][T26094] loop4: detected capacity change from 0 to 512
[  495.115806][T26094] EXT4-fs: Ignoring removed nomblk_io_submit option
[  495.122701][T26094] EXT4-fs (loop4): can't mount with both data=journal and delalloc
[  495.158678][T26099] loop3: detected capacity change from 0 to 512
[  495.168269][T26098] FAULT_INJECTION: forcing a failure.
[  495.168269][T26098] name failslab, interval 1, probability 0, space 0, times 0
[  495.181115][T26098] CPU: 0 UID: 0 PID: 26098 Comm: syz.1.7597 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  495.181143][T26098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  495.181156][T26098] Call Trace:
[  495.181163][T26098]  <TASK>
[  495.181170][T26098]  __dump_stack+0x1d/0x30
[  495.181189][T26098]  dump_stack_lvl+0xe8/0x140
[  495.181278][T26098]  dump_stack+0x15/0x1b
[  495.181291][T26098]  should_fail_ex+0x265/0x280
[  495.181315][T26098]  should_failslab+0x8c/0xb0
[  495.181366][T26098]  kmem_cache_alloc_noprof+0x50/0x310
[  495.181486][T26098]  ? skb_clone+0x151/0x1f0
[  495.181503][T26098]  skb_clone+0x151/0x1f0
[  495.181520][T26098]  __netlink_deliver_tap+0x2c9/0x500
[  495.181562][T26098]  netlink_unicast+0x653/0x680
[  495.181593][T26098]  netlink_sendmsg+0x58b/0x6b0
[  495.181612][T26098]  ? __pfx_netlink_sendmsg+0x10/0x10
[  495.181630][T26098]  __sock_sendmsg+0x145/0x180
[  495.181754][T26098]  ____sys_sendmsg+0x31e/0x4e0
[  495.181842][T26098]  ___sys_sendmsg+0x17b/0x1d0
[  495.181930][T26098]  __x64_sys_sendmsg+0xd4/0x160
[  495.181954][T26098]  x64_sys_call+0x2999/0x2fb0
[  495.181975][T26098]  do_syscall_64+0xd2/0x200
[  495.182064][T26098]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  495.182085][T26098]  ? clear_bhb_loop+0x40/0x90
[  495.182103][T26098]  ? clear_bhb_loop+0x40/0x90
[  495.182149][T26098]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  495.182170][T26098] RIP: 0033:0x7f9e104de9a9
[  495.182186][T26098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  495.182204][T26098] RSP: 002b:00007f9e0eb3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  495.182224][T26098] RAX: ffffffffffffffda RBX: 00007f9e10705fa0 RCX: 00007f9e104de9a9
[  495.182286][T26098] RDX: 0000000000040080 RSI: 0000200000000080 RDI: 0000000000000005
[  495.182296][T26098] RBP: 00007f9e0eb3f090 R08: 0000000000000000 R09: 0000000000000000
[  495.182308][T26098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  495.182322][T26098] R13: 0000000000000000 R14: 00007f9e10705fa0 R15: 00007fff50c47278
[  495.182365][T26098]  </TASK>
[  495.183637][T26098] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7597'.
[  495.212645][T26099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.282404][T26103] 9pnet_fd: Insufficient options for proto=fd
[  495.424739][T21589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.467367][T26109] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  495.789820][T26138] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  495.796343][T26138] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  495.804280][T26138] vhci_hcd vhci_hcd.0: Device attached
[  495.810364][T26139] usbip_core: unknown command
[  495.815090][T26139] vhci_hcd: unknown pdu 1937339231
[  495.820310][T26139] usbip_core: unknown command
[  495.825407][T25396] vhci_hcd: stop threads
[  495.829691][T25396] vhci_hcd: release socket
[  495.834170][T25396] vhci_hcd: disconnect device
[  496.345170][T26144] loop4: detected capacity change from 0 to 512
[  496.351951][T26144] EXT4-fs: Ignoring removed nomblk_io_submit option
[  496.359097][T26144] EXT4-fs (loop4): can't mount with both data=journal and delalloc
[  496.525055][T26149] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  496.568868][T26158] netlink: 'syz.2.7619': attribute type 13 has an invalid length.
[  496.606163][T26161] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  496.612695][T26161] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  496.620775][T26161] vhci_hcd vhci_hcd.0: Device attached
[  496.627194][T26162] usbip_core: unknown command
[  496.632111][T26162] vhci_hcd: unknown pdu 1937339231
[  496.637292][T26162] usbip_core: unknown command
[  496.642236][T25396] vhci_hcd: stop threads
[  496.646576][T25396] vhci_hcd: release socket
[  496.651244][T25396] vhci_hcd: disconnect device
[  497.100419][T26166] bond3: entered promiscuous mode
[  497.105545][T26166] bond3: entered allmulticast mode
[  497.110998][T26166] 8021q: adding VLAN 0 to HW filter on device bond3
[  497.120299][T26166] bond3 (unregistering): Released all slaves
[  497.217042][T26179] loop3: detected capacity change from 0 to 512
[  497.224793][T26179] EXT4-fs: Ignoring removed nomblk_io_submit option
[  497.231911][T26179] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  497.295174][T26183] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  497.390509][T26191] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  497.397093][T26191] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  497.404855][T26191] vhci_hcd vhci_hcd.0: Device attached
[  497.413036][T26192] usbip_core: unknown command
[  497.417748][T26192] vhci_hcd: unknown pdu 0
[  497.422689][T26192] usbip_core: unknown command
[  497.427761][T25396] vhci_hcd: stop threads
[  497.432032][T25396] vhci_hcd: release socket
[  497.436589][T25396] vhci_hcd: disconnect device
[  497.448241][T26195] loop4: detected capacity change from 0 to 1024
[  497.455122][T26195] EXT4-fs: Ignoring removed i_version option
[  497.461140][T26195] EXT4-fs: Ignoring removed orlov option
[  497.470754][T26199] FAULT_INJECTION: forcing a failure.
[  497.470754][T26199] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  497.483907][T26199] CPU: 1 UID: 0 PID: 26199 Comm: syz.3.7635 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  497.483965][T26199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  497.483978][T26199] Call Trace:
[  497.483984][T26199]  <TASK>
[  497.483990][T26199]  __dump_stack+0x1d/0x30
[  497.484009][T26199]  dump_stack_lvl+0xe8/0x140
[  497.484085][T26199]  dump_stack+0x15/0x1b
[  497.484099][T26199]  should_fail_ex+0x265/0x280
[  497.484125][T26199]  should_fail+0xb/0x20
[  497.484150][T26199]  should_fail_usercopy+0x1a/0x20
[  497.484219][T26199]  _copy_from_user+0x1c/0xb0
[  497.484237][T26199]  tls_setsockopt+0x3ec/0xce0
[  497.484272][T26199]  sock_common_setsockopt+0x66/0x80
[  497.484357][T26199]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  497.484381][T26199]  __sys_setsockopt+0x181/0x200
[  497.484474][T26199]  __x64_sys_setsockopt+0x64/0x80
[  497.484519][T26199]  x64_sys_call+0x2bd5/0x2fb0
[  497.484537][T26199]  do_syscall_64+0xd2/0x200
[  497.484631][T26199]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  497.484655][T26199]  ? clear_bhb_loop+0x40/0x90
[  497.484753][T26199]  ? clear_bhb_loop+0x40/0x90
[  497.484779][T26199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  497.484791][T26199] RIP: 0033:0x7fcbeb23e9a9
[  497.484800][T26199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  497.484810][T26199] RSP: 002b:00007fcbe989f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  497.484821][T26199] RAX: ffffffffffffffda RBX: 00007fcbeb465fa0 RCX: 00007fcbeb23e9a9
[  497.484854][T26199] RDX: 0000000000000002 RSI: 000000000000011a RDI: 0000000000000006
[  497.484885][T26199] RBP: 00007fcbe989f090 R08: 0000000000000038 R09: 0000000000000000
[  497.484892][T26199] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  497.484899][T26199] R13: 0000000000000000 R14: 00007fcbeb465fa0 R15: 00007ffd601b0c88
[  497.484909][T26199]  </TASK>
[  497.493269][T26195] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  497.696900][   T29] kauditd_printk_skb: 1177 callbacks suppressed
[  497.696915][   T29] audit: type=1400 audit(51904999.806:71767): avc:  denied  { create } for  pid=26194 comm="syz.4.7633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  497.725413][   T29] audit: type=1400 audit(51904999.826:71768): avc:  denied  { ioctl } for  pid=26194 comm="syz.4.7633" path="socket:[96194]" dev="sockfs" ino=96194 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  497.771138][   T29] audit: type=1400 audit(51904999.876:71769): avc:  denied  { module_request } for  pid=26214 comm="syz.2.7642" kmod="crypto-gcm(aria)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[  497.821522][   T29] audit: type=1326 audit(51904999.925:71770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26225 comm="syz.4.7643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a03b1e9a9 code=0x7ffc0000
[  497.845418][   T29] audit: type=1326 audit(51904999.925:71771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26225 comm="syz.4.7643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a03b1e9a9 code=0x7ffc0000
[  497.868907][   T29] audit: type=1326 audit(51904999.925:71772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26225 comm="syz.4.7643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f0a03b1e9a9 code=0x7ffc0000
[  497.892497][   T29] audit: type=1326 audit(51904999.925:71773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26225 comm="syz.4.7643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a03b1e9a9 code=0x7ffc0000
[  497.915945][   T29] audit: type=1326 audit(51904999.925:71774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26225 comm="syz.4.7643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a03b1e9a9 code=0x7ffc0000
[  497.939772][   T29] audit: type=1326 audit(51904999.925:71775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26225 comm="syz.4.7643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0a03b1e9a9 code=0x7ffc0000
[  497.963202][   T29] audit: type=1326 audit(51904999.925:71776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26225 comm="syz.4.7643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a03b1e9a9 code=0x7ffc0000
[  498.015698][T26232] netlink: 'syz.3.7645': attribute type 13 has an invalid length.
[  498.400184][T25396] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.447341][T25396] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.517486][T25396] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.567413][T25396] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.630177][T25396] batadv1: left allmulticast mode
[  498.635326][T25396] batadv1: left promiscuous mode
[  498.640499][T25396] bridge0: port 3(batadv1) entered disabled state
[  498.649748][T25396] bridge_slave_1: left allmulticast mode
[  498.655448][T25396] bridge_slave_1: left promiscuous mode
[  498.661209][T25396] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.674069][T25396] bridge_slave_0: left allmulticast mode
[  498.679875][T25396] bridge_slave_0: left promiscuous mode
[  498.685663][T25396] bridge0: port 1(bridge_slave_0) entered disabled state
[  498.799647][T25396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  498.810475][T25396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  498.820134][T25396] bond0 (unregistering): Released all slaves
[  498.831361][T25396] bond1 (unregistering): Released all slaves
[  498.892951][T25396] hsr_slave_0: left promiscuous mode
[  498.910068][T25396] hsr_slave_1: left promiscuous mode
[  498.920074][T26255] xt_l2tp: invalid flags combination: 8
[  498.926253][T25396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  498.933732][T25396] batman_adv: batadv0: Removing interface: batadv_slave_0
[  498.964291][T25396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  498.971948][T25396] batman_adv: batadv0: Removing interface: batadv_slave_1
[  498.998330][T25396] veth1_macvtap: left promiscuous mode
[  499.004028][T25396] veth0_macvtap: left promiscuous mode
[  499.009784][T25396] veth1_vlan: left promiscuous mode
[  499.015694][T25396] veth0_vlan: left promiscuous mode
[  499.083304][T25396] team0 (unregistering): Port device team_slave_1 removed
[  499.092871][T25396] team0 (unregistering): Port device team_slave_0 removed
[  499.254300][T26241] chnl_net:caif_netlink_parms(): no params data found
[  499.444430][T26241] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.451563][T26241] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.489637][T26241] bridge_slave_0: entered allmulticast mode
[  499.496201][T26241] bridge_slave_0: entered promiscuous mode
[  499.503931][T26241] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.511108][T26241] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.518406][T26241] bridge_slave_1: entered allmulticast mode
[  499.525211][T26241] bridge_slave_1: entered promiscuous mode
[  499.546385][T26294] netlink: 'syz.3.7665': attribute type 13 has an invalid length.
[  499.573792][T26241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.587657][T26241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.611990][T26241] team0: Port device team_slave_0 added
[  499.619071][T26241] team0: Port device team_slave_1 added
[  499.633842][T26241] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.640866][T26241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.666880][T26241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.679915][T26241] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.686882][T26241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  499.712983][T26241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.782913][T26241] hsr_slave_0: entered promiscuous mode
[  499.793466][T26241] hsr_slave_1: entered promiscuous mode
[  499.837790][T26241] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  499.846045][T26310] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  499.854787][T26241] Cannot create hsr debugfs directory
[  499.919150][T26315] loop4: detected capacity change from 0 to 512
[  499.943478][T26315] EXT4-fs: Ignoring removed nomblk_io_submit option
[  499.952036][T26315] EXT4-fs (loop4): can't mount with both data=journal and delalloc
[  499.996263][T26241] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  500.028015][T26241] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  500.051941][T26241] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  500.061040][T26241] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  500.087617][T26320] bond2: entered promiscuous mode
[  500.092809][T26320] bond2: entered allmulticast mode
[  500.099481][T26320] 8021q: adding VLAN 0 to HW filter on device bond2
[  500.109212][T26320] bond2 (unregistering): Released all slaves
[  500.192812][T26241] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.234902][T26241] 8021q: adding VLAN 0 to HW filter on device team0
[  500.253856][T10635] kernel write not supported for file /667/attr/exec (pid: 10635 comm: kworker/0:12)
[  500.267541][T25402] bridge0: port 1(bridge_slave_0) entered blocking state
[  500.274836][T25402] bridge0: port 1(bridge_slave_0) entered forwarding state
[  500.290214][T25402] bridge0: port 2(bridge_slave_1) entered blocking state
[  500.297348][T25402] bridge0: port 2(bridge_slave_1) entered forwarding state
[  500.326389][T26345] FAULT_INJECTION: forcing a failure.
[  500.326389][T26345] name failslab, interval 1, probability 0, space 0, times 0
[  500.339060][T26345] CPU: 0 UID: 0 PID: 26345 Comm: syz.2.7682 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  500.339088][T26345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  500.339100][T26345] Call Trace:
[  500.339107][T26345]  <TASK>
[  500.339125][T26345]  __dump_stack+0x1d/0x30
[  500.339146][T26345]  dump_stack_lvl+0xe8/0x140
[  500.339188][T26345]  dump_stack+0x15/0x1b
[  500.339201][T26345]  should_fail_ex+0x265/0x280
[  500.339235][T26345]  should_failslab+0x8c/0xb0
[  500.339257][T26345]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  500.339372][T26345]  ? sidtab_sid2str_get+0xa0/0x130
[  500.339461][T26345]  kmemdup_noprof+0x2b/0x70
[  500.339482][T26345]  sidtab_sid2str_get+0xa0/0x130
[  500.339503][T26345]  security_sid_to_context_core+0x1eb/0x2e0
[  500.339541][T26345]  security_sid_to_context+0x27/0x40
[  500.339575][T26345]  avc_audit_post_callback+0x9d/0x520
[  500.339601][T26345]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  500.339638][T26345]  common_lsm_audit+0x1bb/0x230
[  500.339657][T26345]  ? __pfx_avc_audit_post_callback+0x10/0x10
[  500.339684][T26345]  slow_avc_audit+0x104/0x140
[  500.339751][T26345]  avc_has_perm+0x128/0x150
[  500.339776][T26345]  selinux_mmap_file+0x147/0x1d0
[  500.339799][T26345]  security_mmap_file+0x175/0x1c0
[  500.339817][T26345]  vm_mmap_pgoff+0x90/0x2e0
[  500.339869][T26345]  ksys_mmap_pgoff+0x268/0x310
[  500.339935][T26345]  x64_sys_call+0x1602/0x2fb0
[  500.339955][T26345]  do_syscall_64+0xd2/0x200
[  500.339974][T26345]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  500.339999][T26345]  ? clear_bhb_loop+0x40/0x90
[  500.340037][T26345]  ? clear_bhb_loop+0x40/0x90
[  500.340058][T26345]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  500.340158][T26345] RIP: 0033:0x7fa24edee9a9
[  500.340250][T26345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  500.340268][T26345] RSP: 002b:00007fa24d457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  500.340284][T26345] RAX: ffffffffffffffda RBX: 00007fa24f015fa0 RCX: 00007fa24edee9a9
[  500.340307][T26345] RDX: 0000000003000009 RSI: 0000000000003000 RDI: 0000200000003000
[  500.340318][T26345] RBP: 00007fa24d457090 R08: 0000000000000003 R09: 0000000000000000
[  500.340328][T26345] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001
[  500.340415][T26345] R13: 0000000000000000 R14: 00007fa24f015fa0 R15: 00007ffc59efd558
[  500.340432][T26345]  </TASK>
[  500.405712][T26241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  500.591555][T26241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  500.612944][T26346] SELinux:  policydb version 922656840 does not match my version range 15-34
[  500.622670][T26346] SELinux: failed to load policy
[  500.625083][T26349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  500.650647][T26349] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  500.665133][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7683'.
[  500.674302][T26349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7683'.
[  500.794844][T26241] 8021q: adding VLAN 0 to HW filter on device batadv0
[  500.808898][T26357] bond0: entered promiscuous mode
[  500.814108][T26357] bond0: entered allmulticast mode
[  500.831073][T26357] 8021q: adding VLAN 0 to HW filter on device bond0
[  500.842018][T26357] bond0 (unregistering): Released all slaves
[  500.931547][T26381] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  500.959145][T26386] loop3: detected capacity change from 0 to 512
[  500.966359][T26386] EXT4-fs: Ignoring removed nomblk_io_submit option
[  500.974234][T26386] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  500.982012][T26241] veth0_vlan: entered promiscuous mode
[  500.995035][T26241] veth1_vlan: entered promiscuous mode
[  501.021450][T26241] veth0_macvtap: entered promiscuous mode
[  501.036443][T26241] veth1_macvtap: entered promiscuous mode
[  501.063827][T26391] netlink: 'syz.4.7694': attribute type 13 has an invalid length.
[  501.089598][T26241] batman_adv: batadv0: Interface activated: batadv_slave_0
[  501.101235][T26241] batman_adv: batadv0: Interface activated: batadv_slave_1
[  501.111376][T26241] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  501.120259][T26241] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  501.129222][T26241] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  501.138095][T26241] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.246113][T26400] SELinux:  policydb version 150994968 does not match my version range 15-34
[  501.255180][T26400] SELinux: failed to load policy
[  501.299228][T26407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7699'.
[  501.361139][T26410] bond1: entered promiscuous mode
[  501.366735][T26410] bond1: entered allmulticast mode
[  501.375138][T26410] 8021q: adding VLAN 0 to HW filter on device bond1
[  501.388999][T26410] bond1 (unregistering): Released all slaves
[  501.630273][T26419] netlink: 14 bytes leftover after parsing attributes in process `syz.5.7703'.
[  501.648369][T26419] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  501.650054][T26421] netlink: 'syz.1.7704': attribute type 10 has an invalid length.
[  501.666910][T26419] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  501.677607][T26419] bond0 (unregistering): Released all slaves
[  501.697138][T26421] team0: Port device dummy0 added
[  501.863109][T26432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  501.871841][T26432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.124444][T26436] xt_hashlimit: size too large, truncated to 1048576
[  502.177788][T26437] FAULT_INJECTION: forcing a failure.
[  502.177788][T26437] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  502.190904][T26437] CPU: 1 UID: 0 PID: 26437 Comm: syz.3.7711 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  502.190970][T26437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  502.190982][T26437] Call Trace:
[  502.190989][T26437]  <TASK>
[  502.190997][T26437]  __dump_stack+0x1d/0x30
[  502.191019][T26437]  dump_stack_lvl+0xe8/0x140
[  502.191042][T26437]  dump_stack+0x15/0x1b
[  502.191074][T26437]  should_fail_ex+0x265/0x280
[  502.191100][T26437]  should_fail+0xb/0x20
[  502.191121][T26437]  should_fail_usercopy+0x1a/0x20
[  502.191145][T26437]  _copy_to_user+0x20/0xa0
[  502.191234][T26437]  simple_read_from_buffer+0xb5/0x130
[  502.191293][T26437]  proc_fail_nth_read+0x100/0x140
[  502.191324][T26437]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  502.191384][T26437]  vfs_read+0x19d/0x6f0
[  502.191406][T26437]  ? __rcu_read_unlock+0x4f/0x70
[  502.191424][T26437]  ? __fget_files+0x184/0x1c0
[  502.191458][T26437]  ksys_read+0xda/0x1a0
[  502.191484][T26437]  __x64_sys_read+0x40/0x50
[  502.191567][T26437]  x64_sys_call+0x2d77/0x2fb0
[  502.191585][T26437]  do_syscall_64+0xd2/0x200
[  502.191601][T26437]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  502.191621][T26437]  ? clear_bhb_loop+0x40/0x90
[  502.191681][T26437]  ? clear_bhb_loop+0x40/0x90
[  502.191710][T26437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.191755][T26437] RIP: 0033:0x7fcbeb23d3bc
[  502.191769][T26437] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  502.191784][T26437] RSP: 002b:00007fcbe987e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  502.191800][T26437] RAX: ffffffffffffffda RBX: 00007fcbeb466080 RCX: 00007fcbeb23d3bc
[  502.191812][T26437] RDX: 000000000000000f RSI: 00007fcbe987e0a0 RDI: 0000000000000005
[  502.191824][T26437] RBP: 00007fcbe987e090 R08: 0000000000000000 R09: 0000000000000000
[  502.191834][T26437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  502.191866][T26437] R13: 0000000000000000 R14: 00007fcbeb466080 R15: 00007ffd601b0c88
[  502.191946][T26437]  </TASK>
[  502.423383][T26440] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  502.431071][T26440] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98
[  502.441430][T26442] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  502.570461][T26454] hub 6-0:1.0: USB hub found
[  502.583202][T26454] hub 6-0:1.0: 8 ports detected
[  502.592159][T26458] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7720'.
[  502.605142][T26458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  502.615742][T26458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  502.630307][T26458] bond0 (unregistering): Released all slaves
[  502.717377][   T29] kauditd_printk_skb: 927 callbacks suppressed
[  502.717391][   T29] audit: type=1326 audit(51905004.813:72704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26439 comm="syz.1.7712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e104d5967 code=0x7ffc0000
[  502.747045][   T29] audit: type=1326 audit(51905004.813:72705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26439 comm="syz.1.7712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e1047ab89 code=0x7ffc0000
[  502.770449][   T29] audit: type=1326 audit(51905004.813:72706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26439 comm="syz.1.7712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9e104de9a9 code=0x7ffc0000
[  502.797014][T26465] xt_hashlimit: size too large, truncated to 1048576
[  502.798705][   T29] audit: type=1326 audit(51905004.843:72707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26439 comm="syz.1.7712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e104d5967 code=0x7ffc0000
[  502.827159][   T29] audit: type=1326 audit(51905004.843:72708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26439 comm="syz.1.7712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e1047ab89 code=0x7ffc0000
[  502.850704][   T29] audit: type=1326 audit(51905004.843:72709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26439 comm="syz.1.7712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9e104de9a9 code=0x7ffc0000
[  502.874240][   T29] audit: type=1326 audit(51905004.873:72710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26439 comm="syz.1.7712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e104d5967 code=0x7ffc0000
[  502.898268][   T29] audit: type=1326 audit(51905004.873:72711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26439 comm="syz.1.7712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e1047ab89 code=0x7ffc0000
[  502.921660][   T29] audit: type=1326 audit(51905004.873:72712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26439 comm="syz.1.7712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f9e104de9a9 code=0x7ffc0000
[  502.945349][   T29] audit: type=1326 audit(51905004.873:72713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26439 comm="syz.1.7712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e104d5967 code=0x7ffc0000
[  503.010091][T26470] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  503.024271][T26472] xt_hashlimit: size too large, truncated to 1048576
[  503.035965][T26474] netlink: 'syz.2.7726': attribute type 10 has an invalid length.
[  503.058177][T26474] netlink: 'syz.2.7726': attribute type 178 has an invalid length.
[  503.066344][T26475] netlink: 'syz.2.7726': attribute type 178 has an invalid length.
[  503.075567][T26474] netlink: 'syz.2.7726': attribute type 10 has an invalid length.
[  503.083436][T26474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7726'.
[  503.094867][T26474] batadv0: entered promiscuous mode
[  503.100308][T26474] batadv0: entered allmulticast mode
[  503.106192][T26474] bridge0: port 1(batadv0) entered blocking state
[  503.112769][T26474] bridge0: port 1(batadv0) entered disabled state
[  503.177369][T26482] 9pnet: Could not find request transport: fd0x0000000000000007
[  503.222602][T25402] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  503.231918][T25402] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  503.344007][T26484] xt_l2tp: invalid flags combination: 8
[  503.344507][T26498] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  503.359520][T26501] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  503.366114][T26501] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  503.373931][T26501] vhci_hcd vhci_hcd.0: Device attached
[  503.380086][T26502] usbip_core: unknown command
[  503.384761][T26502] vhci_hcd: unknown pdu 1937339231
[  503.389904][T26502] usbip_core: unknown command
[  503.399614][T25371] vhci_hcd: stop threads
[  503.403951][T25371] vhci_hcd: release socket
[  503.405649][T26497] bond0: entered promiscuous mode
[  503.408396][T25371] vhci_hcd: disconnect device
[  503.418343][T26497] bond0: entered allmulticast mode
[  503.424484][T26497] 8021q: adding VLAN 0 to HW filter on device bond0
[  503.434143][T26497] bond0 (unregistering): Released all slaves
[  503.446558][T26500] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  503.485949][T26513] 9pnet: Could not find request transport: fd0x0000000000000007
[  503.527725][T26518] loop3: detected capacity change from 0 to 512
[  503.547656][T26521] loop4: detected capacity change from 0 to 512
[  503.556115][T26518] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  503.571566][T26518] EXT4-fs (loop3): mount failed
[  503.580462][T26521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.590831][T26518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7742'.
[  503.607816][T22604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.631656][T26532] 9pnet_virtio: no channels available for device 127.0.0.1
[  503.642365][T26532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7745'.
[  503.673729][T26531] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  503.712721][T26541] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  503.753383][T26547] 9pnet: Could not find request transport: fd0x0000000000000007
[  503.762579][T26551] loop4: detected capacity change from 0 to 128
[  503.769813][T26543] netlink: 'syz.2.7751': attribute type 13 has an invalid length.
[  503.811690][T26558] loop4: detected capacity change from 0 to 512
[  503.831498][T26556] loop3: detected capacity change from 0 to 1024
[  503.839765][T26556] EXT4-fs: Ignoring removed oldalloc option
[  503.846635][T26558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.850526][T26556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  503.882562][T22604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.912792][T21589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  503.943669][T26570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.962135][T26575] FAULT_INJECTION: forcing a failure.
[  503.962135][T26575] name failslab, interval 1, probability 0, space 0, times 0
[  503.965505][T26573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.974833][T26575] CPU: 0 UID: 0 PID: 26575 Comm: syz.5.7761 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  503.974861][T26575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  503.974873][T26575] Call Trace:
[  503.974914][T26575]  <TASK>
[  503.974971][T26575]  __dump_stack+0x1d/0x30
[  503.974994][T26575]  dump_stack_lvl+0xe8/0x140
[  503.975028][T26575]  dump_stack+0x15/0x1b
[  503.975044][T26575]  should_fail_ex+0x265/0x280
[  503.975149][T26575]  should_failslab+0x8c/0xb0
[  503.975170][T26575]  kmem_cache_alloc_noprof+0x50/0x310
[  503.975236][T26575]  ? getname_flags+0x80/0x3b0
[  503.975258][T26575]  getname_flags+0x80/0x3b0
[  503.975278][T26575]  __x64_sys_rename+0x33/0x70
[  503.975296][T26575]  x64_sys_call+0x2aee/0x2fb0
[  503.975388][T26575]  do_syscall_64+0xd2/0x200
[  503.975407][T26575]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  503.975431][T26575]  ? clear_bhb_loop+0x40/0x90
[  503.975451][T26575]  ? clear_bhb_loop+0x40/0x90
[  503.975510][T26575]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  503.975598][T26575] RIP: 0033:0x7f39a8bae9a9
[  503.975614][T26575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  503.975630][T26575] RSP: 002b:00007f39a720f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  503.975649][T26575] RAX: ffffffffffffffda RBX: 00007f39a8dd5fa0 RCX: 00007f39a8bae9a9
[  503.975662][T26575] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000200000000180
[  503.975674][T26575] RBP: 00007f39a720f090 R08: 0000000000000000 R09: 0000000000000000
[  503.975689][T26575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  503.975765][T26575] R13: 0000000000000000 R14: 00007f39a8dd5fa0 R15: 00007ffda40dcb58
[  503.975784][T26575]  </TASK>
[  504.160417][T26573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  504.186044][T26570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.227306][T26580] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  504.252318][T26570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.292144][T26570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.355934][T26570] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.367033][T26570] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.378009][T26570] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.389040][T26570] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  504.428224][T26585] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  504.450805][T26587] 9pnet_fd: Insufficient options for proto=fd
[  504.469243][T26589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7767'.
[  504.488779][T26589] loop3: detected capacity change from 0 to 512
[  504.495705][T26589] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  504.506325][T26589] EXT4-fs (loop3): orphan cleanup on readonly fs
[  504.513093][T26589] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.7767: Block bitmap for bg 0 marked uninitialized
[  504.526700][T26589] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  504.536082][T26589] EXT4-fs (loop3): 1 orphan inode deleted
[  504.542264][T26589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  504.557330][T26589] lo speed is unknown, defaulting to 1000
[  504.563223][T26589] lo speed is unknown, defaulting to 1000
[  504.569313][T26589] lo speed is unknown, defaulting to 1000
[  504.575988][T26589] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  504.586185][T26589] lo speed is unknown, defaulting to 1000
[  504.592260][T26589] lo speed is unknown, defaulting to 1000
[  504.598355][T26589] lo speed is unknown, defaulting to 1000
[  504.604304][T26589] lo speed is unknown, defaulting to 1000
[  504.610321][T26589] lo speed is unknown, defaulting to 1000
[  504.625889][T21589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.646336][T26595] loop3: detected capacity change from 0 to 1024
[  504.653236][T26595] EXT4-fs: Ignoring removed i_version option
[  504.659309][T26595] EXT4-fs: Ignoring removed orlov option
[  504.671496][T26595] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  504.722060][T26608] loop3: detected capacity change from 0 to 512
[  504.743815][T26608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  504.769645][T21589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.781254][T26613] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  504.812821][T26620] 9pnet_fd: Insufficient options for proto=fd
[  504.833731][T26622] FAULT_INJECTION: forcing a failure.
[  504.833731][T26622] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  504.846987][T26622] CPU: 1 UID: 0 PID: 26622 Comm: syz.1.7778 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  504.847046][T26622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  504.847059][T26622] Call Trace:
[  504.847066][T26622]  <TASK>
[  504.847074][T26622]  __dump_stack+0x1d/0x30
[  504.847103][T26622]  dump_stack_lvl+0xe8/0x140
[  504.847123][T26622]  dump_stack+0x15/0x1b
[  504.847140][T26622]  should_fail_ex+0x265/0x280
[  504.847227][T26622]  should_fail+0xb/0x20
[  504.847253][T26622]  should_fail_usercopy+0x1a/0x20
[  504.847329][T26622]  _copy_from_user+0x1c/0xb0
[  504.847350][T26622]  ___sys_sendmsg+0xc1/0x1d0
[  504.847433][T26622]  __x64_sys_sendmsg+0xd4/0x160
[  504.847513][T26622]  x64_sys_call+0x2999/0x2fb0
[  504.847534][T26622]  do_syscall_64+0xd2/0x200
[  504.847586][T26622]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  504.847612][T26622]  ? clear_bhb_loop+0x40/0x90
[  504.847655][T26622]  ? clear_bhb_loop+0x40/0x90
[  504.847677][T26622]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.847696][T26622] RIP: 0033:0x7f9e104de9a9
[  504.847711][T26622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  504.847793][T26622] RSP: 002b:00007f9e0eb3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  504.847813][T26622] RAX: ffffffffffffffda RBX: 00007f9e10705fa0 RCX: 00007f9e104de9a9
[  504.847827][T26622] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006
[  504.847841][T26622] RBP: 00007f9e0eb3f090 R08: 0000000000000000 R09: 0000000000000000
[  504.847853][T26622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  504.847867][T26622] R13: 0000000000000000 R14: 00007f9e10705fa0 R15: 00007fff50c47278
[  504.847920][T26622]  </TASK>
[  504.880043][T26623] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6)
[  505.033140][T26623] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  505.041081][T26623] vhci_hcd vhci_hcd.0: Device attached
[  505.055511][T26630] netlink: 264 bytes leftover after parsing attributes in process `syz.1.7780'.
[  505.155115][T26637] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  505.161705][T26637] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  505.169452][T26637] vhci_hcd vhci_hcd.0: Device attached
[  505.282504][T26648] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  505.311265][T26652] 9pnet_fd: Insufficient options for proto=fd
[  505.462837][T10636] usb 12-1: SetAddress Request (2) to port 0
[  505.469045][T10636] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd
[  505.627345][T26624] vhci_hcd: connection closed
[  505.627475][T25371] vhci_hcd: stop threads
[  505.636612][T25371] vhci_hcd: release socket
[  505.641069][T25371] vhci_hcd: disconnect device
[  505.934822][T26638] vhci_hcd: connection reset by peer
[  505.940217][T25396] vhci_hcd: stop threads
[  505.944508][T25396] vhci_hcd: release socket
[  505.948935][T25396] vhci_hcd: disconnect device
[  506.198531][T26672] loop3: detected capacity change from 0 to 1024
[  506.205218][T26672] EXT4-fs: Ignoring removed i_version option
[  506.211188][T26672] EXT4-fs: Ignoring removed orlov option
[  506.224561][T26672] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal
[  506.289447][T26679] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  506.327998][T26687] 9pnet_fd: Insufficient options for proto=fd
[  506.351543][T26691] netlink: 'syz.3.7804': attribute type 10 has an invalid length.
[  506.359486][T26691] __nla_validate_parse: 2 callbacks suppressed
[  506.359579][T26691] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7804'.
[  506.374867][T26691] team0: entered promiscuous mode
[  506.379977][T26691] team_slave_0: entered promiscuous mode
[  506.385696][T26691] team_slave_1: entered promiscuous mode
[  506.391357][T26691] team0: entered allmulticast mode
[  506.396593][T26691] team_slave_0: entered allmulticast mode
[  506.402312][T26691] team_slave_1: entered allmulticast mode
[  506.408776][T26691] bridge0: port 1(team0) entered blocking state
[  506.415089][T26691] bridge0: port 1(team0) entered disabled state
[  506.421220][T26694] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  506.422790][T26691] bridge0: port 1(team0) entered blocking state
[  506.427806][T26694] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  506.427893][T26694] vhci_hcd vhci_hcd.0: Device attached
[  506.434061][T26691] bridge0: port 1(team0) entered forwarding state
[  506.444701][T26698] usbip_core: unknown command
[  506.458701][T26698] vhci_hcd: unknown pdu 0
[  506.463095][T26698] usbip_core: unknown command
[  506.468734][T25371] vhci_hcd: stop threads
[  506.472989][T25371] vhci_hcd: release socket
[  506.477604][T25371] vhci_hcd: disconnect device
[  506.487134][T26701] loop3: detected capacity change from 0 to 512
[  506.493775][T26701] EXT4-fs: Ignoring removed nomblk_io_submit option
[  506.506433][T26701] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  506.534004][T26705] xt_hashlimit: size too large, truncated to 1048576
[  506.671009][T26712] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  506.692115][T26714] bond0: entered promiscuous mode
[  506.697348][T26714] bond0: entered allmulticast mode
[  506.702781][T26714] 8021q: adding VLAN 0 to HW filter on device bond0
[  506.713321][T26714] bond0 (unregistering): Released all slaves
[  506.732504][T26719] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  506.765439][T26723] 9pnet_fd: Insufficient options for proto=fd
[  506.847016][T26725] xt_hashlimit: size too large, truncated to 1048576
[  507.027104][T26738] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  507.033630][T26738] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  507.041552][T26738] vhci_hcd vhci_hcd.0: Device attached
[  507.237522][T26750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7824'.
[  507.366645][T10639] usb 10-1: SetAddress Request (30) to port 0
[  507.375547][T10639] usb 10-1: new SuperSpeed USB device number 30 using vhci_hcd
[  507.423237][T26755] 9pnet_fd: Insufficient options for proto=fd
[  507.457711][T26760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7828'.
[  507.715472][T26773] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  507.762214][T26777] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  507.769994][T26743] vhci_hcd: connection reset by peer
[  507.775660][T25348] vhci_hcd: stop threads
[  507.780021][T25348] vhci_hcd: release socket
[  507.784480][T25348] vhci_hcd: disconnect device
[  507.846958][   T29] kauditd_printk_skb: 696 callbacks suppressed
[  507.846974][   T29] audit: type=1400 audit(51905009.892:73409): avc:  denied  { mount } for  pid=26778 comm="syz.2.7837" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  507.855175][T26785] loop3: detected capacity change from 0 to 512
[  507.875235][   T29] audit: type=1326 audit(51905009.902:73410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeb23e9a9 code=0x7ffc0000
[  507.875257][   T29] audit: type=1326 audit(51905009.902:73411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fcbeb23e9a9 code=0x7ffc0000
[  507.881928][T26785] EXT4-fs: Ignoring removed nomblk_io_submit option
[  507.904900][   T29] audit: type=1326 audit(51905009.902:73412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeb23e9a9 code=0x7ffc0000
[  507.936223][T26785] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  507.958484][   T29] audit: type=1326 audit(51905009.902:73413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeb23e9a9 code=0x7ffc0000
[  507.958541][   T29] audit: type=1326 audit(51905009.902:73414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcbeb23e9a9 code=0x7ffc0000
[  508.013435][   T29] audit: type=1326 audit(51905009.902:73415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeb23e9a9 code=0x7ffc0000
[  508.037093][   T29] audit: type=1326 audit(51905009.902:73416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeb23e9a9 code=0x7ffc0000
[  508.060704][   T29] audit: type=1326 audit(51905009.902:73417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fcbeb23e9a9 code=0x7ffc0000
[  508.084200][   T29] audit: type=1326 audit(51905009.902:73418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26780 comm="syz.3.7838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbeb23e9a9 code=0x7ffc0000
[  508.132961][T26792] bond0: entered promiscuous mode
[  508.138130][T26792] bond0: entered allmulticast mode
[  508.144379][T26792] 8021q: adding VLAN 0 to HW filter on device bond0
[  508.154906][T26792] bond0 (unregistering): Released all slaves
[  508.196429][T26797] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  508.212409][T26799] 9pnet_virtio: no channels available for device 127.0.0.1
[  508.264338][T26805] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  508.304202][T26813] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6)
[  508.310832][T26813] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  508.318586][T26813] vhci_hcd vhci_hcd.0: Device attached
[  508.325809][T26814] usbip_core: unknown command
[  508.330550][T26814] vhci_hcd: unknown pdu 0
[  508.334933][T26814] usbip_core: unknown command
[  508.339919][T25396] vhci_hcd: stop threads
[  508.344185][T25396] vhci_hcd: release socket
[  508.348654][T25396] vhci_hcd: disconnect device
[  508.407165][T26825] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  508.435466][T26829] 9pnet: Could not find request transport: fd0x0000000000000007
[  508.447307][T26832] 9pnet_virtio: no channels available for device 127.0.0.1
[  508.455630][T26832] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7860'.
[  508.496030][T26836] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  508.510990][T26838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7863'.
[  508.554648][T26849] FAULT_INJECTION: forcing a failure.
[  508.554648][T26849] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  508.567970][T26849] CPU: 0 UID: 0 PID: 26849 Comm: syz.1.7868 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  508.567995][T26849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  508.568005][T26849] Call Trace:
[  508.568011][T26849]  <TASK>
[  508.568087][T26849]  __dump_stack+0x1d/0x30
[  508.568107][T26849]  dump_stack_lvl+0xe8/0x140
[  508.568126][T26849]  dump_stack+0x15/0x1b
[  508.568141][T26849]  should_fail_ex+0x265/0x280
[  508.568209][T26849]  should_fail+0xb/0x20
[  508.568234][T26849]  should_fail_usercopy+0x1a/0x20
[  508.568261][T26849]  _copy_from_user+0x1c/0xb0
[  508.568282][T26849]  copy_from_bpfptr+0x5c/0x90
[  508.568361][T26849]  bpf_prog_load+0x74a/0x1070
[  508.568419][T26849]  ? security_bpf+0x2b/0x90
[  508.568436][T26849]  __sys_bpf+0x51d/0x790
[  508.568465][T26849]  __x64_sys_bpf+0x41/0x50
[  508.568490][T26849]  x64_sys_call+0x2478/0x2fb0
[  508.568512][T26849]  do_syscall_64+0xd2/0x200
[  508.568530][T26849]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  508.568559][T26849]  ? clear_bhb_loop+0x40/0x90
[  508.568586][T26849]  ? clear_bhb_loop+0x40/0x90
[  508.568684][T26849]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  508.568704][T26849] RIP: 0033:0x7f9e104de9a9
[  508.568717][T26849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  508.568768][T26849] RSP: 002b:00007f9e0eb3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  508.568788][T26849] RAX: ffffffffffffffda RBX: 00007f9e10705fa0 RCX: 00007f9e104de9a9
[  508.568802][T26849] RDX: 0000000000000090 RSI: 0000200000000340 RDI: 0000000000000005
[  508.568815][T26849] RBP: 00007f9e0eb3f090 R08: 0000000000000000 R09: 0000000000000000
[  508.568900][T26849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  508.568911][T26849] R13: 0000000000000000 R14: 00007f9e10705fa0 R15: 00007fff50c47278
[  508.568926][T26849]  </TASK>
[  508.761606][T26852] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  508.768137][T26852] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  508.775987][T26852] vhci_hcd vhci_hcd.0: Device attached
[  508.805644][T26858] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  508.830647][T26861] 9pnet: Could not find request transport: fd0x0000000000000007
[  508.870766][T26864] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125
[  508.981807][T26873] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  509.029470][T26884] FAULT_INJECTION: forcing a failure.
[  509.029470][T26884] name failslab, interval 1, probability 0, space 0, times 0
[  509.039566][T26881] xt_hashlimit: size too large, truncated to 1048576
[  509.042196][T26884] CPU: 1 UID: 0 PID: 26884 Comm: syz.4.7881 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  509.042225][T26884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  509.042237][T26884] Call Trace:
[  509.042244][T26884]  <TASK>
[  509.042252][T26884]  __dump_stack+0x1d/0x30
[  509.042274][T26884]  dump_stack_lvl+0xe8/0x140
[  509.042324][T26884]  dump_stack+0x15/0x1b
[  509.042340][T26884]  should_fail_ex+0x265/0x280
[  509.042369][T26884]  should_failslab+0x8c/0xb0
[  509.042395][T26884]  kmem_cache_alloc_noprof+0x50/0x310
[  509.042419][T26884]  ? skb_clone+0x151/0x1f0
[  509.042467][T26884]  skb_clone+0x151/0x1f0
[  509.042484][T26884]  __netlink_deliver_tap+0x2c9/0x500
[  509.042507][T26884]  netlink_unicast+0x653/0x680
[  509.042537][T26884]  netlink_sendmsg+0x58b/0x6b0
[  509.042589][T26884]  ? __pfx_netlink_sendmsg+0x10/0x10
[  509.042609][T26884]  __sock_sendmsg+0x145/0x180
[  509.042632][T26884]  ____sys_sendmsg+0x31e/0x4e0
[  509.042653][T26884]  ___sys_sendmsg+0x17b/0x1d0
[  509.042722][T26884]  __x64_sys_sendmsg+0xd4/0x160
[  509.042745][T26884]  x64_sys_call+0x2999/0x2fb0
[  509.042842][T26884]  do_syscall_64+0xd2/0x200
[  509.042860][T26884]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  509.042884][T26884]  ? clear_bhb_loop+0x40/0x90
[  509.042904][T26884]  ? clear_bhb_loop+0x40/0x90
[  509.042992][T26884]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  509.043012][T26884] RIP: 0033:0x7f0a03b1e9a9
[  509.043026][T26884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  509.043043][T26884] RSP: 002b:00007f0a02187038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  509.043134][T26884] RAX: ffffffffffffffda RBX: 00007f0a03d45fa0 RCX: 00007f0a03b1e9a9
[  509.043147][T26884] RDX: 0000000000040080 RSI: 0000200000000080 RDI: 0000000000000005
[  509.043159][T26884] RBP: 00007f0a02187090 R08: 0000000000000000 R09: 0000000000000000
[  509.043171][T26884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  509.043183][T26884] R13: 0000000000000000 R14: 00007f0a03d45fa0 R15: 00007ffc9fabfe98
[  509.043201][T26884]  </TASK>
[  509.291255][T26890] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7883'.
[  509.370028][T26895] 9pnet: Could not find request transport: fd0x0000000000000007
[  509.378205][T26854] vhci_hcd: connection closed
[  509.379025][T25371] vhci_hcd: stop threads
[  509.388314][T25371] vhci_hcd: release socket
[  509.392760][T25371] vhci_hcd: disconnect device
[  509.508180][T26904] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  509.548372][T26908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7891'.
[  509.587223][T26910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7892'.
[  509.638050][T26916] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7895'.
[  509.684152][T26918] xt_hashlimit: size too large, truncated to 1048576
[  509.826650][T26927] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  509.862074][T26930] 9pnet: Could not find request transport: fd0x0000000000000007
[  509.883710][T26931] bond3: entered promiscuous mode
[  509.888771][T26931] bond3: entered allmulticast mode
[  509.908131][T26931] 8021q: adding VLAN 0 to HW filter on device bond3
[  509.918503][T26931] bond3 (unregistering): Released all slaves
[  509.999228][T26947] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6)
[  510.005828][T26947] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  510.013536][T26947] vhci_hcd vhci_hcd.0: Device attached
[  510.022958][T26948] usbip_core: unknown command
[  510.027777][T26948] vhci_hcd: unknown pdu 0
[  510.032132][T26948] usbip_core: unknown command
[  510.037094][T25348] vhci_hcd: stop threads
[  510.041460][T25348] vhci_hcd: release socket
[  510.045903][T25348] vhci_hcd: disconnect device
[  510.068073][T26953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7907'.
[  510.146444][T26957] netlink: 'syz.1.7909': attribute type 1 has an invalid length.
[  510.172865][T26957] 8021q: adding VLAN 0 to HW filter on device bond3
[  510.191892][T26957] bond3 (unregistering): Released all slaves
[  510.207288][T26959] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  510.252034][T26962] loop3: detected capacity change from 0 to 2048
[  510.288762][T26965] 9pnet: Could not find request transport: fd0x0000000000000007
[  510.513296][T26985] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  510.545204][T26989] loop3: detected capacity change from 0 to 512
[  510.554357][T26993] FAULT_INJECTION: forcing a failure.
[  510.554357][T26993] name failslab, interval 1, probability 0, space 0, times 0
[  510.567268][T26993] CPU: 0 UID: 0 PID: 26993 Comm: syz.2.7923 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  510.567318][T26993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  510.567357][T26993] Call Trace:
[  510.567364][T26993]  <TASK>
[  510.567371][T26993]  __dump_stack+0x1d/0x30
[  510.567407][T26993]  dump_stack_lvl+0xe8/0x140
[  510.567427][T26993]  dump_stack+0x15/0x1b
[  510.567444][T26993]  should_fail_ex+0x265/0x280
[  510.567481][T26993]  should_failslab+0x8c/0xb0
[  510.567532][T26993]  kmem_cache_alloc_noprof+0x50/0x310
[  510.567556][T26993]  ? prepare_creds+0x37/0x4c0
[  510.567577][T26993]  prepare_creds+0x37/0x4c0
[  510.567596][T26993]  selinux_lsm_setattr+0x1a4/0x660
[  510.567621][T26993]  selinux_setprocattr+0x4f/0x70
[  510.567649][T26993]  security_setprocattr+0x1a7/0x1d0
[  510.567715][T26993]  proc_pid_attr_write+0x1eb/0x220
[  510.567742][T26993]  ? __pfx_proc_pid_attr_write+0x10/0x10
[  510.567766][T26993]  vfs_write+0x269/0x8e0
[  510.567822][T26993]  ? __rcu_read_unlock+0x4f/0x70
[  510.567842][T26993]  ? __fget_files+0x184/0x1c0
[  510.567861][T26993]  ksys_write+0xda/0x1a0
[  510.567886][T26993]  __x64_sys_write+0x40/0x50
[  510.567981][T26993]  x64_sys_call+0x2cdd/0x2fb0
[  510.568000][T26993]  do_syscall_64+0xd2/0x200
[  510.568020][T26993]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  510.568045][T26993]  ? clear_bhb_loop+0x40/0x90
[  510.568141][T26993]  ? clear_bhb_loop+0x40/0x90
[  510.568214][T26993]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  510.568296][T26993] RIP: 0033:0x7fa24edee9a9
[  510.568312][T26993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  510.568328][T26993] RSP: 002b:00007fa24d457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  510.568345][T26993] RAX: ffffffffffffffda RBX: 00007fa24f015fa0 RCX: 00007fa24edee9a9
[  510.568356][T26993] RDX: 000000000000001d RSI: 0000200000000100 RDI: 0000000000000006
[  510.568418][T26993] RBP: 00007fa24d457090 R08: 0000000000000000 R09: 0000000000000000
[  510.568431][T26993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  510.568445][T26993] R13: 0000000000000000 R14: 00007fa24f015fa0 R15: 00007ffc59efd558
[  510.568468][T26993]  </TASK>
[  510.569649][T10636] usb 12-1: device descriptor read/8, error -110
[  510.608332][T26989] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  510.716899][T26994] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  510.814856][T10636] usb 12-1: new SuperSpeed USB device number 2 using vhci_hcd
[  510.852006][T10636] usb 12-1: enqueue for inactive port 0
[  510.857637][T10636] usb 12-1: enqueue for inactive port 0
[  510.857954][T26989] EXT4-fs (loop3): orphan cleanup on readonly fs
[  510.863241][T10636] usb 12-1: enqueue for inactive port 0
[  510.877020][T26989] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.7921: Block bitmap for bg 0 marked uninitialized
[  510.890797][T26989] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  510.900026][T26989] EXT4-fs (loop3): 1 orphan inode deleted
[  510.906250][T26989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  511.017211][T21589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  511.036796][T27015] loop3: detected capacity change from 0 to 512
[  511.043685][T27015] EXT4-fs: Ignoring removed nomblk_io_submit option
[  511.050939][T27015] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  511.129761][T27026] FAULT_INJECTION: forcing a failure.
[  511.129761][T27026] name failslab, interval 1, probability 0, space 0, times 0
[  511.142468][T27026] CPU: 1 UID: 0 PID: 27026 Comm: syz.1.7937 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  511.142494][T27026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  511.142505][T27026] Call Trace:
[  511.142511][T27026]  <TASK>
[  511.142517][T27026]  __dump_stack+0x1d/0x30
[  511.142539][T27026]  dump_stack_lvl+0xe8/0x140
[  511.142556][T27026]  dump_stack+0x15/0x1b
[  511.142572][T27026]  should_fail_ex+0x265/0x280
[  511.142598][T27026]  should_failslab+0x8c/0xb0
[  511.142625][T27026]  kmem_cache_alloc_noprof+0x50/0x310
[  511.142648][T27026]  ? vm_area_dup+0x33/0x2c0
[  511.142672][T27026]  vm_area_dup+0x33/0x2c0
[  511.142695][T27026]  copy_vma+0x2e2/0x580
[  511.142723][T27026]  move_vma+0x42c/0xcd0
[  511.142746][T27026]  ? selinux_mmap_addr+0x99/0xb0
[  511.142767][T27026]  ? security_mmap_addr+0x5f/0x70
[  511.142789][T27026]  mremap_to+0x502/0x540
[  511.142815][T27026]  __se_sys_mremap+0x549/0x6f0
[  511.142841][T27026]  ? ksys_write+0x192/0x1a0
[  511.142865][T27026]  __x64_sys_mremap+0x67/0x80
[  511.142883][T27026]  x64_sys_call+0x2ba9/0x2fb0
[  511.142900][T27026]  do_syscall_64+0xd2/0x200
[  511.142916][T27026]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  511.142935][T27026]  ? clear_bhb_loop+0x40/0x90
[  511.142952][T27026]  ? clear_bhb_loop+0x40/0x90
[  511.142968][T27026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.142984][T27026] RIP: 0033:0x7f9e104de9a9
[  511.142997][T27026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  511.143013][T27026] RSP: 002b:00007f9e0eb3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  511.143030][T27026] RAX: ffffffffffffffda RBX: 00007f9e10705fa0 RCX: 00007f9e104de9a9
[  511.143041][T27026] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000
[  511.143050][T27026] RBP: 00007f9e0eb3f090 R08: 0000200000a00000 R09: 0000000000000000
[  511.143060][T27026] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001
[  511.143070][T27026] R13: 0000000000000000 R14: 00007f9e10705fa0 R15: 00007fff50c47278
[  511.143085][T27026]  </TASK>
[  511.361938][T27028] loop4: detected capacity change from 0 to 512
[  511.375246][T27028] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  511.390240][T27028] EXT4-fs (loop4): mount failed
[  511.403694][T27028] __nla_validate_parse: 4 callbacks suppressed
[  511.403706][T27028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7938'.
[  511.563950][T27052] FAULT_INJECTION: forcing a failure.
[  511.563950][T27052] name failslab, interval 1, probability 0, space 0, times 0
[  511.576777][T27052] CPU: 1 UID: 0 PID: 27052 Comm: syz.1.7944 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  511.576805][T27052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  511.576829][T27052] Call Trace:
[  511.576835][T27052]  <TASK>
[  511.576842][T27052]  __dump_stack+0x1d/0x30
[  511.576863][T27052]  dump_stack_lvl+0xe8/0x140
[  511.576882][T27052]  dump_stack+0x15/0x1b
[  511.576897][T27052]  should_fail_ex+0x265/0x280
[  511.576944][T27052]  should_failslab+0x8c/0xb0
[  511.576966][T27052]  kmem_cache_alloc_noprof+0x50/0x310
[  511.576990][T27052]  ? audit_log_start+0x365/0x6c0
[  511.577073][T27052]  audit_log_start+0x365/0x6c0
[  511.577098][T27052]  audit_seccomp+0x48/0x100
[  511.577120][T27052]  ? __seccomp_filter+0x68c/0x10d0
[  511.577189][T27052]  __seccomp_filter+0x69d/0x10d0
[  511.577279][T27052]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  511.577366][T27052]  ? vfs_write+0x75e/0x8e0
[  511.577390][T27052]  ? __rcu_read_unlock+0x4f/0x70
[  511.577461][T27052]  ? __fget_files+0x184/0x1c0
[  511.577480][T27052]  __secure_computing+0x82/0x150
[  511.577520][T27052]  syscall_trace_enter+0xcf/0x1e0
[  511.577587][T27052]  do_syscall_64+0xac/0x200
[  511.577608][T27052]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  511.577629][T27052]  ? clear_bhb_loop+0x40/0x90
[  511.577647][T27052]  ? clear_bhb_loop+0x40/0x90
[  511.577665][T27052]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  511.577708][T27052] RIP: 0033:0x7f9e104de9a9
[  511.577724][T27052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  511.577787][T27052] RSP: 002b:00007f9e0eb3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000004a
[  511.577857][T27052] RAX: ffffffffffffffda RBX: 00007f9e10705fa0 RCX: 00007f9e104de9a9
[  511.577927][T27052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  511.577937][T27052] RBP: 00007f9e0eb3f090 R08: 0000000000000000 R09: 0000000000000000
[  511.577947][T27052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  511.577957][T27052] R13: 0000000000000000 R14: 00007f9e10705fa0 R15: 00007fff50c47278
[  511.577971][T27052]  </TASK>
[  511.829081][T27064] xt_hashlimit: size too large, truncated to 1048576
[  511.953387][T27075] loop4: detected capacity change from 0 to 512
[  511.964083][T27073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7952'.
[  511.990211][T27075] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  512.013938][T10636] usb usb12-port1: attempt power cycle
[  512.036060][T27084] FAULT_INJECTION: forcing a failure.
[  512.036060][T27084] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  512.049397][T27084] CPU: 0 UID: 0 PID: 27084 Comm: syz.5.7956 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  512.049427][T27084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  512.049440][T27084] Call Trace:
[  512.049445][T27084]  <TASK>
[  512.049452][T27084]  __dump_stack+0x1d/0x30
[  512.049551][T27084]  dump_stack_lvl+0xe8/0x140
[  512.049612][T27084]  dump_stack+0x15/0x1b
[  512.049626][T27084]  should_fail_ex+0x265/0x280
[  512.049655][T27084]  should_fail+0xb/0x20
[  512.049678][T27084]  should_fail_usercopy+0x1a/0x20
[  512.049715][T27084]  _copy_from_user+0x1c/0xb0
[  512.049735][T27084]  ___sys_sendmsg+0xc1/0x1d0
[  512.049791][T27084]  __sys_sendmmsg+0x178/0x300
[  512.049819][T27084]  __x64_sys_sendmmsg+0x57/0x70
[  512.049838][T27084]  x64_sys_call+0x2f2f/0x2fb0
[  512.049878][T27084]  do_syscall_64+0xd2/0x200
[  512.049894][T27084]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  512.049971][T27084]  ? clear_bhb_loop+0x40/0x90
[  512.049988][T27084]  ? clear_bhb_loop+0x40/0x90
[  512.050006][T27084]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.050043][T27084] RIP: 0033:0x7f39a8bae9a9
[  512.050057][T27084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.050072][T27084] RSP: 002b:00007f39a720f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  512.050088][T27084] RAX: ffffffffffffffda RBX: 00007f39a8dd5fa0 RCX: 00007f39a8bae9a9
[  512.050099][T27084] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000006
[  512.050110][T27084] RBP: 00007f39a720f090 R08: 0000000000000000 R09: 0000000000000000
[  512.050119][T27084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.050193][T27084] R13: 0000000000000000 R14: 00007f39a8dd5fa0 R15: 00007ffda40dcb58
[  512.050211][T27084]  </TASK>
[  512.249925][T22604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.287838][T27093] FAULT_INJECTION: forcing a failure.
[  512.287838][T27093] name failslab, interval 1, probability 0, space 0, times 0
[  512.300652][T27093] CPU: 0 UID: 0 PID: 27093 Comm: syz.3.7960 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  512.300669][T27093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  512.300744][T27093] Call Trace:
[  512.300748][T27093]  <TASK>
[  512.300752][T27093]  __dump_stack+0x1d/0x30
[  512.300765][T27093]  dump_stack_lvl+0xe8/0x140
[  512.300817][T27093]  dump_stack+0x15/0x1b
[  512.300857][T27093]  should_fail_ex+0x265/0x280
[  512.300874][T27093]  should_failslab+0x8c/0xb0
[  512.300886][T27093]  kmem_cache_alloc_lru_noprof+0x55/0x310
[  512.300901][T27093]  ? __d_alloc+0x3d/0x350
[  512.300914][T27093]  __d_alloc+0x3d/0x350
[  512.300947][T27093]  d_alloc_pseudo+0x1e/0x80
[  512.300960][T27093]  alloc_file_pseudo+0x71/0x160
[  512.301033][T27093]  anon_inode_getfile+0xa0/0x120
[  512.301046][T27093]  bpf_link_prime+0xfc/0x1d0
[  512.301065][T27093]  bpf_raw_tp_link_attach+0x2eb/0x3f0
[  512.301080][T27093]  bpf_raw_tracepoint_open+0x154/0x2b0
[  512.301098][T27093]  ? security_bpf+0x2b/0x90
[  512.301109][T27093]  __sys_bpf+0x321/0x790
[  512.301126][T27093]  __x64_sys_bpf+0x41/0x50
[  512.301147][T27093]  x64_sys_call+0x2478/0x2fb0
[  512.301159][T27093]  do_syscall_64+0xd2/0x200
[  512.301173][T27093]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  512.301232][T27093]  ? clear_bhb_loop+0x40/0x90
[  512.301244][T27093]  ? clear_bhb_loop+0x40/0x90
[  512.301255][T27093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  512.301302][T27093] RIP: 0033:0x7fcbeb23e9a9
[  512.301312][T27093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  512.301395][T27093] RSP: 002b:00007fcbe989f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  512.301406][T27093] RAX: ffffffffffffffda RBX: 00007fcbeb465fa0 RCX: 00007fcbeb23e9a9
[  512.301413][T27093] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011
[  512.301420][T27093] RBP: 00007fcbe989f090 R08: 0000000000000000 R09: 0000000000000000
[  512.301427][T27093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  512.301434][T27093] R13: 0000000000000000 R14: 00007fcbeb465fa0 R15: 00007ffd601b0c88
[  512.301444][T27093]  </TASK>
[  512.530854][T27095] loop4: detected capacity change from 0 to 1024
[  512.540104][T10639] usb 10-1: device descriptor read/8, error -110
[  512.554212][T27095] EXT4-fs: Ignoring removed oldalloc option
[  512.566324][T27095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  512.596356][T27100] team_slave_0: entered promiscuous mode
[  512.602064][T27100] team_slave_1: entered promiscuous mode
[  512.609854][T27100] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  512.617623][T27100] team0: Device macvtap1 is already an upper device of the team interface
[  512.626864][T27100] team_slave_0: left promiscuous mode
[  512.632309][T27100] team_slave_1: left promiscuous mode
[  512.664650][T10639] usb 10-1: new SuperSpeed USB device number 30 using vhci_hcd
[  512.684771][T10639] usb 10-1: enqueue for inactive port 0
[  512.690422][T10639] usb 10-1: enqueue for inactive port 0
[  512.696737][T10639] usb 10-1: enqueue for inactive port 0
[  512.714394][T22604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  512.731914][T27111] xt_hashlimit: size too large, truncated to 1048576
[  512.767383][T27109] xt_hashlimit: size too large, truncated to 1048576
[  512.946363][   T29] kauditd_printk_skb: 717 callbacks suppressed
[  512.946376][   T29] audit: type=1400 audit(51905015.024:74133): avc:  denied  { bind } for  pid=27116 comm="syz.5.7969" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  512.972376][   T29] audit: type=1400 audit(51905015.024:74134): avc:  denied  { name_bind } for  pid=27116 comm="syz.5.7969" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1
[  512.993864][   T29] audit: type=1400 audit(51905015.024:74135): avc:  denied  { node_bind } for  pid=27116 comm="syz.5.7969" saddr=172.20.20.170 src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1
[  513.026633][T27131] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7974'.
[  513.029627][T27133] loop3: detected capacity change from 0 to 512
[  513.043275][T27133] EXT4-fs: Ignoring removed nomblk_io_submit option
[  513.050237][T27133] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  513.129097][   T29] audit: type=1400 audit(51905015.204:74136): avc:  denied  { append } for  pid=27134 comm="syz.2.7976" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  513.157891][T27139] loop3: detected capacity change from 0 to 1024
[  513.171300][T27139] EXT4-fs: Ignoring removed oldalloc option
[  513.177790][T27142] binfmt_misc: register: failed to install interpreter file ./file0
[  513.195559][   T29] audit: type=1400 audit(51905015.264:74137): avc:  denied  { wake_alarm } for  pid=27141 comm="syz.4.7979" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  513.216750][   T29] audit: type=1400 audit(51905015.264:74138): avc:  denied  { read } for  pid=27141 comm="syz.4.7979" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  513.239917][   T29] audit: type=1400 audit(51905015.264:74139): avc:  denied  { open } for  pid=27141 comm="syz.4.7979" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  513.267576][T27139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  513.293617][   T29] audit: type=1326 audit(51905015.364:74140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27141 comm="syz.4.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a03b1e9a9 code=0x7ffc0000
[  513.317061][   T29] audit: type=1326 audit(51905015.364:74141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27141 comm="syz.4.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a03b1e9a9 code=0x7ffc0000
[  513.321347][   T29] audit: type=1326 audit(51905015.364:74142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27141 comm="syz.4.7979" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f0a03b1e9a9 code=0x7ffc0000
[  513.413729][T27149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7982'.
[  513.445307][T27149] siw: device registration error -23
[  513.449428][T21589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  513.466083][T27153] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  513.482413][T27155] xt_hashlimit: size too large, truncated to 1048576
[  513.555713][T27162] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  513.718741][T27185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7996'.
[  513.735551][T27187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7997'.
[  513.776456][T10639] usb usb10-port1: attempt power cycle
[  513.916279][T27202] xt_hashlimit: size too large, truncated to 1048576
[  514.053804][T27218] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8009'.
[  514.100503][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8012'.
[  514.127691][T27226] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8013'.
[  514.141165][T27228] 9pnet_virtio: no channels available for device 127.0.0.1
[  514.158820][T27230] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  514.196975][T10636] usb usb12-port1: unable to enumerate USB device
[  514.197492][T27237] FAULT_INJECTION: forcing a failure.
[  514.197492][T27237] name failslab, interval 1, probability 0, space 0, times 0
[  514.216229][T27237] CPU: 1 UID: 0 PID: 27237 Comm: syz.5.8018 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  514.216287][T27237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  514.216299][T27237] Call Trace:
[  514.216306][T27237]  <TASK>
[  514.216313][T27237]  __dump_stack+0x1d/0x30
[  514.216331][T27237]  dump_stack_lvl+0xe8/0x140
[  514.216345][T27237]  dump_stack+0x15/0x1b
[  514.216382][T27237]  should_fail_ex+0x265/0x280
[  514.216405][T27237]  should_failslab+0x8c/0xb0
[  514.216499][T27237]  __kvmalloc_node_noprof+0x123/0x4e0
[  514.216587][T27237]  ? bpf_uprobe_multi_link_attach+0x33a/0x8f0
[  514.216608][T27237]  ? __kmalloc_cache_noprof+0x189/0x320
[  514.216669][T27237]  bpf_uprobe_multi_link_attach+0x33a/0x8f0
[  514.216737][T27237]  ? kstrtouint+0x76/0xc0
[  514.216762][T27237]  ? __rcu_read_unlock+0x4f/0x70
[  514.216780][T27237]  ? __fget_files+0x184/0x1c0
[  514.216817][T27237]  link_create+0x666/0x6c0
[  514.216832][T27237]  __sys_bpf+0x4c7/0x790
[  514.216869][T27237]  __x64_sys_bpf+0x41/0x50
[  514.216888][T27237]  x64_sys_call+0x2478/0x2fb0
[  514.216904][T27237]  do_syscall_64+0xd2/0x200
[  514.216920][T27237]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  514.216956][T27237]  ? clear_bhb_loop+0x40/0x90
[  514.216972][T27237]  ? clear_bhb_loop+0x40/0x90
[  514.216988][T27237]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.217004][T27237] RIP: 0033:0x7f39a8bae9a9
[  514.217016][T27237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  514.217053][T27237] RSP: 002b:00007f39a720f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  514.217068][T27237] RAX: ffffffffffffffda RBX: 00007f39a8dd5fa0 RCX: 00007f39a8bae9a9
[  514.217078][T27237] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c
[  514.217182][T27237] RBP: 00007f39a720f090 R08: 0000000000000000 R09: 0000000000000000
[  514.217192][T27237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  514.217202][T27237] R13: 0000000000000000 R14: 00007f39a8dd5fa0 R15: 00007ffda40dcb58
[  514.217216][T27237]  </TASK>
[  514.491345][T27245] xt_hashlimit: size too large, truncated to 1048576
[  514.521582][T27243] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  514.570494][T27246] FAULT_INJECTION: forcing a failure.
[  514.570494][T27246] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  514.583936][T27246] CPU: 1 UID: 0 PID: 27246 Comm: syz.1.8020 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  514.583966][T27246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  514.584041][T27246] Call Trace:
[  514.584047][T27246]  <TASK>
[  514.584056][T27246]  __dump_stack+0x1d/0x30
[  514.584078][T27246]  dump_stack_lvl+0xe8/0x140
[  514.584098][T27246]  dump_stack+0x15/0x1b
[  514.584151][T27246]  should_fail_ex+0x265/0x280
[  514.584181][T27246]  should_fail+0xb/0x20
[  514.584206][T27246]  should_fail_usercopy+0x1a/0x20
[  514.584294][T27246]  _copy_from_user+0x1c/0xb0
[  514.584362][T27246]  __ia32_sys_rt_sigreturn+0x128/0x350
[  514.584400][T27246]  x64_sys_call+0x2e8a/0x2fb0
[  514.584422][T27246]  do_syscall_64+0xd2/0x200
[  514.584442][T27246]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  514.584489][T27246]  ? clear_bhb_loop+0x40/0x90
[  514.584510][T27246]  ? clear_bhb_loop+0x40/0x90
[  514.584532][T27246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  514.584581][T27246] RIP: 0033:0x7f9e1047ab89
[  514.584598][T27246] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  514.584680][T27246] RSP: 002b:00007f9e0eb3ea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[  514.584700][T27246] RAX: ffffffffffffffda RBX: 00007f9e10705fa0 RCX: 00007f9e1047ab89
[  514.584713][T27246] RDX: 00007f9e0eb3ea80 RSI: 00007f9e0eb3ebb0 RDI: 0000000000000021
[  514.584727][T27246] RBP: 00007f9e0eb3f090 R08: 0000000000000000 R09: 0000000000000000
[  514.584740][T27246] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001
[  514.584754][T27246] R13: 0000000000000000 R14: 00007f9e10705fa0 R15: 00007fff50c47278
[  514.584773][T27246]  </TASK>
[  514.801109][T27257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8026'.
[  514.835469][T27260] 9pnet_virtio: no channels available for device 127.0.0.1
[  514.884115][T27262] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  514.956566][T27274] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  515.025942][T27296] 9pnet_virtio: no channels available for device 127.0.0.1
[  515.063770][T27301] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  515.170408][T27314] loop3: detected capacity change from 0 to 512
[  515.193659][T27314] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  515.209432][T27314] EXT4-fs (loop3): orphan cleanup on readonly fs
[  515.217672][T27314] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.8050: Block bitmap for bg 0 marked uninitialized
[  515.243775][T27314] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem
[  515.253151][T27314] EXT4-fs (loop3): 1 orphan inode deleted
[  515.263635][T27314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  515.305074][T27328] 9pnet_virtio: no channels available for device 127.0.0.1
[  515.319308][T27330] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  515.354602][T21589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.460001][T27335] infiniband syz2: set down
[  515.464614][T27335] infiniband syz2: added syzkaller0
[  515.474130][T27343] ªªªªªª: renamed from vlan0 (while UP)
[  515.475161][T27335] RDS/IB: syz2: added
[  515.484135][T27335] smc: adding ib device syz2 with port count 1
[  515.490468][T27335] smc:    ib device syz2 port 1 has pnetid 
[  515.537105][T27352] FAULT_INJECTION: forcing a failure.
[  515.537105][T27352] name failslab, interval 1, probability 0, space 0, times 0
[  515.549819][T27352] CPU: 1 UID: 0 PID: 27352 Comm: syz.3.8065 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  515.549876][T27352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  515.549889][T27352] Call Trace:
[  515.549897][T27352]  <TASK>
[  515.549905][T27352]  __dump_stack+0x1d/0x30
[  515.549928][T27352]  dump_stack_lvl+0xe8/0x140
[  515.549948][T27352]  dump_stack+0x15/0x1b
[  515.550010][T27352]  should_fail_ex+0x265/0x280
[  515.550035][T27352]  should_failslab+0x8c/0xb0
[  515.550132][T27352]  kmem_cache_alloc_noprof+0x50/0x310
[  515.550212][T27352]  ? getname_flags+0x80/0x3b0
[  515.550234][T27352]  getname_flags+0x80/0x3b0
[  515.550264][T27352]  __se_sys_statx+0x5e/0x1b0
[  515.550299][T27352]  ? vfs_write+0x75e/0x8e0
[  515.550322][T27352]  ? __rcu_read_unlock+0x4f/0x70
[  515.550339][T27352]  ? __fget_files+0x184/0x1c0
[  515.550362][T27352]  ? fput+0x8f/0xc0
[  515.550383][T27352]  ? ksys_write+0x192/0x1a0
[  515.550427][T27352]  __x64_sys_statx+0x67/0x80
[  515.550446][T27352]  x64_sys_call+0x27cb/0x2fb0
[  515.550467][T27352]  do_syscall_64+0xd2/0x200
[  515.550485][T27352]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  515.550574][T27352]  ? clear_bhb_loop+0x40/0x90
[  515.550594][T27352]  ? clear_bhb_loop+0x40/0x90
[  515.550611][T27352]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  515.550628][T27352] RIP: 0033:0x7fcbeb23e9a9
[  515.550641][T27352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  515.550672][T27352] RSP: 002b:00007fcbe989f038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c
[  515.550766][T27352] RAX: ffffffffffffffda RBX: 00007fcbeb465fa0 RCX: 00007fcbeb23e9a9
[  515.550790][T27352] RDX: 0000000000006000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  515.550801][T27352] RBP: 00007fcbe989f090 R08: 0000000000000000 R09: 0000000000000000
[  515.550813][T27352] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[  515.550825][T27352] R13: 0000000000000001 R14: 00007fcbeb465fa0 R15: 00007ffd601b0c88
[  515.550844][T27352]  </TASK>
[  515.792204][T27355] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  515.857207][T27365] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7)
[  515.863823][T27365] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  515.872242][T27365] vhci_hcd vhci_hcd.0: Device attached
[  515.880652][T27369] loop3: detected capacity change from 0 to 512
[  515.887245][T27369] EXT4-fs: Ignoring removed nomblk_io_submit option
[  515.894438][T27367] usbip_core: unknown command
[  515.896635][T27369] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  515.899132][T27367] vhci_hcd: unknown pdu 0
[  515.899141][T27367] usbip_core: unknown command
[  515.906299][T25348] vhci_hcd: stop threads
[  515.920652][T25348] vhci_hcd: release socket
[  515.925071][T25348] vhci_hcd: disconnect device
[  515.939169][T25408] smc: removing ib device syz2
[  515.969342][T10639] usb usb10-port1: unable to enumerate USB device
[  515.988374][T27376] loop4: detected capacity change from 0 to 256
[  515.996451][T27376] FAT-fs (loop4): Directory bread(block 1285) failed
[  516.057266][T27384] loop3: detected capacity change from 0 to 512
[  516.080029][T27384] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.8077: bad orphan inode 15
[  516.091576][T27384] ext4_test_bit(bit=14, block=18) = 1
[  516.097081][T27384] is_bad_inode(inode)=0
[  516.101625][T27384] NEXT_ORPHAN(inode)=1023
[  516.106007][T27384] max_ino=32
[  516.109265][T27384] i_nlink=0
[  516.131938][T27390] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  516.140260][T27384] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.8077: corrupted xattr block 19: invalid header
[  516.154721][T27384] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117)
[  516.164710][T27384] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  516.216629][T27399] team_slave_0: entered promiscuous mode
[  516.222492][T27399] team_slave_1: entered promiscuous mode
[  516.229290][T27399] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  516.237401][T27399] team0: Device macvtap1 is already an upper device of the team interface
[  516.248332][T27399] team_slave_0: left promiscuous mode
[  516.253873][T27399] team_slave_1: left promiscuous mode
[  516.271505][T27404] bond0: entered promiscuous mode
[  516.276788][T27404] bond0: entered allmulticast mode
[  516.282356][T27404] 8021q: adding VLAN 0 to HW filter on device bond0
[  516.292250][T27404] bond0 (unregistering): Released all slaves
[  516.310839][T27411] FAULT_INJECTION: forcing a failure.
[  516.310839][T27411] name failslab, interval 1, probability 0, space 0, times 0
[  516.323681][T27411] CPU: 1 UID: 0 PID: 27411 Comm: syz.5.8087 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  516.323706][T27411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  516.323753][T27411] Call Trace:
[  516.323759][T27411]  <TASK>
[  516.323765][T27411]  __dump_stack+0x1d/0x30
[  516.323783][T27411]  dump_stack_lvl+0xe8/0x140
[  516.323798][T27411]  dump_stack+0x15/0x1b
[  516.323878][T27411]  should_fail_ex+0x265/0x280
[  516.323985][T27411]  should_failslab+0x8c/0xb0
[  516.324002][T27411]  kmem_cache_alloc_noprof+0x50/0x310
[  516.324022][T27411]  ? getname_flags+0x80/0x3b0
[  516.324037][T27411]  ? fput+0x8f/0xc0
[  516.324069][T27411]  getname_flags+0x80/0x3b0
[  516.324085][T27411]  __x64_sys_unlinkat+0x70/0xb0
[  516.324211][T27411]  x64_sys_call+0x2438/0x2fb0
[  516.324229][T27411]  do_syscall_64+0xd2/0x200
[  516.324284][T27411]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  516.324304][T27411]  ? clear_bhb_loop+0x40/0x90
[  516.324327][T27411]  ? clear_bhb_loop+0x40/0x90
[  516.324344][T27411]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  516.324364][T27411] RIP: 0033:0x7f39a8bae9a9
[  516.324377][T27411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  516.324391][T27411] RSP: 002b:00007f39a720f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107
[  516.324407][T27411] RAX: ffffffffffffffda RBX: 00007f39a8dd5fa0 RCX: 00007f39a8bae9a9
[  516.324417][T27411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c
[  516.324427][T27411] RBP: 00007f39a720f090 R08: 0000000000000000 R09: 0000000000000000
[  516.324440][T27411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  516.324450][T27411] R13: 0000000000000000 R14: 00007f39a8dd5fa0 R15: 00007ffda40dcb58
[  516.324465][T27411]  </TASK>
[  516.512049][T27388] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 449: padding at end of block bitmap is not set
[  516.562992][T27417] ALSA: seq fatal error: cannot create timer (-16)
[  516.607451][T27422] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  516.651643][T27430] __nla_validate_parse: 9 callbacks suppressed
[  516.651658][T27430] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8095'.
[  516.688766][T27432] loop4: detected capacity change from 0 to 1024
[  516.696035][T27432] EXT4-fs: Ignoring removed oldalloc option
[  516.713426][T27432] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.730652][T27441] netlink: 'syz.2.8099': attribute type 1 has an invalid length.
[  516.752830][T27436] xt_hashlimit: size too large, truncated to 1048576
[  516.843315][T27446] lo speed is unknown, defaulting to 1000
[  516.862059][T22604] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.915339][T21589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  516.937236][T27456] loop3: detected capacity change from 0 to 512
[  516.943882][T27456] EXT4-fs: Ignoring removed nomblk_io_submit option
[  516.953400][T27454] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  516.969908][T27456] EXT4-fs (loop3): can't mount with both data=journal and delalloc
[  517.062709][T27460] infiniband syz2: set down
[  517.067317][T27460] infiniband syz2: added syzkaller0
[  517.077374][T27460] RDS/IB: syz2: added
[  517.078352][T27466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8108'.
[  517.092851][T27460] smc: adding ib device syz2 with port count 1
[  517.104582][T27460] smc:    ib device syz2 port 1 has pnetid 
[  517.143586][T27470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8109'.
[  517.228764][T27482] FAULT_INJECTION: forcing a failure.
[  517.228764][T27482] name failslab, interval 1, probability 0, space 0, times 0
[  517.241583][T27482] CPU: 1 UID: 0 PID: 27482 Comm: syz.3.8116 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  517.241612][T27482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  517.241686][T27482] Call Trace:
[  517.241694][T27482]  <TASK>
[  517.241701][T27482]  __dump_stack+0x1d/0x30
[  517.241721][T27482]  dump_stack_lvl+0xe8/0x140
[  517.241843][T27482]  dump_stack+0x15/0x1b
[  517.241859][T27482]  should_fail_ex+0x265/0x280
[  517.241883][T27482]  should_failslab+0x8c/0xb0
[  517.241902][T27482]  __kmalloc_node_track_caller_noprof+0xa4/0x410
[  517.242002][T27482]  ? sidtab_sid2str_get+0xa0/0x130
[  517.242022][T27482]  kmemdup_noprof+0x2b/0x70
[  517.242131][T27482]  sidtab_sid2str_get+0xa0/0x130
[  517.242154][T27482]  security_sid_to_context_core+0x1eb/0x2e0
[  517.242176][T27482]  security_sid_to_context+0x27/0x40
[  517.242196][T27482]  selinux_lsmprop_to_secctx+0x67/0xf0
[  517.242267][T27482]  security_lsmprop_to_secctx+0x43/0x80
[  517.242308][T27482]  audit_log_task_context+0x77/0x190
[  517.242339][T27482]  audit_log_task+0xf4/0x250
[  517.242398][T27482]  audit_seccomp+0x61/0x100
[  517.242463][T27482]  ? __seccomp_filter+0x68c/0x10d0
[  517.242482][T27482]  __seccomp_filter+0x69d/0x10d0
[  517.242502][T27482]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  517.242600][T27482]  ? vfs_write+0x75e/0x8e0
[  517.242630][T27482]  ? __rcu_read_unlock+0x4f/0x70
[  517.242648][T27482]  ? __fget_files+0x184/0x1c0
[  517.242665][T27482]  __secure_computing+0x82/0x150
[  517.242683][T27482]  syscall_trace_enter+0xcf/0x1e0
[  517.242727][T27482]  do_syscall_64+0xac/0x200
[  517.242764][T27482]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  517.242788][T27482]  ? clear_bhb_loop+0x40/0x90
[  517.242889][T27482]  ? clear_bhb_loop+0x40/0x90
[  517.242910][T27482]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  517.242930][T27482] RIP: 0033:0x7fcbeb23e9a9
[  517.242947][T27482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  517.243044][T27482] RSP: 002b:00007fcbe989f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee
[  517.243065][T27482] RAX: ffffffffffffffda RBX: 00007fcbeb465fa0 RCX: 00007fcbeb23e9a9
[  517.243128][T27482] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003
[  517.243156][T27482] RBP: 00007fcbe989f090 R08: 0000000000000000 R09: 0000000000000000
[  517.243169][T27482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  517.243223][T27482] R13: 0000000000000000 R14: 00007fcbeb465fa0 R15: 00007ffd601b0c88
[  517.243244][T27482]  </TASK>
[  517.509903][T27480] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  517.539710][T27484] loop3: detected capacity change from 0 to 512
[  517.563942][T27484] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  517.612649][T27484] EXT4-fs (loop3): mount failed
[  517.636818][T27492] loop4: detected capacity change from 0 to 512
[  517.648763][T25371] smc: removing ib device syz2
[  517.663044][T27484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8117'.
[  517.684941][T27492] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  517.751591][T27492] EXT4-fs (loop4): mount failed
[  517.775817][T27492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8120'.
[  517.823860][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8125'.
[  517.902353][T27517] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  517.915877][T27524] loop3: detected capacity change from 0 to 1024
[  517.923525][T10646] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  517.934524][T27524] EXT4-fs: Ignoring removed nomblk_io_submit option
[  517.942920][T10646] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  517.952702][T27524] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  517.953088][T27521] hub 2-0:1.0: USB hub found
[  517.981001][T27521] hub 2-0:1.0: 8 ports detected
[  517.987297][T27522] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  518.014197][T27524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  518.056519][T27524] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  518.067926][   T29] kauditd_printk_skb: 637 callbacks suppressed
[  518.067938][   T29] audit: type=1400 audit(51905020.128:74775): avc:  denied  { connect } for  pid=27496 comm="syz.1.8121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  518.095030][   T29] audit: type=1400 audit(51905020.128:74776): avc:  denied  { shutdown } for  pid=27496 comm="syz.1.8121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  518.125686][   T29] audit: type=1400 audit(51905020.198:74777): avc:  denied  { write } for  pid=27504 comm="syz.3.8124" name="hidraw0" dev="devtmpfs" ino=2756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  518.150660][T27532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8133'.
[  518.175959][T27507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=27507 comm=syz.3.8124
[  518.188598][T27507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=27507 comm=syz.3.8124
[  518.257578][T27542] xt_hashlimit: size too large, truncated to 1048576
[  518.283227][T27545] lo speed is unknown, defaulting to 1000
[  518.296226][T27549] SELinux:  policydb version 150994968 does not match my version range 15-34
[  518.310097][   T29] audit: type=1400 audit(51905020.367:74778): avc:  denied  { load_policy } for  pid=27544 comm="syz.5.8138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  518.341497][T27549] SELinux: failed to load policy
[  518.380759][T27554] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  518.425971][T27556] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  518.461113][   T29] audit: type=1400 audit(51905020.527:74779): avc:  denied  { create } for  pid=27563 comm="syz.4.8147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  518.481833][   T29] audit: type=1400 audit(51905020.527:74780): avc:  denied  { setopt } for  pid=27563 comm="syz.4.8147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  518.501470][   T29] audit: type=1400 audit(51905020.527:74781): avc:  denied  { connect } for  pid=27563 comm="syz.4.8147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  518.516782][T27566] infiniband syz2: set down
[  518.522278][   T29] audit: type=1400 audit(51905020.527:74782): avc:  denied  { name_connect } for  pid=27563 comm="syz.4.8147" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1
[  518.525574][T27566] infiniband syz2: added syzkaller0
[  518.552806][   T29] audit: type=1400 audit(51905020.617:74783): avc:  denied  { getopt } for  pid=27563 comm="syz.4.8147" lport=40158 faddr=::ffff:10.1.1.2 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  518.579895][T27566] RDS/IB: syz2: added
[  518.584003][T27566] smc: adding ib device syz2 with port count 1
[  518.590238][T27566] smc:    ib device syz2 port 1 has pnetid 
[  518.611770][T27570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8149'.
[  518.649231][   T29] audit: type=1400 audit(51905020.717:74784): avc:  denied  { bind } for  pid=27575 comm="syz.1.8150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  518.675127][T27576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=27576 comm=syz.1.8150
[  518.699575][T27576] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=27576 comm=syz.1.8150
[  518.719505][T27576] net_ratelimit: 10 callbacks suppressed
[  518.719521][T27576] openvswitch: netlink: Message has 6 unknown bytes.
[  518.738479][T27576] netlink: 'syz.1.8150': attribute type 4 has an invalid length.
[  518.752173][T27576] netlink: 'syz.1.8150': attribute type 4 has an invalid length.
[  518.806325][T27580] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  518.826287][ T7668] smc: removing ib device syz2
[  518.835699][T27582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8154'.
[  518.884513][T27589] lo speed is unknown, defaulting to 1000
[  518.924264][T27593] SELinux:  policydb version 150994968 does not match my version range 15-34
[  518.956363][T27595] ALSA: seq fatal error: cannot create timer (-16)
[  518.956374][T27593] SELinux: failed to load policy
[  519.032227][T27598] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8160'.
[  519.043948][T27600] FAULT_INJECTION: forcing a failure.
[  519.043948][T27600] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  519.058238][T27600] CPU: 0 UID: 0 PID: 27600 Comm: syz.3.8161 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  519.058266][T27600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  519.058277][T27600] Call Trace:
[  519.058282][T27600]  <TASK>
[  519.058289][T27600]  __dump_stack+0x1d/0x30
[  519.058339][T27600]  dump_stack_lvl+0xe8/0x140
[  519.058355][T27600]  dump_stack+0x15/0x1b
[  519.058368][T27600]  should_fail_ex+0x265/0x280
[  519.058397][T27600]  should_fail+0xb/0x20
[  519.058422][T27600]  should_fail_usercopy+0x1a/0x20
[  519.058450][T27600]  _copy_to_user+0x20/0xa0
[  519.058542][T27600]  simple_read_from_buffer+0xb5/0x130
[  519.058567][T27600]  proc_fail_nth_read+0x100/0x140
[  519.058698][T27600]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  519.058723][T27600]  vfs_read+0x19d/0x6f0
[  519.058761][T27600]  ? __rcu_read_unlock+0x4f/0x70
[  519.058780][T27600]  ? __fget_files+0x184/0x1c0
[  519.058797][T27600]  ksys_read+0xda/0x1a0
[  519.058821][T27600]  __x64_sys_read+0x40/0x50
[  519.058845][T27600]  x64_sys_call+0x2d77/0x2fb0
[  519.058872][T27600]  do_syscall_64+0xd2/0x200
[  519.058889][T27600]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  519.058982][T27600]  ? clear_bhb_loop+0x40/0x90
[  519.059080][T27600]  ? clear_bhb_loop+0x40/0x90
[  519.059100][T27600]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.059117][T27600] RIP: 0033:0x7fcbeb23d3bc
[  519.059132][T27600] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  519.059207][T27600] RSP: 002b:00007fcbe989f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  519.059224][T27600] RAX: ffffffffffffffda RBX: 00007fcbeb465fa0 RCX: 00007fcbeb23d3bc
[  519.059308][T27600] RDX: 000000000000000f RSI: 00007fcbe989f0a0 RDI: 0000000000000003
[  519.059319][T27600] RBP: 00007fcbe989f090 R08: 0000000000000000 R09: 0000000000000000
[  519.059330][T27600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  519.059372][T27600] R13: 0000000000000000 R14: 00007fcbeb465fa0 R15: 00007ffd601b0c88
[  519.059388][T27600]  </TASK>
[  519.061040][T27598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  519.293443][T27598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  519.304994][T27598] bond0 (unregistering): Released all slaves
[  519.394268][T27610] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  519.413334][T27618] 9pnet_virtio: no channels available for device 127.0.0.1
[  519.472941][T27626] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  519.474309][T27624] lo speed is unknown, defaulting to 1000
[  519.496742][T27633] SELinux:  policydb version 150994968 does not match my version range 15-34
[  519.507219][T27633] SELinux: failed to load policy
[  519.519880][T27629] ALSA: seq fatal error: cannot create timer (-16)
[  519.548426][T27639] siw: device registration error -23
[  519.591497][T27647] FAULT_INJECTION: forcing a failure.
[  519.591497][T27647] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  519.605335][T27647] CPU: 0 UID: 0 PID: 27647 Comm: syz.4.8179 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  519.605383][T27647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  519.605394][T27647] Call Trace:
[  519.605401][T27647]  <TASK>
[  519.605408][T27647]  __dump_stack+0x1d/0x30
[  519.605463][T27647]  dump_stack_lvl+0xe8/0x140
[  519.605479][T27647]  dump_stack+0x15/0x1b
[  519.605494][T27647]  should_fail_ex+0x265/0x280
[  519.605552][T27647]  should_fail+0xb/0x20
[  519.605597][T27647]  should_fail_usercopy+0x1a/0x20
[  519.605674][T27647]  _copy_from_user+0x1c/0xb0
[  519.605760][T27647]  memdup_user+0x5e/0xd0
[  519.605773][T27647]  ucma_set_option+0x19e/0x7f0
[  519.605929][T27647]  ? _parse_integer+0x27/0x40
[  519.605953][T27647]  ? kstrtoull+0x111/0x140
[  519.605985][T27647]  ? kstrtouint+0x76/0xc0
[  519.605999][T27647]  ? kstrtouint_from_user+0x9f/0xf0
[  519.606013][T27647]  ? should_fail_ex+0xdb/0x280
[  519.606029][T27647]  ucma_write+0x1b3/0x250
[  519.606088][T27647]  ? __pfx_ucma_write+0x10/0x10
[  519.606098][T27647]  vfs_write+0x269/0x8e0
[  519.606114][T27647]  ? __rcu_read_unlock+0x4f/0x70
[  519.606204][T27647]  ? __fget_files+0x184/0x1c0
[  519.606216][T27647]  ksys_write+0xda/0x1a0
[  519.606232][T27647]  __x64_sys_write+0x40/0x50
[  519.606308][T27647]  x64_sys_call+0x2cdd/0x2fb0
[  519.606346][T27647]  do_syscall_64+0xd2/0x200
[  519.606357][T27647]  ? arch_exit_to_user_mode_prepare+0x27/0x60
[  519.606371][T27647]  ? clear_bhb_loop+0x40/0x90
[  519.606429][T27647]  ? clear_bhb_loop+0x40/0x90
[  519.606448][T27647]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  519.606468][T27647] RIP: 0033:0x7f0a03b1e9a9
[  519.606484][T27647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  519.606518][T27647] RSP: 002b:00007f0a02187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  519.606598][T27647] RAX: ffffffffffffffda RBX: 00007f0a03d45fa0 RCX: 00007f0a03b1e9a9
[  519.606605][T27647] RDX: 0000000000000020 RSI: 0000200000000180 RDI: 0000000000000004
[  519.606630][T27647] RBP: 00007f0a02187090 R08: 0000000000000000 R09: 0000000000000000
[  519.606637][T27647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  519.606644][T27647] R13: 0000000000000000 R14: 00007f0a03d45fa0 R15: 00007ffc9fabfe98
[  519.606654][T27647]  </TASK>
[  519.870856][T27650] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  519.963503][T27664] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  520.001186][T27668] lo speed is unknown, defaulting to 1000
[  520.005468][T27669] ALSA: seq fatal error: cannot create timer (-16)
[  520.027332][T27668] SELinux:  policydb version 150994968 does not match my version range 15-34
[  520.039305][T27668] SELinux: failed to load policy
[  520.472883][T27694] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  520.487816][T27697] loop3: detected capacity change from 0 to 1024
[  520.495950][T27697] EXT4-fs: Ignoring removed nobh option
[  520.501578][T27697] EXT4-fs: Ignoring removed bh option
[  520.507711][T27699] lo speed is unknown, defaulting to 1000
[  520.519897][T27697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  520.536657][T27699] SELinux:  policydb version 150994968 does not match my version range 15-34
[  520.536826][T27699] SELinux: failed to load policy
[  520.577028][T21589] ==================================================================
[  520.585127][T21589] BUG: KCSAN: data-race in __htab_map_lookup_elem / bpf_lru_pop_free
[  520.593286][T21589] 
[  520.595601][T21589] write to 0xffff88811ac8fc28 of 4 bytes by task 27706 on cpu 0:
[  520.603394][T21589]  bpf_lru_pop_free+0xbf0/0xcd0
[  520.608238][T21589]  __htab_lru_percpu_map_update_elem+0xea/0x600
[  520.614469][T21589]  bpf_percpu_hash_update+0x61/0xa0
[  520.619693][T21589]  bpf_map_update_value+0x297/0x3a0
[  520.624906][T21589]  generic_map_update_batch+0x3f5/0x540
[  520.630450][T21589]  bpf_map_do_batch+0x258/0x380
[  520.635483][T21589]  __sys_bpf+0x2e0/0x790
[  520.639811][T21589]  __x64_sys_bpf+0x41/0x50
[  520.644218][T21589]  x64_sys_call+0x2478/0x2fb0
[  520.648886][T21589]  do_syscall_64+0xd2/0x200
[  520.653468][T21589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.659436][T21589] 
[  520.661745][T21589] read to 0xffff88811ac8fc28 of 4 bytes by task 21589 on cpu 1:
[  520.669364][T21589]  __htab_map_lookup_elem+0xab/0x150
[  520.674658][T21589]  htab_lru_percpu_map_lookup_elem+0x20/0xb0
[  520.680650][T21589]  bpf_prog_1592a6279ab44e8a+0x48/0x50
[  520.686102][T21589]  bpf_trace_run2+0x107/0x1c0
[  520.690768][T21589]  kfree+0x27b/0x320
[  520.694654][T21589]  pde_put+0xd6/0x120
[  520.698631][T21589]  remove_proc_subtree+0x2bb/0x3b0
[  520.703733][T21589]  ext4_unregister_sysfs+0x5f/0x80
[  520.708838][T21589]  ext4_put_super+0x4c/0x7d0
[  520.713419][T21589]  generic_shutdown_super+0xe6/0x210
[  520.718783][T21589]  kill_block_super+0x2a/0x70
[  520.723453][T21589]  ext4_kill_sb+0x42/0x80
[  520.727772][T21589]  deactivate_locked_super+0x75/0x1c0
[  520.733133][T21589]  deactivate_super+0x97/0xa0
[  520.737801][T21589]  cleanup_mnt+0x269/0x2e0
[  520.742294][T21589]  __cleanup_mnt+0x19/0x20
[  520.746706][T21589]  task_work_run+0x131/0x1a0
[  520.751290][T21589]  exit_to_user_mode_loop+0xe4/0x100
[  520.756564][T21589]  do_syscall_64+0x1d6/0x200
[  520.761152][T21589]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  520.767037][T21589] 
[  520.769356][T21589] value changed: 0x402bf290 -> 0xfd964a78
[  520.775330][T21589] 
[  520.777639][T21589] Reported by Kernel Concurrency Sanitizer on:
[  520.783791][T21589] CPU: 1 UID: 0 PID: 21589 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(voluntary) 
[  520.796458][T21589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  520.806514][T21589] ==================================================================
[  520.815316][T21589] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  520.834957][T27709] xt_hashlimit: size too large, truncated to 1048576