last executing test programs: 2.912989702s ago: executing program 3 (id=268): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000240)=0x10) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x0, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) capset(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={r2}, 0x0) 2.456375189s ago: executing program 1 (id=277): syz_emit_ethernet(0x9a, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x6, 0x3, 0x0, [{@empty}, {@private}]}, @ssrr={0x89, 0xb, 0xc6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2.397217794s ago: executing program 1 (id=278): r0 = socket$inet(0x2, 0x4, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000940)="014bb6a68759182ab7e144f718ee0b9d487461d1891d71f57a540210b1b32e260da68c9e5042f43d8e39a995d58933e84e8f3166bcc26b57e038599805becad925bd3f30fe3ab8f293da067003b56ad9b156551c", 0x54}, {&(0x7f0000000a00)="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", 0x45a}], 0x2}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000580)="76896548e84ce2b140d8522fbd", 0xd}], 0x1}}], 0x2, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000080)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.384351555s ago: executing program 1 (id=279): sendmsg(0xffffffffffffffff, 0x0, 0x4040000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xc1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x20, r3, 0x73976972ba3f4b55, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x20}}, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000a0a0108000000000000f55a4e117d2f252946794c6401a8e945"], 0x20}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000740)=@framed={{}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x200}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x5}, 0x90) fsopen(&(0x7f0000000000)='configfs\x00', 0x0) r5 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r5, 0x0) 2.305229992s ago: executing program 2 (id=282): r0 = socket(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$nfc_llcp(r0, 0x107, 0x11, 0x0, 0x20600000) 2.304926081s ago: executing program 2 (id=283): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x2100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$9p_fd(0x3f, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000a00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 2.066014891s ago: executing program 3 (id=287): socket(0x0, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x1, 0x365, &(0x7f0000000bc0)="$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") perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) socket$packet(0x11, 0xa, 0x300) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90624fc600d00030004000300ff3582c137153e370248018010000000d1", 0x2d}], 0x1}, 0x0) 1.915766073s ago: executing program 3 (id=290): perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x90) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x80111500, 0x2) 1.852849318s ago: executing program 3 (id=292): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x3008006, &(0x7f0000000380)={[{@errors_continue}, {@jqfmt_vfsv0}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x6}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d4, &(0x7f0000001200)="$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") bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRESHEX], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x3, 0x0) epoll_create1(0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x9, [@func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0x9, 0x3}, {0xb}, {0x0, 0x4}, {0xe, 0x5}, {0xe}, {0xc, 0x2}, {0xd, 0x1}, {0xf, 0x4}, {0x3, 0x2}, {0x8}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}]}, {0x0, [0x30, 0x5f, 0x30, 0x5f, 0x5f, 0x61, 0x5f]}}, &(0x7f00000006c0)=""/4096, 0x91, 0x1000, 0x0, 0xf}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x84}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000140000001800178008000200010400000c0803000000000000000000"], 0x2c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000280)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$SNAPSHOT_SET_SWAP_AREA(r7, 0x541b, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$EVIOCREVOKE(r7, 0x40044591, &(0x7f0000000540)=0x3ff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.734747888s ago: executing program 4 (id=293): socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @local}, 0x18) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) r1 = gettid() prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000157000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socket$igmp(0x2, 0x3, 0x2) process_vm_writev(r1, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) unlink(&(0x7f0000000280)='./bus\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/720], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe40, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b686dd", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000005ad00)={0x0, [], 0x0, "75db64cf7310f9"}) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x41, 0x7a00, 0x0, 0x3) setsockopt$MRT_INIT(r3, 0x0, 0x2, 0x0, 0x2) unlink(&(0x7f0000000300)='./bus\x00') epoll_create1(0x0) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x34}, 0x1, 0x40030000000000}, 0x4000014) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000010000)=ANY=[@ANYBLOB="48000000fb99a6b2bfb6fd4232dde572681ed67dcd461e2904299def1041de0e3a1698452b33d4f17169b4d1c467d9d79d2e7dffdb896a65976a81c3ed4a17c39de8b3", @ANYRES16=r6, @ANYBLOB="04002dbd7000fbdbdf250100000014000200626f6e645f736c6176655f31000000001400020076657468305f746f5f626174616476000900010073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 1.552919763s ago: executing program 3 (id=296): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c64656275672c6572726f72733d72656d6f756e742d726f2c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c636865636b3d72656c617865642c757466383d302c726f6469722c726f6469722c00bd11a3d82e3cc8e94a1ac3169cb253bc51dceb1a3c8675eef705933dac0549813c420584251b8849a95afa9de1a80dcc7f9d4e26116050410b89f88108d551843f6115dded9b54fcb36a3a7bab7fb11d2c7265fa11a3ff2f3ca1c0df2142ff9ce532341817f2bb2fef3428793728d4daa090c5becbb74d00c95f965afa83e5bb562620ea9e99853533ca4ef0702dad548503917329f0f431d87efa28137d3f0e0fa2906cb9e236094a2d7a9ce877c1d8509500"/315], 0x1, 0x217, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x571, 0x9, 0x8, 0x40, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710037000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r5}, 0x10) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000470100fef7ffffffb702000008000000b703000000000083850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mq_notify(0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000180)=0x4) 1.520930996s ago: executing program 4 (id=297): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./bus\x00', 0x80d0, &(0x7f0000000800)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c6e6f646f74732c646d61736b3d30303030303030303030303030303030303037373737372c646f74732c6e6f646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c6e6f646f74732c646f74732c6e6f646f74732c616c6c6f775f7574696d653d3030303030303030303030303030000000003030cfa65c433030312c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c747a3d5554432c6e6f646f74732c6e66732c646f74732c6e6f646f74732c636865636b3d7374726963742c00"], 0xfd, 0x1bf, &(0x7f0000000640)="$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") r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="3200edf5d57ecf61adff51d1a95db2d457e22fbe20f5", @ANYRES16=r1, @ANYBLOB="04002bbd7000ffdbdf2506000000080001007063690011000200303030303a30303a31302e300000000008000300010000000600040000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4048041}, 0x80) io_submit(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240)={'#! ', './file1', [], 0xa, "b26c45b0ba9f93e1b884d7ee0fa7c5c76f1c3fb93b37678feb7121427c1f78066c84fa85fce5d562792cbf969492b749b81ec1da8d58"}, 0x41) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) sendmsg$inet(r0, &(0x7f0000000b80)={&(0x7f0000000180)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000380)="9a045b3029ed6372f024366fa21a899e81fb6a7fb144cc675d9d9093df93ba73828e6e8dee66e75aba87467e04ae503e98a81ae70812b99fa97cfb1a57cac17bf5b61881a399d865fa9981", 0x4b}, {&(0x7f0000000400)="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", 0xfa}, {&(0x7f0000001940)="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", 0x1000}, {&(0x7f0000000500)="4df4d55d8ea81dea79dc404f21c6f4b1d326543f5c42fc13330eafcf45fb087671b056aea1e545a46138e1696e7d38091edd9970c6c3c0320b8a3c975769fbb2f7d8815d50079ba0cdcd34ec26d2e7337997310033bb38af6d88ca83087f3e9f9740806a935b1cdf7e45cbc7654f8056c7bc81b20a0e1931b2f00a16edeca840ed0df83094ddd9d47af1be666e5aaf7304963b2e6b91db2adb08e039243c265f3bd2084b154cadef0aafb2ae0783cbacfd8c3ee8e4c82e9aea4a4cb40a903fa1cb13cb93dc094d6db9597d2180746896a89c3489450435648d747ab4d8f4a3dc23e7de5bba", 0xe5}, {&(0x7f0000000900)="47e2af007675223dd5742d38720d4da2ae3cbd32a7f5da87969584d574a6a3dc9749da3dc89f4fff05df7e830ade92142d2c2250b566fb46737da82b3e88d44ca48307882ae876f7c88be5a09f4bc5e2546e559657f9abefaebb0b2c24bb8bcf778a508c05704ce39ba61cc36070e26b88ce4ddde8241fa2762ce94636907a57224e86e5f8cbd08fa8b65fba6dbf9486cc90228cc3a01b5289a016287fbfcfcdb790627612eb7d3a", 0xa8}, {&(0x7f00000009c0)="18dab67def53d22724e5b8c4a4c7d5f72617b5e2f0d72e4d5a7d69f4edced05f55be7d48575fb99a7ea42eefd37dc80e42d6ee7e42b84fff57e06e3e74c28ba7b89f9d0f9e0f30259843466aa9cb2597d55555916b22b9db244d01ba06b1a0f15d936d09dfbc5709c91528c474efc5533e1445bee689390c", 0x78}, {&(0x7f0000000a40)="e1446f19d85ad1e6aecdd47721dd2888ac1724a572b48ff924df1eb2c1b0ff207e684171c3f96b74b3f93a80331c105175e0dba8af9e461d9c7a379246b3271a5a97d57bb10e6b5c4fb3f5ab89f6142a5699d77003ab6c7e5a5b47c91e6ea4ddd6f3c9cb6c458832a3ad65d21dcbe101424140ff6500a0b263f6beaef9900afca9392f2211ddeb40f2da58f327b9e00e9e74136674c81f76574bbc88be4ef6ccec3d3cf8d62a", 0xa6}], 0x7, &(0x7f0000000600)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x18}, 0x800) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r5 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r5, 0x10d, 0xc5, 0x0, &(0x7f0000000040)) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002980)=ANY=[@ANYBLOB="180000003a00290200070000000000000a00000004"], 0x18}}, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file1\x00', 0x0, &(0x7f0000000bc0)=ANY=[], 0x1, 0x1216, &(0x7f00000036c0)="$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") mount$nfs(0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) 1.389251086s ago: executing program 2 (id=299): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x7, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x1c00, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) io_setup(0x0, 0x0) io_cancel(0x0, 0x0, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) inotify_init1(0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x2284, 0x0) 1.388979476s ago: executing program 2 (id=300): unshare(0x0) clock_gettime(0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x7f}, 0x48) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) close(0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xffe0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x2008000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000000b40), 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="b1dd9f66", @ANYRES16=r2, @ANYBLOB="59bb0000000000000000010000000c0099000000000000000000"], 0x20}}, 0x0) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r2, 0x200, 0x70bdad, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0x3b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "995c55d9c6"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a16b652213"}, @NL80211_ATTR_KEY_DEFAULT, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x30, 0x7, "6e1203006a"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x40248d4}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x1a, &(0x7f0000000000)={r6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e23, 0xf4a, @rand_addr=' \x01\x00', 0x2}}, 0x1, 0x400}, &(0x7f00000002c0)=0x90) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00008, 0x0, 0x0, 0x0, 0x2) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0xff00000000000000}}}) fstat(0xffffffffffffffff, &(0x7f0000000780)) 1.303771243s ago: executing program 0 (id=301): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$setperm(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x2000000058831, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 1.278621085s ago: executing program 2 (id=302): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xc]}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200012, &(0x7f0000000240)={[{@resgid}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x57d, &(0x7f0000000680)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x100000000a, &(0x7f00000003c0), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) chroot(&(0x7f0000000600)='./file0/file0/file0\x00') mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') renameat2(r2, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x2) 1.217023111s ago: executing program 0 (id=303): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1c30d, &(0x7f00000001c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b5084a2ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c20100000000000000c5"], 0x0, 0x24b, &(0x7f0000000700)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) open$dir(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x848000, 0x9) write$sndseq(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000000c0)={0x80, 0x1f4, 0xc8}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="2000000000000000000000000000000018f9d54bfc26d710be39110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x2f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000740)="d8000000180081064e81f782db44b904021d080006077c09e8fe55a10a0015400500142603600e120800060000000401a8001600a400014004000021036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c0002800400120014000700fe8000000000000000000000000000aa08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r5, r2, 0x19, 0x0, @val=@netfilter={0x7, 0x1, 0x1}}, 0x40) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r10, 0x40047211, &(0x7f0000000400)) write$sndseq(r9, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) inotify_add_watch(r0, &(0x7f00000000c0)='./file0/bus\x00', 0x20) 1.21620822s ago: executing program 4 (id=304): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_VERSION={0x5}]}}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000634ab92a50ffff85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb7907081175f37538e486dd63"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000f40)=ANY=[@ANYRES32=r8, @ANYRESDEC=r9, @ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="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"], 0xfdef) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, r10, 0x100, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}}, 0x4004000) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f00000000c0)=0x103f, 0x4) 1.187102373s ago: executing program 1 (id=305): r0 = getpid() perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1}, 0x400, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="003fc97b0ab23e0e84ffaea47e000000", @ANYRES16=r3, @ANYBLOB="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"/1603], 0x64c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @sack={0x5, 0x2}, @timestamp={0x8, 0xa}]}}}}}}}}, 0x0) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x800, 0xffffffffffffffff, 0x0) 1.09743439s ago: executing program 0 (id=306): openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syslog(0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) socket$unix(0x1, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000180)=0x10000, 0x4) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52d9}, {0x40}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0xfd}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x1000, @empty, 0x1}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='%{#@-+\'\x00') signalfd(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) timerfd_create(0x9, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 1.061023113s ago: executing program 2 (id=307): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xa) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000ff9, &(0x7f0000000180)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendto$inet(r2, &(0x7f00000012c0)='\f', 0x1, 0x11, 0x0, 0x0) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{0x0}], 0x1, 0x0, 0x0, 0x407006}, 0x141) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000040)="0a03000019002551075c0165ff0ffc02802000030011000500e1000cee0209001a000000", 0x33a) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) 785.939765ms ago: executing program 4 (id=308): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x10010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001439) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)=0x4) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x2000000b) ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, 0x0, 0x0}, 0x90) epoll_create1(0x0) r4 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1c5d, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0d030000000000000000130000004c000980080002000100000008000200000000000800020004"], 0x60}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x1000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r8) r9 = io_uring_setup(0x168e, &(0x7f0000000000)) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x160, 0x150, 0x150, 0x0, 0xf8010000, 0x230, 0x238, 0x238, 0x230, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'wg2\x00', 'veth0_vlan\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x3b07f2831bceba3c}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r9, 0x10, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)=""/83, 0x53}], 0x0, 0x1}, 0x20) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 599.257791ms ago: executing program 0 (id=309): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x52f, 0x4001) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000100)={r1, 0x2, {0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x9, 0x1c, 0x4, "b83c59cd31f5f70a0e0896e53bba603c92468780cb27a3127bfd75b62d5dc3e3ced495439dbbcd2ccc83c273849e52b7f424bdd47810fb2d8bcafe1572a4a7dc", "d13093a1e690d79977f35b41e447bd7f53c23e1373839e2be09170432e5bcde5a06edbaeaeb19b915019339d840e0777f0c448dce7344bc7fa4322ffeafbc815", "f8078964c9b9f76b8801b6ec6f44d82b191b0520a53d8c042a788d9a719074fc", [0xffffffff00000001, 0x7]}}) (fail_nth: 1) 295.598216ms ago: executing program 0 (id=310): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x52f, 0x4001) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000008000300", @ANYRES32=r3, @ANYBLOB="08001900", @ANYRES32=0x0, @ANYBLOB="46f26537bd267ab48537295dd7c96289094c0c093d888cb8c98242e4dfe1b1d10770f861cc29be131b8ca17cc0e5547b32c2e437ebf059"], 0x2c}}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000380)={r1, 0x2, {0x0, 0x0, 0x0, 0x6, 0x5, 0x0, 0x9, 0x1c, 0xc, "b83c59cd31f5f70a0e0896e53bba603c92468780cb27a3127bfd75b62d5dc3e3ced495439dbbcd2ccc83c273849e52b7f424bdd47810fb2d8bcafe1572a4a7dc", "d13093a1e690d79977f35b41e447bd7f53c23e1373839e2be09170432e5bcde5a06edbaeaeb19b915019339d840e0777f0c448dce7344bc7fa4322ffeafbc815", "f8078964c9b9f76b8801b6ec6f44d82b191b0520a53d8c042a788d9a719074fc", [0xffffffff00000007, 0x7]}}) 294.911906ms ago: executing program 3 (id=311): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x123042b, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x18, 0x0, 0x0, 0x8000}, 0x48) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0xa007, 0x0) capset(&(0x7f0000000300)={0x19980330}, &(0x7f00000003c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="b900000002000000b6"]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x4003, &(0x7f00000003c0), 0x2, 0x4e6, &(0x7f0000000840)="$eJzs3MtrXNUfAPDvvUnapo9f8qvPPrSjVQyKTZM+Fy6sKHQjCIrUZUzSUpu20kRoS7BRpIILpX+Bj53gX+BKN6LiQnGruBWhSDatLmTkztwbZzozeXWSaZPPB6Y9595z7znn3nuS85ibANatUvZPErE1In6JiL5qtD5Bqfrfzdnp0b9mp0eTKJdf/jOppLsxOz1aJC2O25JHBtKI9L0kdjXJd/LS5TMjExPjF/L44FSah86OnBo/NX5u+OjRgwd6jxwePtSWemZlurHz7fO7dxx/7dqLoyeuvf7dF1l5y/n+2npU9S8xh66GLaUo1V/LGo8v8ex3um014aQ7+zftXGFYtOypzW5XT6X995VzlX198cK7RboNnSwksCKyxr6xYevc77KZcq0kqR4ArBGJJg3rVPGL/sZsNlKdHm0cBzfR3dYuSEddPxaVCmX1vpl/qnu6KyPYUn91bNSzQvnfGxEnZv7+OPtE03kIAID2+upYxOa831F8qnvSuL8m3f/yWaH+iPh/RGyPiHvy/st9EZW0D0TEgzXHJPl60nxKt8Qb+z8/9eaB2u5q22T9v2fyta36/t/c+kV/Vx7bVql/T3Ly9MT4/vyaDETPxiw+1HjquWm1r5//+aNW+Zdq+n/ZJ8u/6Avm5fij+5YJurGRqZHbrXfh+juVC3ulsf5JdCdFKGJHROxcxvmza3b6yc93t9pfV/+sng31/7D1ydswDil/GvFE9f7PxC31j3zdI6msT559c3Dy0uWnT9euTw4dOTx8aHBTTIzvHyyeikbf/3j1pTzYMIxY+P6vrOz+b276/M+tXPYnteu1k0vP4+qv77cc0yz3+d+QvFIJF+tSF0empi4MRWxIZhq3D/937MWR3rr0Wf0H9jZv/9sj/vkkP25XRGQP8UMR8XBE7MnL/khEPBoRe+ep/7fPPfZGqyHknXD/x5Z0/1sFnv0hovmurjPffNmQ8QelRdY/u/8HK6GBfMvYyNSmheo1X0lrA7d9AQEAAOAusCcitkaS7svnOLdGmu7bF7FlbgZlcuqpk+ffOjdWfUegP3rSYqarr2Y+dCifG87i2VHDNfFs/4HKvHG5XC73ZvFs/D6xrbNVh3VvS4v2n/m98ZUWYK1Z0jpaqzfagLvS8tfR2/+FDGB1raHv8wNLpP3D+rXo9r9Sb8EBHdOs/V+JuNmBogCrrFn7f7UD5QBWn/E/rF/aP6xbC75MC6xJi3pJfhmB7cfnSZN0r0ymrQNp1G3JfuLV/RWA/ogicfEFx/lP+Fsa0Z4SdrW1pr119zRtmmZTtCOvSBdM072EP8SwuoH0zihGNbAxIhZ4eucetitF4PJKF6zSCD7r7E8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA2/dvAAAA//+lFtmI") r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@nomblk_io_submit}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@noload}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r5, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x40}, @in6={0xa, 0x4e22, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x2}], 0x38) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='asymmetric\x00', 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @multicast1}, {0x20000010304, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0xde, {0x2, 0x0, @multicast1=0xe000cc02}}) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000001200)="9d0dfecbc6d5ad7d0ceb1304a27d9cb1", 0x10) writev(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff06006000010000005600000025000000190004000400000007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) 294.673226ms ago: executing program 4 (id=312): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) sendfile(r0, r0, 0x0, 0x24002de8) (fail_nth: 1) 276.416277ms ago: executing program 1 (id=313): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000001c40), &(0x7f0000001c80)=0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fgetxattr(r1, &(0x7f0000000180)=@known='user.syz\x00', 0x0, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000940)={'bridge0\x00', 0x0}) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001c000100000000000000000007000000", @ANYRES32=r3, @ANYRESOCT=r2], 0x44}}, 0x483) 34.140807ms ago: executing program 0 (id=314): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$inet6(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = epoll_create(0x2a) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c46000/0x3000)=nil, 0x3000, 0x12) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r2) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r4, 0x203, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x11, 0x1, 'NLBL_CIPSOv4\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x39}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000040f9e2ddbc0b000061ae6fa9d3000000200000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) prlimit64(0x0, 0x8, &(0x7f0000000140), 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x1a00001a}]) mmap(&(0x7f000012b000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) 10.373529ms ago: executing program 4 (id=315): sendmsg(0xffffffffffffffff, 0x0, 0x4040000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xc1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r1, 0x80184947, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x20, r3, 0x73976972ba3f4b55, 0x0, 0x0, {0x8}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x20}}, 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000a0a0108000000000000f55a4e117d2f252946794c6401a8e945"], 0x20}}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000740)=@framed={{}, [@map_idx_val={0x18, 0x3, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x200}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x5}, 0x90) fsopen(&(0x7f0000000000)='configfs\x00', 0x0) r5 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r5, 0x0) 0s ago: executing program 1 (id=316): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x1c30d, &(0x7f00000001c0)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009aaa21b5084a2ac75af86d4f32151f53248eb7ec539fff0bd244bb2559d414561138c259cecc8dccf4475a9e05a9b714d4939bee6cf0f1e7a889f8100c41c843380270c20100000000000000c5"], 0x0, 0x24b, &(0x7f0000000700)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = inotify_init1(0x0) open$dir(&(0x7f0000000080)='./file0/bus\x00', 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x40082) openat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x848000, 0x9) write$sndseq(r1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000000c0)={0x80, 0x1f4, 0xc8}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="2000000000000000000000000000000018f9d54bfc26d710be39110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x2f, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000740)="d8000000180081064e81f782db44b904021d080006077c09e8fe55a10a0015400500142603600e120800060000000401a8001600a400014004000021036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800e00010069703665727370616e0000001c0002800400120014000700fe8000000000000000000000000000aa08000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r5, r2, 0x19, 0x0, @val=@netfilter={0x7, 0x1, 0x1}}, 0x40) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r10, 0x40047211, &(0x7f0000000400)) write$sndseq(r9, &(0x7f0000000000)=[{0x22, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x95ffffff]}}], 0xffc8) inotify_add_watch(r0, &(0x7f00000000c0)='./file0/bus\x00', 0x20) kernel console output (not intermixed with test programs): batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.686866][ T3085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.700314][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.707293][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.733254][ T3085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.744930][ T3083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.754139][ T3090] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.761307][ T3090] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.768715][ T3090] bridge_slave_1: entered allmulticast mode [ 28.775147][ T3090] bridge_slave_1: entered promiscuous mode [ 28.830922][ T3083] team0: Port device team_slave_0 added [ 28.837813][ T3090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.848021][ T3090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.868036][ T3087] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.875271][ T3087] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.882439][ T3087] bridge_slave_0: entered allmulticast mode [ 28.888896][ T3087] bridge_slave_0: entered promiscuous mode [ 28.895495][ T3082] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.902668][ T3082] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.909826][ T3082] bridge_slave_0: entered allmulticast mode [ 28.916209][ T3082] bridge_slave_0: entered promiscuous mode [ 28.923195][ T3083] team0: Port device team_slave_1 added [ 28.939227][ T3090] team0: Port device team_slave_0 added [ 28.945209][ T3087] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.952294][ T3087] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.959845][ T3087] bridge_slave_1: entered allmulticast mode [ 28.966431][ T3087] bridge_slave_1: entered promiscuous mode [ 28.978350][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.985509][ T3082] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.992685][ T3082] bridge_slave_1: entered allmulticast mode [ 28.999583][ T3082] bridge_slave_1: entered promiscuous mode [ 29.016669][ T3090] team0: Port device team_slave_1 added [ 29.024637][ T3085] hsr_slave_0: entered promiscuous mode [ 29.030817][ T3085] hsr_slave_1: entered promiscuous mode [ 29.048387][ T3083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.055425][ T3083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.081472][ T3083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.092851][ T3083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.099851][ T3083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.125769][ T3083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.147153][ T3090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.154127][ T3090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.180178][ T3090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.192032][ T3087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.219955][ T3090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.226937][ T3090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.252969][ T3090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.267025][ T3087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.279899][ T3082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.308579][ T3082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.328894][ T3087] team0: Port device team_slave_0 added [ 29.345028][ T3082] team0: Port device team_slave_0 added [ 29.361123][ T3087] team0: Port device team_slave_1 added [ 29.373916][ T3090] hsr_slave_0: entered promiscuous mode [ 29.380258][ T3090] hsr_slave_1: entered promiscuous mode [ 29.386427][ T3090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.394013][ T3090] Cannot create hsr debugfs directory [ 29.400172][ T3082] team0: Port device team_slave_1 added [ 29.407981][ T3083] hsr_slave_0: entered promiscuous mode [ 29.414041][ T3083] hsr_slave_1: entered promiscuous mode [ 29.420154][ T3083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.427759][ T3083] Cannot create hsr debugfs directory [ 29.456475][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.463524][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.489652][ T3087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.511411][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.518421][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.544526][ T3082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.557796][ T3087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.564783][ T3087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.590984][ T3087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.605656][ T3082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.612635][ T3082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.638648][ T3082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.684319][ T3087] hsr_slave_0: entered promiscuous mode [ 29.690536][ T3087] hsr_slave_1: entered promiscuous mode [ 29.696684][ T3087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.704352][ T3087] Cannot create hsr debugfs directory [ 29.736830][ T3082] hsr_slave_0: entered promiscuous mode [ 29.743232][ T3082] hsr_slave_1: entered promiscuous mode [ 29.749638][ T3082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.757296][ T3082] Cannot create hsr debugfs directory [ 29.875671][ T3085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.884528][ T3085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.908270][ T3085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.929964][ T3085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.960876][ T3083] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.971752][ T3083] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.982045][ T3083] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.993219][ T3083] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.016366][ T3090] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.026417][ T3090] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.035987][ T3090] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.045032][ T3090] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.092105][ T3087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.101563][ T3087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.111033][ T3087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.121945][ T3087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.168799][ T3082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.181047][ T3082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.190041][ T3082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.199668][ T3082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.219564][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.249247][ T3090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.263779][ T3085] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.275277][ T3083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.292312][ T3090] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.302130][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.309300][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.335442][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.342623][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.352179][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.359276][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.368728][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.375858][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.413485][ T3083] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.432823][ T3082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.445666][ T3090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.456300][ T3090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.481483][ T3082] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.499782][ T3162] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.506972][ T3162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.534892][ T3162] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.542055][ T3162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.551531][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.558704][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.580768][ T3087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.590453][ T3162] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.597664][ T3162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.620827][ T3087] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.644532][ T3161] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.651692][ T3161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.672872][ T3161] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.679984][ T3161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.694204][ T3090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.703685][ T3083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.721947][ T3085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.738397][ T3087] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.749063][ T3087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.819900][ T3082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.859022][ T3087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.908643][ T3083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.007454][ T3085] veth0_vlan: entered promiscuous mode [ 31.024006][ T3090] veth0_vlan: entered promiscuous mode [ 31.046235][ T3082] veth0_vlan: entered promiscuous mode [ 31.055790][ T3085] veth1_vlan: entered promiscuous mode [ 31.070020][ T3085] veth0_macvtap: entered promiscuous mode [ 31.078206][ T3090] veth1_vlan: entered promiscuous mode [ 31.087613][ T3082] veth1_vlan: entered promiscuous mode [ 31.108675][ T3083] veth0_vlan: entered promiscuous mode [ 31.118457][ T3083] veth1_vlan: entered promiscuous mode [ 31.129421][ T3085] veth1_macvtap: entered promiscuous mode [ 31.152659][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.167553][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.181151][ T3090] veth0_macvtap: entered promiscuous mode [ 31.193578][ T3083] veth0_macvtap: entered promiscuous mode [ 31.205209][ T3082] veth0_macvtap: entered promiscuous mode [ 31.212327][ T3090] veth1_macvtap: entered promiscuous mode [ 31.222371][ T3083] veth1_macvtap: entered promiscuous mode [ 31.230795][ T3082] veth1_macvtap: entered promiscuous mode [ 31.240078][ T3085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.249063][ T3085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.257877][ T3085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.266636][ T3085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.290373][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.300908][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.311703][ T3090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.319962][ T3087] veth0_vlan: entered promiscuous mode [ 31.329193][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.339837][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.349770][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.360255][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.371085][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.385898][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.396581][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.406609][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.417150][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.426997][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.437481][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.448235][ T3083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.456966][ T3087] veth1_vlan: entered promiscuous mode [ 31.467345][ T3090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.477883][ T3090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.489172][ T3090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.500971][ T3090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.509847][ T3090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.518582][ T3090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.527363][ T3090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.539532][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.550197][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.560132][ T3083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.570609][ T3083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.581637][ T3083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.592154][ T3083] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.600931][ T3083] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.609770][ T3083] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.618543][ T3083] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.629142][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.639621][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.649568][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.660082][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.669941][ T3082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.680386][ T3082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.691356][ T3082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.704618][ T3082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.713437][ T3082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.722189][ T3082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.730996][ T3082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.748552][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 31.748570][ T29] audit: type=1400 audit(1720958854.404:115): avc: denied { read write } for pid=3085 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.785352][ T29] audit: type=1400 audit(1720958854.404:116): avc: denied { open } for pid=3085 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.791268][ T3224] loop0: detected capacity change from 0 to 1024 [ 31.809661][ T29] audit: type=1400 audit(1720958854.404:117): avc: denied { ioctl } for pid=3085 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.841553][ T29] audit: type=1400 audit(1720958854.414:118): avc: denied { name_bind } for pid=3223 comm="syz.0.1" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 31.847664][ T3224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.862927][ T29] audit: type=1400 audit(1720958854.414:119): avc: denied { node_bind } for pid=3223 comm="syz.0.1" saddr=fe80::aa src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 31.896934][ T29] audit: type=1400 audit(1720958854.534:120): avc: denied { mount } for pid=3223 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.902542][ T3087] veth0_macvtap: entered promiscuous mode [ 31.918317][ T29] audit: type=1400 audit(1720958854.534:121): avc: denied { write } for pid=3223 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 31.943498][ T3085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.965777][ T3087] veth1_macvtap: entered promiscuous mode [ 31.994189][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.004767][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.014633][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.025265][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.027962][ T3231] loop3: detected capacity change from 0 to 128 [ 32.035283][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.052037][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.062013][ T29] audit: type=1400 audit(1720958854.714:122): avc: denied { open } for pid=3234 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.062049][ T29] audit: type=1400 audit(1720958854.714:123): avc: denied { perfmon } for pid=3234 comm="syz.0.6" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.062076][ T29] audit: type=1400 audit(1720958854.714:124): avc: denied { kernel } for pid=3234 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.120906][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.120925][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.123277][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.188206][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.198797][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.198813][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.198829][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.198840][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.198855][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.198869][ T3087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.198915][ T3087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.200451][ T3087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.207019][ T3087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.207062][ T3087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.207133][ T3087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.207167][ T3087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.316024][ T3255] FAULT_INJECTION: forcing a failure. [ 32.316024][ T3255] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 32.316131][ T3255] CPU: 1 PID: 3255 Comm: syz.2.8 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 32.316158][ T3255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 32.316198][ T3255] Call Trace: [ 32.316274][ T3255] [ 32.316284][ T3255] dump_stack_lvl+0xf2/0x150 [ 32.316337][ T3255] dump_stack+0x15/0x20 [ 32.316375][ T3255] should_fail_ex+0x229/0x230 [ 32.316403][ T3255] should_fail+0xb/0x10 [ 32.316458][ T3255] should_fail_usercopy+0x1a/0x20 [ 32.316488][ T3255] _copy_to_user+0x1e/0xa0 [ 32.316577][ T3255] simple_read_from_buffer+0xa0/0x110 [ 32.316606][ T3255] proc_fail_nth_read+0xfc/0x140 [ 32.316635][ T3255] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 32.316661][ T3255] vfs_read+0x1a2/0x6e0 [ 32.316695][ T3255] ? __rcu_read_unlock+0x4e/0x70 [ 32.316856][ T3255] ? __fget_files+0x1da/0x210 [ 32.316904][ T3255] ksys_read+0xeb/0x1b0 [ 32.316939][ T3255] __x64_sys_read+0x42/0x50 [ 32.316970][ T3255] x64_sys_call+0x27e5/0x2d70 [ 32.317078][ T3255] do_syscall_64+0xc9/0x1c0 [ 32.317117][ T3255] ? clear_bhb_loop+0x55/0xb0 [ 32.317190][ T3255] ? clear_bhb_loop+0x55/0xb0 [ 32.317220][ T3255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.317254][ T3255] RIP: 0033:0x7f02d10ca6bc [ 32.317273][ T3255] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 32.317295][ T3255] RSP: 002b:00007f02d032c040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 32.317316][ T3255] RAX: ffffffffffffffda RBX: 00007f02d125a038 RCX: 00007f02d10ca6bc [ 32.317342][ T3255] RDX: 000000000000000f RSI: 00007f02d032c0b0 RDI: 0000000000000005 [ 32.317355][ T3255] RBP: 00007f02d032c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 32.317368][ T3255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.317382][ T3255] R13: 000000000000006e R14: 00007f02d125a038 R15: 00007fff55cc36c8 [ 32.317407][ T3255] [ 32.319951][ T3254] FAULT_INJECTION: forcing a failure. [ 32.319951][ T3254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.319978][ T3254] CPU: 1 PID: 3254 Comm: syz.4.5 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 32.320066][ T3254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 32.320080][ T3254] Call Trace: [ 32.320088][ T3254] [ 32.320096][ T3254] dump_stack_lvl+0xf2/0x150 [ 32.320187][ T3254] dump_stack+0x15/0x20 [ 32.320226][ T3254] should_fail_ex+0x229/0x230 [ 32.320254][ T3254] should_fail+0xb/0x10 [ 32.320288][ T3254] should_fail_usercopy+0x1a/0x20 [ 32.320321][ T3254] _copy_to_user+0x1e/0xa0 [ 32.320359][ T3254] simple_read_from_buffer+0xa0/0x110 [ 32.320420][ T3254] proc_fail_nth_read+0xfc/0x140 [ 32.320444][ T3254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 32.320466][ T3254] vfs_read+0x1a2/0x6e0 [ 32.320501][ T3254] ? __rcu_read_unlock+0x4e/0x70 [ 32.320534][ T3254] ? __fget_files+0x1da/0x210 [ 32.320574][ T3254] ksys_read+0xeb/0x1b0 [ 32.320612][ T3254] __x64_sys_read+0x42/0x50 [ 32.320717][ T3254] x64_sys_call+0x27e5/0x2d70 [ 32.320745][ T3254] do_syscall_64+0xc9/0x1c0 [ 32.320829][ T3254] ? clear_bhb_loop+0x55/0xb0 [ 32.320860][ T3254] ? clear_bhb_loop+0x55/0xb0 [ 32.320997][ T3254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.321027][ T3254] RIP: 0033:0x7fd4ef3526bc [ 32.321042][ T3254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 32.321060][ T3254] RSP: 002b:00007fd4ee5d5040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 32.321119][ T3254] RAX: ffffffffffffffda RBX: 00007fd4ef4e1f60 RCX: 00007fd4ef3526bc [ 32.321134][ T3254] RDX: 000000000000000f RSI: 00007fd4ee5d50b0 RDI: 0000000000000005 [ 32.321223][ T3254] RBP: 00007fd4ee5d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 32.321235][ T3254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.321263][ T3254] R13: 000000000000000b R14: 00007fd4ef4e1f60 R15: 00007ffd8f162528 [ 32.321322][ T3254] [ 32.357383][ T3258] loop4: detected capacity change from 0 to 2048 [ 32.734779][ T3263] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.916495][ T3258] Alternate GPT is invalid, using primary GPT. [ 32.921786][ T3266] loop1: detected capacity change from 0 to 1024 [ 32.922909][ T3258] loop4: p2 p3 p7 [ 32.947147][ T3266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.990236][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.039014][ T3076] udevd[3076]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 33.053320][ T3159] udevd[3159]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 33.067442][ T3074] udevd[3074]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 33.077997][ T3284] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3284 comm=syz.4.18 [ 33.158247][ T3292] netlink: 'syz.3.20': attribute type 10 has an invalid length. [ 33.177115][ T3288] loop1: detected capacity change from 0 to 1024 [ 33.179349][ T3296] loop0: detected capacity change from 0 to 512 [ 33.183844][ T3288] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.207161][ T3292] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 33.246843][ T3296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.252534][ T3292] syz.3.20 (3292) used greatest stack depth: 11192 bytes left [ 33.269238][ T3296] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.281323][ T3288] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 33.306779][ T3307] FAULT_INJECTION: forcing a failure. [ 33.306779][ T3307] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 33.319152][ T3288] System zones: 0-1, 3-12 [ 33.320122][ T3307] CPU: 0 PID: 3307 Comm: syz.3.24 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 33.330936][ T3288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.334302][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 33.334321][ T3307] Call Trace: [ 33.334331][ T3307] [ 33.362731][ T3307] dump_stack_lvl+0xf2/0x150 [ 33.367367][ T3307] dump_stack+0x15/0x20 [ 33.371572][ T3307] should_fail_ex+0x229/0x230 [ 33.376316][ T3307] __should_fail_alloc_page+0xfd/0x110 [ 33.381882][ T3307] __alloc_pages_noprof+0x109/0x360 [ 33.387126][ T3307] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 33.392591][ T3307] shmem_get_folio_gfp+0x3e4/0xb70 [ 33.397856][ T3307] shmem_write_begin+0xa0/0x1c0 [ 33.402753][ T3307] generic_perform_write+0x1d5/0x410 [ 33.408145][ T3307] ? __pfx_shmem_write_end+0x10/0x10 [ 33.413451][ T3307] shmem_file_write_iter+0xc8/0xf0 [ 33.418590][ T3307] vfs_write+0x78f/0x900 [ 33.422873][ T3307] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 33.428730][ T3307] ksys_write+0xeb/0x1b0 [ 33.433010][ T3307] __x64_sys_write+0x42/0x50 [ 33.437644][ T3307] x64_sys_call+0x27ef/0x2d70 [ 33.442480][ T3307] do_syscall_64+0xc9/0x1c0 [ 33.447095][ T3307] ? clear_bhb_loop+0x55/0xb0 [ 33.451820][ T3307] ? clear_bhb_loop+0x55/0xb0 [ 33.456524][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.462455][ T3307] RIP: 0033:0x7f569086775f [ 33.466886][ T3307] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 33.486530][ T3307] RSP: 002b:00007f568fae9e00 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 33.494955][ T3307] RAX: ffffffffffffffda RBX: 000000000005f800 RCX: 00007f569086775f [ 33.502954][ T3307] RDX: 000000000005f800 RSI: 00007f56876ca000 RDI: 0000000000000005 [ 33.510989][ T3307] RBP: 0000000000000000 R08: 0000000000000000 R09: 00000000000007a0 [ 33.518969][ T3307] R10: 0000000020000a82 R11: 0000000000000293 R12: 0000000000000005 [ 33.527046][ T3307] R13: 00007f568fae9f00 R14: 00007f568fae9ec0 R15: 00007f56876ca000 [ 33.535052][ T3307] [ 33.551868][ T3085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.595404][ T3288] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2856: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 33.668021][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.677819][ T3317] FAULT_INJECTION: forcing a failure. [ 33.677819][ T3317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 33.690998][ T3317] CPU: 1 PID: 3317 Comm: syz.4.27 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 33.700922][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 33.711002][ T3317] Call Trace: [ 33.714309][ T3317] [ 33.717346][ T3317] dump_stack_lvl+0xf2/0x150 [ 33.721978][ T3317] dump_stack+0x15/0x20 [ 33.726160][ T3317] should_fail_ex+0x229/0x230 [ 33.730871][ T3317] should_fail+0xb/0x10 [ 33.735112][ T3317] should_fail_usercopy+0x1a/0x20 [ 33.740330][ T3317] copy_fpstate_to_sigframe+0x575/0x720 [ 33.745968][ T3317] ? copy_fpstate_to_sigframe+0xde/0x720 [ 33.751630][ T3317] ? dequeue_signal+0x2ad/0x430 [ 33.756543][ T3317] ? fpu__alloc_mathframe+0x95/0xd0 [ 33.761765][ T3317] get_sigframe+0x295/0x350 [ 33.766357][ T3317] x64_setup_rt_frame+0xa7/0x570 [ 33.771311][ T3317] arch_do_signal_or_restart+0x287/0x4b0 [ 33.777040][ T3317] syscall_exit_to_user_mode+0x59/0x130 [ 33.782641][ T3317] do_syscall_64+0xd6/0x1c0 [ 33.787210][ T3317] ? clear_bhb_loop+0x55/0xb0 [ 33.791963][ T3317] ? clear_bhb_loop+0x55/0xb0 [ 33.796713][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.802650][ T3317] RIP: 0033:0x7fd4ef353bd9 [ 33.807105][ T3317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.827107][ T3317] RSP: 002b:00007fd4ee5d5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.835559][ T3317] RAX: 0000000000000050 RBX: 00007fd4ef4e1f60 RCX: 00007fd4ef353bd9 [ 33.843609][ T3317] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000005 [ 33.851622][ T3317] RBP: 00007fd4ee5d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 33.859614][ T3317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 33.867596][ T3317] R13: 000000000000000b R14: 00007fd4ef4e1f60 R15: 00007ffd8f162528 [ 33.875588][ T3317] [ 33.935923][ T3321] loop0: detected capacity change from 0 to 512 [ 33.963591][ T3321] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2234: inode #15: comm syz.0.25: corrupted in-inode xattr: invalid ea_ino [ 33.978886][ T3321] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.25: couldn't read orphan inode 15 (err -117) [ 33.994757][ T3321] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.113657][ T3330] Zero length message leads to an empty skb [ 34.239659][ T3331] SELinux: Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped). [ 34.267667][ T3339] Process accounting resumed [ 34.317788][ T3343] syz.3.33 uses obsolete (PF_INET,SOCK_PACKET) [ 34.345596][ T3331] loop2: detected capacity change from 0 to 512 [ 34.378648][ T3343] bond_slave_0: entered promiscuous mode [ 34.384365][ T3343] bond_slave_1: entered promiscuous mode [ 34.390162][ T3343] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 34.399706][ T3074] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 34.431595][ T3343] bond_slave_0: left promiscuous mode [ 34.437141][ T3343] bond_slave_1: left promiscuous mode [ 34.442564][ T3343] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 34.465279][ T3343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.479428][ T3350] loop1: detected capacity change from 0 to 512 [ 34.488560][ T3350] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 34.497289][ T3343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.518758][ T3343] bond0 (unregistering): (slave netdevsim1): Releasing backup interface [ 34.531638][ T3343] bond0 (unregistering): Released all slaves [ 34.538660][ T3085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.640315][ T3361] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3361 comm=syz.0.37 [ 34.877173][ T3376] Process accounting resumed [ 35.292613][ T3407] loop2: detected capacity change from 0 to 2048 [ 35.308392][ T3404] loop1: detected capacity change from 0 to 512 [ 35.356115][ T3074] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 35.381808][ T3407] Alternate GPT is invalid, using primary GPT. [ 35.388252][ T3407] loop2: p2 p3 p7 [ 35.438851][ T3414] Process accounting resumed [ 35.578712][ T3422] loop2: detected capacity change from 0 to 1024 [ 35.591976][ T3422] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.626060][ T3422] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 35.632784][ T3431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 35.643355][ T3428] netlink: 'syz.4.62': attribute type 10 has an invalid length. [ 35.652426][ T3428] veth0_macvtap: left promiscuous mode [ 35.662529][ T3422] System zones: 0-1, 3-12 [ 35.670278][ T3422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.696023][ T3428] veth0_macvtap: entered promiscuous mode [ 35.716286][ T3428] team0: Device macvtap0 failed to register rx_handler [ 35.735060][ T3428] veth0_macvtap: left promiscuous mode [ 35.753914][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.774560][ T3431] netlink: 28 bytes leftover after parsing attributes in process `syz.1.63'. [ 35.793125][ T3428] syz.4.62 (3428) used greatest stack depth: 10256 bytes left [ 35.824523][ T3437] veth0_vlan: entered allmulticast mode [ 35.891002][ T3389] syz.0.48 (3389) used greatest stack depth: 8480 bytes left [ 35.905262][ T3443] netlink: 'syz.2.64': attribute type 10 has an invalid length. [ 35.925108][ T3443] syz_tun: entered promiscuous mode [ 35.947116][ T3443] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 35.987000][ T3452] team0: entered promiscuous mode [ 35.992082][ T3452] team_slave_0: entered promiscuous mode [ 35.998127][ T3452] team_slave_1: entered promiscuous mode [ 36.005888][ T3451] FAULT_INJECTION: forcing a failure. [ 36.005888][ T3451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.019066][ T3451] CPU: 1 PID: 3451 Comm: syz.2.71 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 36.029076][ T3451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 36.039265][ T3451] Call Trace: [ 36.042615][ T3451] [ 36.045560][ T3451] dump_stack_lvl+0xf2/0x150 [ 36.050191][ T3451] dump_stack+0x15/0x20 [ 36.054471][ T3451] should_fail_ex+0x229/0x230 [ 36.059399][ T3451] should_fail+0xb/0x10 [ 36.063592][ T3451] should_fail_usercopy+0x1a/0x20 [ 36.068820][ T3451] _copy_from_user+0x1e/0xd0 [ 36.073563][ T3451] __sys_bpf+0x14e/0x7a0 [ 36.078006][ T3451] __x64_sys_bpf+0x43/0x50 [ 36.082466][ T3451] x64_sys_call+0x2655/0x2d70 [ 36.087190][ T3451] do_syscall_64+0xc9/0x1c0 [ 36.091734][ T3451] ? clear_bhb_loop+0x55/0xb0 [ 36.096571][ T3451] ? clear_bhb_loop+0x55/0xb0 [ 36.101427][ T3451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.107524][ T3451] RIP: 0033:0x7f02d10cbbd9 [ 36.111975][ T3451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.130631][ T3458] loop1: detected capacity change from 0 to 512 [ 36.131798][ T3451] RSP: 002b:00007f02d034d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 36.131822][ T3451] RAX: ffffffffffffffda RBX: 00007f02d1259f60 RCX: 00007f02d10cbbd9 [ 36.131835][ T3451] RDX: 0000000000000048 RSI: 00000000200002c0 RDI: 0000000000000000 [ 36.131848][ T3451] RBP: 00007f02d034d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 36.170879][ T3451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.178983][ T3451] R13: 000000000000000b R14: 00007f02d1259f60 R15: 00007fff55cc36c8 [ 36.186976][ T3451] [ 36.196149][ T3456] team0: left promiscuous mode [ 36.201096][ T3456] team_slave_0: left promiscuous mode [ 36.206580][ T3456] team_slave_1: left promiscuous mode [ 36.217518][ T3458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.230236][ T3458] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.281299][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.285934][ T3385] syz.0.48 (3385) used greatest stack depth: 6408 bytes left [ 36.309289][ T3464] loop2: detected capacity change from 0 to 1024 [ 36.322091][ T3464] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.327211][ T3466] FAULT_INJECTION: forcing a failure. [ 36.327211][ T3466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 36.341903][ T3466] CPU: 0 PID: 3466 Comm: syz.0.76 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 36.351868][ T3466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 36.361958][ T3466] Call Trace: [ 36.365260][ T3466] [ 36.368237][ T3466] dump_stack_lvl+0xf2/0x150 [ 36.372444][ T3464] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 36.372873][ T3466] dump_stack+0x15/0x20 [ 36.382299][ T3464] System zones: [ 36.385080][ T3466] should_fail_ex+0x229/0x230 [ 36.388660][ T3464] 0-1 [ 36.393376][ T3466] should_fail+0xb/0x10 [ 36.396064][ T3464] , 3-12 [ 36.400114][ T3466] should_fail_usercopy+0x1a/0x20 [ 36.402977][ T3464] [ 36.405903][ T3464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.407986][ T3466] _copy_to_user+0x1e/0xa0 [ 36.426885][ T3466] simple_read_from_buffer+0xa0/0x110 [ 36.426924][ T3466] proc_fail_nth_read+0xfc/0x140 [ 36.426949][ T3466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 36.427035][ T3466] vfs_read+0x1a2/0x6e0 [ 36.427065][ T3466] ? __rcu_read_unlock+0x4e/0x70 [ 36.427120][ T3466] ? __fget_files+0x1da/0x210 [ 36.427184][ T3466] ksys_read+0xeb/0x1b0 [ 36.427215][ T3466] __x64_sys_read+0x42/0x50 [ 36.427279][ T3466] x64_sys_call+0x27e5/0x2d70 [ 36.427363][ T3466] do_syscall_64+0xc9/0x1c0 [ 36.427397][ T3466] ? clear_bhb_loop+0x55/0xb0 [ 36.427505][ T3466] ? clear_bhb_loop+0x55/0xb0 [ 36.427535][ T3466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.427565][ T3466] RIP: 0033:0x7f87160376bc [ 36.427616][ T3466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 36.427635][ T3466] RSP: 002b:00007f87152ba040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 36.427655][ T3466] RAX: ffffffffffffffda RBX: 00007f87161c6f60 RCX: 00007f87160376bc [ 36.427668][ T3466] RDX: 000000000000000f RSI: 00007f87152ba0b0 RDI: 0000000000000004 [ 36.427754][ T3466] RBP: 00007f87152ba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 36.427766][ T3466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.427826][ T3466] R13: 000000000000000b R14: 00007f87161c6f60 R15: 00007fffcb25e6e8 [ 36.427843][ T3466] [ 36.465733][ T3475] netlink: 'syz.0.78': attribute type 4 has an invalid length. [ 36.478066][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.485134][ T3475] netlink: 25 bytes leftover after parsing attributes in process `syz.0.78'. [ 36.657626][ T3481] loop0: detected capacity change from 0 to 128 [ 36.664400][ T3481] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 36.730637][ T3159] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 36.782351][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 36.782367][ T29] audit: type=1400 audit(1720958859.434:243): avc: denied { node_bind } for pid=3495 comm="syz.0.85" saddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 36.884350][ T3499] loop2: detected capacity change from 0 to 512 [ 36.926791][ T3499] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz.2.84: corrupted in-inode xattr: invalid ea_ino [ 36.944796][ T3499] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.84: couldn't read orphan inode 15 (err -117) [ 36.958815][ T3499] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.000243][ T3502] loop1: detected capacity change from 0 to 1024 [ 37.057052][ T3502] EXT4-fs: Ignoring removed orlov option [ 37.062795][ T3502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.106477][ T3502] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.218525][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.275602][ T29] audit: type=1400 audit(1720958859.934:244): avc: denied { write } for pid=3508 comm="syz.4.88" laddr=172.20.20.10 lport=32810 faddr=172.20.20.0 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.343093][ T3513] loop4: detected capacity change from 0 to 1024 [ 37.349931][ T3513] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.364396][ T3511] loop1: detected capacity change from 0 to 512 [ 37.372450][ T3511] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 37.381817][ T3513] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 37.382556][ T3511] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 37.391606][ T3513] System zones: 0-1, 3-12 [ 37.398189][ T3511] System zones: 1-12 [ 37.403321][ T3513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.407215][ T3511] EXT4-fs (loop1): orphan cleanup on readonly fs [ 37.425592][ T3511] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.87: Inode bitmap for bg 0 marked uninitialized [ 37.438820][ T3511] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.452034][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.456282][ T29] audit: type=1400 audit(1720958860.104:245): avc: denied { watch watch_reads } for pid=3510 comm="syz.1.87" path="/23/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.461622][ T3511] EXT4-fs error (device loop1): ext4_map_blocks:580: inode #2: block 5: comm syz.1.87: lblock 0 mapped to illegal pblock 5 (length 1) [ 37.499433][ T3511] EXT4-fs warning (device loop1): dx_probe:822: inode #2: lblock 0: comm syz.1.87: error -117 reading directory block [ 37.610003][ T29] audit: type=1326 audit(1720958860.264:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3525 comm="syz.3.92" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5690868bd9 code=0x0 [ 37.636315][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.653335][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.665283][ T29] audit: type=1326 audit(1720958860.324:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3530 comm="syz.0.93" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8716038bd9 code=0x0 [ 37.688302][ T29] audit: type=1400 audit(1720958860.324:248): avc: denied { read } for pid=3522 comm="syz.4.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.723611][ T3535] loop4: detected capacity change from 0 to 256 [ 37.731697][ T3535] ======================================================= [ 37.731697][ T3535] WARNING: The mand mount option has been deprecated and [ 37.731697][ T3535] and is ignored by this kernel. Remove the mand [ 37.731697][ T3535] option from the mount to silence this warning. [ 37.731697][ T3535] ======================================================= [ 37.768794][ T3541] team0: entered promiscuous mode [ 37.773906][ T3541] team_slave_0: entered promiscuous mode [ 37.780581][ T3541] team_slave_1: entered promiscuous mode [ 37.785907][ T29] audit: type=1400 audit(1720958860.434:249): avc: denied { mount } for pid=3532 comm="syz.4.96" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.790650][ T3540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 37.820747][ T3541] team0: left promiscuous mode [ 37.825673][ T3541] team_slave_0: left promiscuous mode [ 37.831189][ T3541] team_slave_1: left promiscuous mode [ 37.868855][ T3545] loop2: detected capacity change from 0 to 1024 [ 37.877639][ T3545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.886173][ T3547] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3547 comm=syz.1.99 [ 37.904534][ T29] audit: type=1400 audit(1720958860.554:250): avc: denied { ioctl } for pid=3546 comm="syz.1.99" path="socket:[5153]" dev="sockfs" ino=5153 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.936745][ T3545] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 37.945616][ T29] audit: type=1400 audit(1720958860.594:251): avc: denied { unmount } for pid=3087 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.946113][ T3545] System zones: 0-1, 3-12 [ 37.975562][ T3545] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.007887][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.076568][ T3555] netlink: 36 bytes leftover after parsing attributes in process `syz.2.102'. [ 38.125011][ T29] audit: type=1326 audit(1720958860.784:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3561 comm="syz.2.107" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f02d10cbbd9 code=0x0 [ 38.131795][ T3564] netlink: 'syz.1.105': attribute type 4 has an invalid length. [ 38.166924][ T3564] netlink: 25 bytes leftover after parsing attributes in process `syz.1.105'. [ 38.202975][ T3567] loop1: detected capacity change from 0 to 128 [ 38.203834][ T3569] syz.2.107[3569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.209355][ T3569] syz.2.107[3569] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.210619][ T3567] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 38.237710][ T3569] syz_tun: left promiscuous mode [ 38.338693][ T3573] FAULT_INJECTION: forcing a failure. [ 38.338693][ T3573] name failslab, interval 1, probability 0, space 0, times 0 [ 38.351725][ T3573] CPU: 0 PID: 3573 Comm: syz.1.110 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 38.361769][ T3573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 38.371839][ T3573] Call Trace: [ 38.375231][ T3573] [ 38.378164][ T3573] dump_stack_lvl+0xf2/0x150 [ 38.382772][ T3573] dump_stack+0x15/0x20 [ 38.386961][ T3573] should_fail_ex+0x229/0x230 [ 38.391650][ T3573] ? skb_clone+0x154/0x1f0 [ 38.396112][ T3573] __should_failslab+0x92/0xa0 [ 38.401134][ T3573] should_failslab+0x9/0x20 [ 38.405659][ T3573] kmem_cache_alloc_noprof+0x4c/0x290 [ 38.411067][ T3573] skb_clone+0x154/0x1f0 [ 38.415401][ T3573] dev_queue_xmit_nit+0x149/0x620 [ 38.420461][ T3573] dev_hard_start_xmit+0xcc/0x3f0 [ 38.425499][ T3573] ? validate_xmit_skb+0x658/0x8c0 [ 38.430689][ T3573] __dev_queue_xmit+0xf83/0x1e50 [ 38.435692][ T3573] ? should_fail_ex+0xd7/0x230 [ 38.440669][ T3573] ? __dev_queue_xmit+0x161/0x1e50 [ 38.445829][ T3573] ? __skb_clone+0x2d0/0x2f0 [ 38.450592][ T3573] __netlink_deliver_tap+0x39f/0x4c0 [ 38.455936][ T3573] netlink_sendskb+0x123/0x140 [ 38.460746][ T3573] netlink_unicast+0x291/0x660 [ 38.465558][ T3573] netlink_ack+0x4c2/0x4f0 [ 38.470089][ T3573] netlink_rcv_skb+0x19c/0x230 [ 38.474965][ T3573] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 38.480503][ T3573] rtnetlink_rcv+0x1c/0x30 [ 38.484972][ T3573] netlink_unicast+0x58d/0x660 [ 38.489771][ T3573] netlink_sendmsg+0x5ca/0x6e0 [ 38.494613][ T3573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.499931][ T3573] __sock_sendmsg+0x140/0x180 [ 38.504670][ T3573] ____sys_sendmsg+0x312/0x410 [ 38.509561][ T3573] __sys_sendmsg+0x1e9/0x280 [ 38.514194][ T3573] __x64_sys_sendmsg+0x46/0x50 [ 38.518990][ T3573] x64_sys_call+0xb25/0x2d70 [ 38.523619][ T3573] do_syscall_64+0xc9/0x1c0 [ 38.528152][ T3573] ? clear_bhb_loop+0x55/0xb0 [ 38.532968][ T3573] ? clear_bhb_loop+0x55/0xb0 [ 38.537695][ T3573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.543617][ T3573] RIP: 0033:0x7fe9181e4bd9 [ 38.548165][ T3573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.568057][ T3573] RSP: 002b:00007fe917466048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.576489][ T3573] RAX: ffffffffffffffda RBX: 00007fe918372f60 RCX: 00007fe9181e4bd9 [ 38.584522][ T3573] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003 [ 38.592531][ T3573] RBP: 00007fe9174660a0 R08: 0000000000000000 R09: 0000000000000000 [ 38.600541][ T3573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 38.608523][ T3573] R13: 000000000000000b R14: 00007fe918372f60 R15: 00007fff58cb4798 [ 38.616514][ T3573] [ 38.651007][ T3576] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3576 comm=syz.0.111 [ 38.663384][ T3579] loop1: detected capacity change from 0 to 128 [ 38.680057][ T3577] loop3: detected capacity change from 0 to 1024 [ 38.690074][ T3577] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.724318][ T3579] netlink: 'syz.1.113': attribute type 21 has an invalid length. [ 38.741874][ T3577] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 38.750253][ T3577] System zones: 0-1, 3-12 [ 38.755432][ T3577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.782604][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.813488][ T3584] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.857123][ T3589] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3589 comm=syz.3.114 [ 39.052641][ T3601] loop2: detected capacity change from 0 to 128 [ 39.067178][ T3601] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value [ 39.116518][ T3074] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 39.139088][ T3610] loop3: detected capacity change from 0 to 512 [ 39.147909][ T3610] ext4: Unknown parameter 'euid>00000000000000000000' [ 39.171209][ T3613] loop2: detected capacity change from 0 to 1024 [ 39.195299][ T3613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.209037][ T3617] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3617 comm=syz.3.125 [ 39.223273][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.296226][ T3620] loop2: detected capacity change from 0 to 128 [ 39.345143][ T3074] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 39.361445][ T3620] netlink: 'syz.2.126': attribute type 21 has an invalid length. [ 39.459882][ T3631] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3631 comm=syz.3.131 [ 39.531166][ T3637] loop2: detected capacity change from 0 to 128 [ 39.537978][ T3637] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value [ 39.588769][ T3641] capability: warning: `syz.2.135' uses deprecated v2 capabilities in a way that may be insecure [ 39.606858][ T3641] loop2: detected capacity change from 0 to 512 [ 39.664906][ T3645] loop3: detected capacity change from 0 to 4096 [ 39.671968][ T3074] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 39.682770][ T3645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.698581][ T3641] loop2: detected capacity change from 0 to 512 [ 39.750503][ T3645] netlink: 'syz.3.137': attribute type 6 has an invalid length. [ 39.758254][ T3645] netlink: 168 bytes leftover after parsing attributes in process `syz.3.137'. [ 39.776293][ T3653] loop0: detected capacity change from 0 to 128 [ 39.837997][ T3074] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 39.841440][ T3653] netlink: 'syz.0.140': attribute type 21 has an invalid length. [ 39.850512][ T3665] loop2: detected capacity change from 0 to 128 [ 39.872241][ T3665] FAT-fs (loop2): Unrecognized mount option "01777777777777777777777" or missing value [ 39.883545][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.902561][ T3668] loop1: detected capacity change from 0 to 128 [ 39.909742][ T3668] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 39.920593][ T3074] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 39.968269][ T3674] bond_slave_0: entered promiscuous mode [ 39.974048][ T3674] bond_slave_1: entered promiscuous mode [ 39.984569][ T3674] bond_slave_0: left promiscuous mode [ 39.990038][ T3674] bond_slave_1: left promiscuous mode [ 40.024885][ T3674] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.052867][ T3674] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.078821][ T3674] bond0 (unregistering): Released all slaves [ 40.114952][ T3678] netlink: 'syz.2.150': attribute type 4 has an invalid length. [ 40.147645][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 40.179231][ T3685] netlink: 25 bytes leftover after parsing attributes in process `syz.2.150'. [ 40.229719][ T3694] netlink: 16 bytes leftover after parsing attributes in process `syz.2.152'. [ 40.238928][ T3694] FAULT_INJECTION: forcing a failure. [ 40.238928][ T3694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.252106][ T3694] CPU: 1 PID: 3694 Comm: syz.2.152 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 40.262102][ T3694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 40.272175][ T3694] Call Trace: [ 40.275533][ T3694] [ 40.278529][ T3694] dump_stack_lvl+0xf2/0x150 [ 40.283154][ T3694] dump_stack+0x15/0x20 [ 40.287358][ T3694] should_fail_ex+0x229/0x230 [ 40.292142][ T3694] should_fail+0xb/0x10 [ 40.296486][ T3694] should_fail_usercopy+0x1a/0x20 [ 40.301530][ T3694] copy_fpstate_to_sigframe+0x575/0x720 [ 40.307198][ T3694] ? copy_fpstate_to_sigframe+0xde/0x720 [ 40.312971][ T3694] ? dequeue_signal+0x2ad/0x430 [ 40.317904][ T3694] ? fpu__alloc_mathframe+0x95/0xd0 [ 40.323222][ T3694] get_sigframe+0x295/0x350 [ 40.327818][ T3694] x64_setup_rt_frame+0xa7/0x570 [ 40.332827][ T3694] arch_do_signal_or_restart+0x287/0x4b0 [ 40.338679][ T3694] syscall_exit_to_user_mode+0x59/0x130 [ 40.344280][ T3694] do_syscall_64+0xd6/0x1c0 [ 40.348825][ T3694] ? clear_bhb_loop+0x55/0xb0 [ 40.353530][ T3694] ? clear_bhb_loop+0x55/0xb0 [ 40.358341][ T3694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.364273][ T3694] RIP: 0033:0x7f02d10cbbd9 [ 40.368808][ T3694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.388440][ T3694] RSP: 002b:00007f02d034d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.396882][ T3694] RAX: 000000000000027c RBX: 00007f02d1259f60 RCX: 00007f02d10cbbd9 [ 40.404927][ T3694] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000005 [ 40.413013][ T3694] RBP: 00007f02d034d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 40.421008][ T3694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.429155][ T3694] R13: 000000000000000b R14: 00007f02d1259f60 R15: 00007fff55cc36c8 [ 40.437151][ T3694] [ 40.851586][ T3708] loop3: detected capacity change from 0 to 128 [ 40.893175][ T3708] netlink: 'syz.3.159': attribute type 21 has an invalid length. [ 40.903198][ T3710] loop1: detected capacity change from 0 to 1024 [ 40.925801][ T3710] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.948114][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.015385][ T3717] netlink: 'syz.3.162': attribute type 4 has an invalid length. [ 41.030570][ T3717] netlink: 25 bytes leftover after parsing attributes in process `syz.3.162'. [ 41.151362][ T3729] loop3: detected capacity change from 0 to 2048 [ 41.169215][ T3699] syz.4.156 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 41.180362][ T3699] CPU: 1 PID: 3699 Comm: syz.4.156 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 41.190376][ T3699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 41.197040][ T3729] EXT4-fs error (device loop3): __ext4_fill_super:5447: inode #2: comm syz.3.164: casefold flag without casefold feature [ 41.200483][ T3699] Call Trace: [ 41.200496][ T3699] [ 41.200505][ T3699] dump_stack_lvl+0xf2/0x150 [ 41.213447][ T3729] EXT4-fs (loop3): get root inode failed [ 41.216412][ T3699] dump_stack+0x15/0x20 [ 41.219445][ T3729] EXT4-fs (loop3): mount failed [ 41.224048][ T3699] dump_header+0x83/0x2d0 [ 41.224082][ T3699] oom_kill_process+0x33e/0x4c0 [ 41.224106][ T3699] out_of_memory+0x9af/0xbe0 [ 41.252685][ T3699] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 41.258819][ T3699] mem_cgroup_out_of_memory+0x13e/0x190 [ 41.264447][ T3699] try_charge_memcg+0x745/0xcd0 [ 41.269329][ T3699] ? _raw_spin_unlock+0x26/0x50 [ 41.274217][ T3699] ? radix_tree_lookup+0xf9/0x150 [ 41.279268][ T3699] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 41.285415][ T3699] __read_swap_cache_async+0x2b9/0x520 [ 41.290911][ T3699] swap_cluster_readahead+0x380/0x3f0 [ 41.296304][ T3699] swapin_readahead+0xe2/0x7a0 [ 41.301254][ T3699] ? __filemap_get_folio+0x420/0x5b0 [ 41.306642][ T3699] ? swap_cache_get_folio+0x6e/0x210 [ 41.311944][ T3699] do_swap_page+0x3bc/0x1840 [ 41.316605][ T3699] ? cgroup_rstat_updated+0x99/0x550 [ 41.322035][ T3699] ? __rcu_read_lock+0x36/0x50 [ 41.326835][ T3699] handle_mm_fault+0x8b9/0x2ac0 [ 41.331797][ T3699] exc_page_fault+0x3b9/0x650 [ 41.336520][ T3699] asm_exc_page_fault+0x26/0x30 [ 41.341536][ T3699] RIP: 0033:0x7fd4ef385b94 [ 41.346065][ T3699] Code: ff ff ff 49 89 ca 0f 44 f8 80 3d be d9 12 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 <48> 89 54 24 10 89 74 24 0c 89 3c 24 48 89 4c 24 18 e8 c6 57 ff ff [ 41.365781][ T3699] RSP: 002b:00007ffd8f1625a0 EFLAGS: 00010206 [ 41.371866][ T3699] RAX: 00000000fffffffa RBX: 00007fd4ef4e1f60 RCX: 0000000000000000 [ 41.379855][ T3699] RDX: 00007ffd8f1625e0 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.387858][ T3699] RBP: 00007fd4ef4e3a60 R08: 0000000007891d38 R09: 7fffffffffffffff [ 41.395956][ T3699] R10: 0000000000000000 R11: 00007fd4ef4b8080 R12: 000000000000a14e [ 41.403942][ T3699] R13: 0000000000000032 R14: 00007fd4ef4e3a60 R15: 00007fd4ef4e2038 [ 41.411936][ T3699] [ 41.415053][ T3699] memory: usage 307200kB, limit 307200kB, failcnt 133 [ 41.421863][ T3699] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 41.432291][ T3699] kmem: usage 307100kB, limit 9007199254740988kB, failcnt 0 [ 41.439693][ T3699] Memory cgroup stats for /syz4: [ 41.446078][ T3699] cache 102400 [ 41.454563][ T3699] rss 0 [ 41.457339][ T3699] shmem 0 [ 41.460287][ T3699] mapped_file 102400 [ 41.464209][ T3699] dirty 102400 [ 41.467665][ T3699] writeback 0 [ 41.470960][ T3699] workingset_refault_anon 34 [ 41.475597][ T3699] workingset_refault_file 0 [ 41.480150][ T3699] swap 188416 [ 41.483443][ T3699] swapcached 0 [ 41.487042][ T3699] pgpgin 10892 [ 41.490419][ T3699] pgpgout 10867 [ 41.493888][ T3699] pgfault 12870 [ 41.497459][ T3699] pgmajfault 17 [ 41.500933][ T3699] inactive_anon 0 [ 41.504655][ T3699] active_anon 0 [ 41.508221][ T3699] inactive_file 102400 [ 41.512283][ T3699] active_file 0 [ 41.515776][ T3699] unevictable 0 [ 41.519237][ T3699] hierarchical_memory_limit 314572800 [ 41.524650][ T3699] hierarchical_memsw_limit 9223372036854771712 [ 41.530836][ T3699] total_cache 102400 [ 41.534813][ T3699] total_rss 0 [ 41.538173][ T3699] total_shmem 0 [ 41.541621][ T3699] total_mapped_file 102400 [ 41.546186][ T3699] total_dirty 102400 [ 41.549294][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.167'. [ 41.550075][ T3699] total_writeback 0 [ 41.550087][ T3699] total_workingset_refault_anon 34 [ 41.567931][ T3699] total_workingset_refault_file 0 [ 41.572995][ T3699] total_swap 188416 [ 41.576912][ T3699] total_swapcached 0 [ 41.580825][ T3699] total_pgpgin 10892 [ 41.584792][ T3699] total_pgpgout 10867 [ 41.588777][ T3699] total_pgfault 12870 [ 41.592779][ T3699] total_pgmajfault 17 [ 41.596806][ T3699] total_inactive_anon 0 [ 41.600983][ T3699] total_active_anon 0 [ 41.605027][ T3699] total_inactive_file 102400 [ 41.609619][ T3699] total_active_file 0 [ 41.613619][ T3699] total_unevictable 0 [ 41.617627][ T3699] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.156,pid=3699,uid=0 [ 41.632564][ T3699] Memory cgroup out of memory: Killed process 3699 (syz.4.156) total-vm:80752kB, anon-rss:452kB, file-rss:10184kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 41.970335][ T3748] loop1: detected capacity change from 0 to 256 [ 42.014784][ T3750] loop3: detected capacity change from 0 to 1024 [ 42.023026][ T3752] loop4: detected capacity change from 0 to 128 [ 42.033949][ T3074] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 42.036143][ T3750] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.066956][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.076685][ T3076] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 42.080925][ T3752] netlink: 'syz.4.172': attribute type 21 has an invalid length. [ 42.151941][ T3756] loop1: detected capacity change from 0 to 164 [ 42.165616][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 42.165633][ T29] audit: type=1400 audit(1720958864.824:288): avc: denied { mount } for pid=3747 comm="syz.1.170" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 42.182739][ T3758] netlink: 'syz.3.173': attribute type 4 has an invalid length. [ 42.215755][ T3758] netlink: 25 bytes leftover after parsing attributes in process `syz.3.173'. [ 42.299922][ T3767] loop3: detected capacity change from 0 to 128 [ 42.307967][ T3767] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 42.364603][ T29] audit: type=1400 audit(1720958865.014:289): avc: denied { cpu } for pid=3771 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 42.387182][ T29] audit: type=1400 audit(1720958865.024:290): avc: denied { create } for pid=3771 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.399810][ T3774] FAULT_INJECTION: forcing a failure. [ 42.399810][ T3774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.406590][ T29] audit: type=1400 audit(1720958865.024:291): avc: denied { setopt } for pid=3771 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.419506][ T3774] CPU: 1 PID: 3774 Comm: syz.4.177 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 42.438740][ T29] audit: type=1400 audit(1720958865.024:292): avc: denied { connect } for pid=3771 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 42.448648][ T3774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 42.448666][ T3774] Call Trace: [ 42.448677][ T3774] [ 42.448686][ T3774] dump_stack_lvl+0xf2/0x150 [ 42.488974][ T3774] dump_stack+0x15/0x20 [ 42.493185][ T3774] should_fail_ex+0x229/0x230 [ 42.497872][ T3774] should_fail+0xb/0x10 [ 42.502064][ T3774] should_fail_usercopy+0x1a/0x20 [ 42.507161][ T3774] _copy_to_user+0x1e/0xa0 [ 42.511638][ T3774] simple_read_from_buffer+0xa0/0x110 [ 42.517095][ T3774] proc_fail_nth_read+0xfc/0x140 [ 42.522096][ T3774] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.527669][ T3774] vfs_read+0x1a2/0x6e0 [ 42.528268][ T3777] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 42.531851][ T3774] ? __rcu_read_unlock+0x4e/0x70 [ 42.538368][ T3777] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 42.543285][ T3774] ? __fget_files+0x1da/0x210 [ 42.551566][ T3777] vhci_hcd vhci_hcd.0: Device attached [ 42.555873][ T3774] ksys_read+0xeb/0x1b0 [ 42.565856][ T3774] __x64_sys_read+0x42/0x50 [ 42.570081][ T29] audit: type=1400 audit(1720958865.214:293): avc: denied { read } for pid=3769 comm="syz.2.178" name="sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 42.570495][ T3774] x64_sys_call+0x27e5/0x2d70 [ 42.570531][ T3774] do_syscall_64+0xc9/0x1c0 [ 42.593857][ T29] audit: type=1400 audit(1720958865.214:294): avc: denied { open } for pid=3769 comm="syz.2.178" path="/dev/sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 42.598479][ T3774] ? clear_bhb_loop+0x55/0xb0 [ 42.604206][ T29] audit: type=1400 audit(1720958865.214:295): avc: denied { ioctl } for pid=3769 comm="syz.2.178" path="/dev/sg0" dev="devtmpfs" ino=113 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 42.626693][ T3774] ? clear_bhb_loop+0x55/0xb0 [ 42.661414][ T3774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.667339][ T3774] RIP: 0033:0x7fd4ef3526bc [ 42.671764][ T3774] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 42.691446][ T3774] RSP: 002b:00007fd4ee5d5040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.700001][ T3774] RAX: ffffffffffffffda RBX: 00007fd4ef4e1f60 RCX: 00007fd4ef3526bc [ 42.708053][ T3774] RDX: 000000000000000f RSI: 00007fd4ee5d50b0 RDI: 0000000000000004 [ 42.716039][ T3774] RBP: 00007fd4ee5d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 42.724044][ T3774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.732029][ T3774] R13: 000000000000000b R14: 00007fd4ef4e1f60 R15: 00007ffd8f162528 [ 42.740017][ T3774] [ 42.786395][ T29] audit: type=1400 audit(1720958865.424:296): avc: denied { create } for pid=3780 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.796973][ T3783] loop0: detected capacity change from 0 to 1764 [ 42.806455][ T29] audit: type=1400 audit(1720958865.424:297): avc: denied { getopt } for pid=3780 comm="syz.4.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 42.858639][ T3778] vhci_hcd: connection closed [ 42.860389][ T28] vhci_hcd: stop threads [ 42.869557][ T28] vhci_hcd: release socket [ 42.874010][ T28] vhci_hcd: disconnect device [ 42.880040][ T3787] loop4: detected capacity change from 0 to 128 [ 42.891011][ T3789] loop1: detected capacity change from 0 to 1024 [ 42.903461][ T3783] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 42.914490][ T3173] usb 5-1: new high-speed USB device number 2 using vhci_hcd [ 42.922176][ T3173] usb 5-1: enqueue for inactive port 0 [ 42.928508][ T3173] usb 5-1: enqueue for inactive port 0 [ 42.934891][ T3173] usb 5-1: enqueue for inactive port 0 [ 42.944396][ T3789] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.969858][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.983862][ T3787] netlink: 'syz.4.184': attribute type 21 has an invalid length. [ 43.034533][ T3173] vhci_hcd: vhci_device speed not set [ 43.053348][ T3798] loop1: detected capacity change from 0 to 1024 [ 43.061361][ T3798] EXT4-fs: Ignoring removed orlov option [ 43.067170][ T3798] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.083391][ T3796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 43.095646][ T3800] loop4: detected capacity change from 0 to 1024 [ 43.106571][ T3798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.147802][ T3798] bond0: (slave vlan1): Enslaving as an active interface with an up link [ 43.196544][ T3800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.239121][ T3800] netlink: 2 bytes leftover after parsing attributes in process `syz.4.188'. [ 43.278229][ T3809] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 43.285254][ T3800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 43.336184][ T3814] netlink: 25 bytes leftover after parsing attributes in process `syz.0.192'. [ 43.352592][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.382371][ T3816] loop0: detected capacity change from 0 to 512 [ 43.404062][ T3816] EXT4-fs: Ignoring removed i_version option [ 43.410205][ T3816] EXT4-fs: Ignoring removed nobh option [ 43.420904][ T3816] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 43.434104][ T3816] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.447948][ T3816] EXT4-fs (loop0): 1 truncate cleaned up [ 43.454110][ T3816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.468868][ T3082] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.488278][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.570195][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.623541][ T3828] loop2: detected capacity change from 0 to 512 [ 43.639306][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.658887][ T3828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.689827][ T3828] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.729328][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.743427][ T3828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 43.811289][ T3090] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor: path /47/file0: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=113, rec_len=0, size=2048 fake=0 [ 43.849204][ T28] bridge_slave_1: left allmulticast mode [ 43.854982][ T28] bridge_slave_1: left promiscuous mode [ 43.859003][ T3090] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor: path /47/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 43.860747][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.888318][ T3851] loop3: detected capacity change from 0 to 1024 [ 43.894947][ T3090] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /47/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 43.917639][ T28] bridge_slave_0: left allmulticast mode [ 43.918392][ T3090] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor: path /47/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 43.923365][ T28] bridge_slave_0: left promiscuous mode [ 43.945756][ T3090] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor: path /47/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 43.949539][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.972221][ T3090] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /47/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 43.979879][ T3851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.999521][ T3090] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 17: comm syz-executor: path /47/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 44.031979][ T3090] EXT4-fs error (device loop2): ext4_map_blocks:580: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 44.032381][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.163677][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.174346][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.185780][ T28] bond0 (unregistering): (slave vlan1): Releasing backup interface [ 44.195974][ T28] bond0 (unregistering): Released all slaves [ 44.213435][ T3090] bond0: (slave syz_tun): Releasing backup interface [ 44.263518][ T3085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.288397][ T3090] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.311386][ T3833] chnl_net:caif_netlink_parms(): no params data found [ 44.339067][ T28] hsr_slave_0: left promiscuous mode [ 44.354859][ T28] hsr_slave_1: left promiscuous mode [ 44.369179][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.369178][ T3874] loop0: detected capacity change from 0 to 128 [ 44.369465][ T3874] FAT-fs (loop0): Unrecognized mount option "01777777777777777777777" or missing value [ 44.376790][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.411527][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.419069][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.427486][ T3074] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 44.442172][ T28] veth1_macvtap: left promiscuous mode [ 44.447948][ T28] veth0_macvtap: left promiscuous mode [ 44.453614][ T28] veth1_vlan: left promiscuous mode [ 44.460247][ T28] veth0_vlan: left promiscuous mode [ 44.495815][ T3883] loop0: detected capacity change from 0 to 1024 [ 44.503573][ T3883] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.526750][ T3883] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 44.536302][ T3883] System zones: 0-1, 3-12 [ 44.541485][ T3883] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.571896][ T3085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.583756][ T28] team0 (unregistering): Port device team_slave_1 removed [ 44.595865][ T28] team0 (unregistering): Port device team_slave_0 removed [ 44.621599][ T3887] loop0: detected capacity change from 0 to 1024 [ 44.628724][ T3887] EXT4-fs: Ignoring removed orlov option [ 44.634514][ T3887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.647659][ T3887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.672018][ T3887] validate_nla: 4 callbacks suppressed [ 44.672034][ T3887] netlink: 'syz.0.210': attribute type 10 has an invalid length. [ 44.698130][ T3887] bond0: (slave vlan1): Enslaving as an active interface with an up link [ 44.810303][ T3833] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.817728][ T3833] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.852965][ T3833] bridge_slave_0: entered allmulticast mode [ 44.871956][ T3833] bridge_slave_0: entered promiscuous mode [ 44.894642][ T3833] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.901813][ T3833] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.913613][ T3833] bridge_slave_1: entered allmulticast mode [ 44.962309][ T3833] bridge_slave_1: entered promiscuous mode [ 44.996639][ T3833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.020811][ T3833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.081500][ T3833] team0: Port device team_slave_0 added [ 45.097780][ T3085] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.099014][ T3833] team0: Port device team_slave_1 added [ 45.156063][ T3833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.163217][ T3833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.189251][ T3833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.251887][ T3833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.258965][ T3833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.285040][ T3833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.381527][ T3833] hsr_slave_0: entered promiscuous mode [ 45.387868][ T3833] hsr_slave_1: entered promiscuous mode [ 45.393851][ T3833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.402436][ T3833] Cannot create hsr debugfs directory [ 45.418249][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.462530][ T3879] chnl_net:caif_netlink_parms(): no params data found [ 45.510735][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.579432][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.631618][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.742915][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.752503][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.761998][ T3879] bridge_slave_0: entered allmulticast mode [ 45.769353][ T3879] bridge_slave_0: entered promiscuous mode [ 45.784949][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.792084][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.799442][ T3879] bridge_slave_1: entered allmulticast mode [ 45.808150][ T3879] bridge_slave_1: entered promiscuous mode [ 45.849995][ T3968] capability: warning: `syz.4.217' uses 32-bit capabilities (legacy support in use) [ 45.862751][ T3968] loop4: detected capacity change from 0 to 512 [ 45.906089][ T3159] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 45.922042][ T3879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.931988][ T3968] loop4: detected capacity change from 0 to 512 [ 45.942306][ T3971] loop3: detected capacity change from 0 to 128 [ 45.950784][ T3971] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 45.988657][ T3974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3974 comm=syz.4.219 [ 46.015906][ T3879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.039089][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.076640][ T3928] chnl_net:caif_netlink_parms(): no params data found [ 46.111170][ T3879] team0: Port device team_slave_0 added [ 46.118004][ T3879] team0: Port device team_slave_1 added [ 46.141684][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.199212][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.211669][ T3879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.218891][ T3879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.244863][ T3879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.272720][ T3879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.279761][ T3879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.305693][ T3879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.346676][ T3928] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.353876][ T3928] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.361272][ T3928] bridge_slave_0: entered allmulticast mode [ 46.368148][ T3928] bridge_slave_0: entered promiscuous mode [ 46.390968][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.409691][ T3833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.418869][ T3833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.427981][ T3928] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.435116][ T3928] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.443073][ T3928] bridge_slave_1: entered allmulticast mode [ 46.450492][ T3928] bridge_slave_1: entered promiscuous mode [ 46.460050][ T3879] hsr_slave_0: entered promiscuous mode [ 46.468414][ T3879] hsr_slave_1: entered promiscuous mode [ 46.474508][ T3879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.482282][ T3879] Cannot create hsr debugfs directory [ 46.489726][ T3833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.513224][ T3833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.527958][ T3928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.561933][ T3928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.626790][ T28] bridge_slave_1: left allmulticast mode [ 46.632466][ T28] bridge_slave_1: left promiscuous mode [ 46.638250][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.666364][ T28] bridge_slave_0: left allmulticast mode [ 46.672046][ T28] bridge_slave_0: left promiscuous mode [ 46.677829][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.700079][ T28] bridge_slave_1: left allmulticast mode [ 46.705914][ T28] bridge_slave_1: left promiscuous mode [ 46.711713][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.743023][ T28] bridge_slave_0: left allmulticast mode [ 46.748831][ T28] bridge_slave_0: left promiscuous mode [ 46.754676][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.997387][ T3983] syz.4.222 invoked oom-killer: gfp_mask=0x402d02(GFP_NOIO|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 47.012009][ T3983] CPU: 0 PID: 3983 Comm: syz.4.222 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 47.022023][ T3983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 47.032270][ T3983] Call Trace: [ 47.035559][ T3983] [ 47.038582][ T3983] dump_stack_lvl+0xf2/0x150 [ 47.043234][ T3983] dump_stack+0x15/0x20 [ 47.047434][ T3983] dump_header+0x83/0x2d0 [ 47.051792][ T3983] oom_kill_process+0x33e/0x4c0 [ 47.056677][ T3983] out_of_memory+0x9af/0xbe0 [ 47.061330][ T3983] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 47.067463][ T3983] mem_cgroup_out_of_memory+0x13e/0x190 [ 47.073047][ T3983] try_charge_memcg+0x745/0xcd0 [ 47.077961][ T3983] ? get_page_from_freelist+0x1a30/0x1a70 [ 47.083744][ T3983] obj_cgroup_charge_pages+0xbd/0x1d0 [ 47.089646][ T3983] __memcg_kmem_charge_page+0x9d/0x170 [ 47.095275][ T3983] __alloc_pages_noprof+0x1bc/0x360 [ 47.100500][ T3983] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 47.105992][ T3983] alloc_pages_noprof+0xe1/0x100 [ 47.110956][ T3983] __vmalloc_node_range_noprof+0x719/0xef0 [ 47.116820][ T3983] kvmalloc_node_noprof+0x121/0x170 [ 47.122169][ T3983] ? ip_set_alloc+0x1f/0x30 [ 47.126701][ T3983] ip_set_alloc+0x1f/0x30 [ 47.131082][ T3983] hash_netiface_create+0x273/0x730 [ 47.136406][ T3983] ? __nla_parse+0x40/0x60 [ 47.140842][ T3983] ? __pfx_hash_netiface_create+0x10/0x10 [ 47.146678][ T3983] ip_set_create+0x359/0x8a0 [ 47.151283][ T3983] ? memchr+0x1/0x50 [ 47.155285][ T3983] ? __nla_parse+0x40/0x60 [ 47.159750][ T3983] nfnetlink_rcv_msg+0x4a9/0x570 [ 47.164799][ T3983] netlink_rcv_skb+0x12c/0x230 [ 47.169599][ T3983] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 47.175302][ T3983] nfnetlink_rcv+0x16c/0x15b0 [ 47.180044][ T3983] ? skb_release_data+0x583/0x5a0 [ 47.185093][ T3983] ? kmem_cache_free+0xd8/0x280 [ 47.189974][ T3983] ? nlmon_xmit+0x51/0x60 [ 47.194355][ T3983] ? __kfree_skb+0x102/0x150 [ 47.199003][ T3983] ? consume_skb+0x57/0x180 [ 47.203531][ T3983] ? nlmon_xmit+0x51/0x60 [ 47.207904][ T3983] ? dev_hard_start_xmit+0x3c1/0x3f0 [ 47.213299][ T3983] ? __dev_queue_xmit+0xb21/0x1e50 [ 47.218428][ T3983] ? ref_tracker_free+0x3a5/0x410 [ 47.223555][ T3983] ? __netlink_deliver_tap+0x495/0x4c0 [ 47.229117][ T3983] netlink_unicast+0x58d/0x660 [ 47.233986][ T3983] netlink_sendmsg+0x5ca/0x6e0 [ 47.238850][ T3983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.244229][ T3983] __sock_sendmsg+0x140/0x180 [ 47.248938][ T3983] ____sys_sendmsg+0x312/0x410 [ 47.253729][ T3983] __sys_sendmsg+0x1e9/0x280 [ 47.258445][ T3983] ? futex_wait+0x18e/0x1c0 [ 47.263029][ T3983] __x64_sys_sendmsg+0x46/0x50 [ 47.267843][ T3983] x64_sys_call+0xb25/0x2d70 [ 47.272491][ T3983] do_syscall_64+0xc9/0x1c0 [ 47.277156][ T3983] ? clear_bhb_loop+0x55/0xb0 [ 47.281939][ T3983] ? clear_bhb_loop+0x55/0xb0 [ 47.286652][ T3983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.292613][ T3983] RIP: 0033:0x7fd4ef353bd9 [ 47.297104][ T3983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.316757][ T3983] RSP: 002b:00007fd4ee5d5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.325275][ T3983] RAX: ffffffffffffffda RBX: 00007fd4ef4e1f60 RCX: 00007fd4ef353bd9 [ 47.333303][ T3983] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 47.341332][ T3983] RBP: 00007fd4ef3c2e60 R08: 0000000000000000 R09: 0000000000000000 [ 47.349379][ T3983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.357428][ T3983] R13: 000000000000000b R14: 00007fd4ef4e1f60 R15: 00007ffd8f162528 [ 47.365416][ T3983] [ 47.369290][ T3983] memory: usage 307200kB, limit 307200kB, failcnt 452 [ 47.372765][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.376602][ T3983] memory+swap: usage 307212kB, limit 9007199254740988kB, failcnt 0 [ 47.392612][ T3983] kmem: usage 306904kB, limit 9007199254740988kB, failcnt 0 [ 47.399942][ T3983] Memory cgroup stats for /syz4: [ 47.404602][ T3983] cache 110592 [ 47.406896][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.409587][ T3983] rss 147456 [ 47.424866][ T3983] shmem 0 [ 47.427812][ T3983] mapped_file 102400 [ 47.431774][ T3983] dirty 102400 [ 47.435183][ T3983] writeback 45056 [ 47.438829][ T3983] workingset_refault_anon 99 [ 47.443433][ T3983] workingset_refault_file 30 [ 47.448057][ T3983] swap 12288 [ 47.451322][ T3983] swapcached 45056 [ 47.455079][ T3983] pgpgin 20101 [ 47.458462][ T3983] pgpgout 20027 [ 47.461968][ T3983] pgfault 22874 [ 47.465509][ T3983] pgmajfault 58 [ 47.469054][ T3983] inactive_anon 0 [ 47.472723][ T3983] active_anon 192512 [ 47.476653][ T3983] inactive_file 0 [ 47.480294][ T3983] active_file 110592 [ 47.484194][ T3983] unevictable 0 [ 47.487692][ T3983] hierarchical_memory_limit 314572800 [ 47.493144][ T3983] hierarchical_memsw_limit 9223372036854771712 [ 47.499398][ T3983] total_cache 110592 [ 47.503301][ T3983] total_rss 147456 [ 47.507140][ T3983] total_shmem 0 [ 47.510679][ T3983] total_mapped_file 102400 [ 47.515523][ T3983] total_dirty 102400 [ 47.519459][ T3983] total_writeback 45056 [ 47.523668][ T3983] total_workingset_refault_anon 99 [ 47.528842][ T3983] total_workingset_refault_file 30 [ 47.534044][ T3983] total_swap 12288 [ 47.538440][ T3983] total_swapcached 45056 [ 47.542732][ T3983] total_pgpgin 20101 [ 47.546671][ T3983] total_pgpgout 20027 [ 47.550665][ T3983] total_pgfault 22874 [ 47.554672][ T3983] total_pgmajfault 58 [ 47.558703][ T3983] total_inactive_anon 0 [ 47.563435][ T3983] total_active_anon 192512 [ 47.567898][ T3983] total_inactive_file 0 [ 47.572093][ T3983] total_active_file 110592 [ 47.576615][ T3983] total_unevictable 0 [ 47.580615][ T3983] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.222,pid=3982,uid=0 [ 47.595467][ T3983] Memory cgroup out of memory: Killed process 3982 (syz.4.222) total-vm:82800kB, anon-rss:580kB, file-rss:10052kB, shmem-rss:0kB, UID:0 pgtables:92kB oom_score_adj:1000 [ 47.617138][ T28] bond0 (unregistering): (slave vlan1): Releasing backup interface [ 47.628721][ T28] bond0 (unregistering): Released all slaves [ 47.640390][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.650916][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.663139][ T28] bond0 (unregistering): Released all slaves [ 47.680619][ T3928] team0: Port device team_slave_0 added [ 47.694558][ T3928] team0: Port device team_slave_1 added [ 47.729228][ T3928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.736461][ T3928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.762771][ T3928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.808666][ T3928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.815833][ T3928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.841849][ T3928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.869278][ T28] hsr_slave_0: left promiscuous mode [ 47.878110][ T28] hsr_slave_1: left promiscuous mode [ 47.883933][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.891432][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.901045][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.908535][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.919583][ T28] hsr_slave_0: left promiscuous mode [ 47.925430][ T28] hsr_slave_1: left promiscuous mode [ 47.931309][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.938813][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.947994][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.955484][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.967144][ T28] veth1_macvtap: left promiscuous mode [ 47.972773][ T28] veth0_macvtap: left promiscuous mode [ 47.978453][ T28] veth1_vlan: left promiscuous mode [ 47.983727][ T28] veth0_vlan: left promiscuous mode [ 47.990042][ T28] veth1_macvtap: left promiscuous mode [ 47.995613][ T28] veth0_macvtap: left promiscuous mode [ 48.001227][ T28] veth1_vlan: left promiscuous mode [ 48.006538][ T28] veth0_vlan: left promiscuous mode [ 48.150920][ T28] team0 (unregistering): Port device team_slave_1 removed [ 48.163502][ T28] team0 (unregistering): Port device team_slave_0 removed [ 48.240883][ T28] team0 (unregistering): Port device team_slave_1 removed [ 48.253115][ T28] team0 (unregistering): Port device team_slave_0 removed [ 48.337531][ T3928] hsr_slave_0: entered promiscuous mode [ 48.348009][ T3928] hsr_slave_1: entered promiscuous mode [ 48.479552][ T3833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.528481][ T3833] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.552396][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.552448][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.566342][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.586331][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.605042][ T4045] loop3: detected capacity change from 0 to 512 [ 48.628633][ T3833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.639207][ T3833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.665275][ T3074] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 48.688964][ T4045] loop3: detected capacity change from 0 to 512 [ 48.750578][ T3879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.773255][ T4057] loop3: detected capacity change from 0 to 128 [ 48.789406][ T3879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.795121][ T4057] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 48.808621][ T3879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.830543][ T3879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.855018][ T3833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.984408][ T3879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.014312][ T4064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 49.066340][ T3879] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.132899][ T3136] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.140137][ T3136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.168703][ T3136] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.175857][ T3136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.197857][ T3833] veth0_vlan: entered promiscuous mode [ 49.215541][ T3833] veth1_vlan: entered promiscuous mode [ 49.254948][ T3928] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.268857][ T3833] veth0_macvtap: entered promiscuous mode [ 49.281811][ T3928] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.300784][ T3928] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.331250][ T3928] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.355740][ T3833] veth1_macvtap: entered promiscuous mode [ 49.394659][ T3833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.405392][ T3833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.415280][ T3833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.425781][ T3833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.461350][ T3833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.473234][ T3833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.483856][ T3833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.493739][ T3833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.504384][ T3833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.518328][ T3833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.565517][ T3879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.581488][ T3928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.596907][ T3833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.605807][ T3833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.614639][ T3833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.623413][ T3833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.670590][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 49.670607][ T29] audit: type=1400 audit(1720958872.324:336): avc: denied { mount } for pid=3833 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.673575][ T3928] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.738934][ T3173] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.746141][ T3173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.781972][ T4134] loop1: detected capacity change from 0 to 128 [ 49.787448][ T3928] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 49.798652][ T3928] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.815846][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.822989][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.856143][ T3074] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 49.880453][ T4134] netlink: 'syz.1.198': attribute type 21 has an invalid length. [ 49.924046][ T3879] veth0_vlan: entered promiscuous mode [ 49.944222][ T3879] veth1_vlan: entered promiscuous mode [ 49.986859][ T3928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.026038][ T3879] veth0_macvtap: entered promiscuous mode [ 50.059252][ T3879] veth1_macvtap: entered promiscuous mode [ 50.077378][ T29] audit: type=1400 audit(1720958872.734:337): avc: denied { mount } for pid=4160 comm="syz.1.234" name="/" dev="hugetlbfs" ino=7335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 50.115318][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.125974][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.135940][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.146463][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.156355][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.166979][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.188634][ T3879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.207482][ T4161] loop1: detected capacity change from 0 to 512 [ 50.212925][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.224380][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.234306][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.244924][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.245032][ T29] audit: type=1400 audit(1720958872.904:338): avc: denied { mounton } for pid=4160 comm="syz.1.234" path="/2/file0" dev="hugetlbfs" ino=7335 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 50.254766][ T3879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.254786][ T3879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.286332][ T3879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.329532][ T4161] loop1: detected capacity change from 0 to 512 [ 50.370756][ T3879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.379640][ T3879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.388456][ T3879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.397247][ T3879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.407182][ T4184] loop4: detected capacity change from 0 to 128 [ 50.415301][ T4184] FAT-fs (loop4): Unrecognized mount option "01777777777777777777777" or missing value [ 50.436436][ T3074] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 50.506077][ T29] audit: type=1400 audit(1720958873.154:339): avc: denied { unmount } for pid=3833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 50.540990][ T3928] veth0_vlan: entered promiscuous mode [ 50.571011][ T3928] veth1_vlan: entered promiscuous mode [ 50.614385][ T3928] veth0_macvtap: entered promiscuous mode [ 50.640803][ T4196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.237'. [ 50.711725][ T3928] veth1_macvtap: entered promiscuous mode [ 50.753141][ T3928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.764315][ T3928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.774268][ T3928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.784922][ T3928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.794819][ T3928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.805325][ T3928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.815242][ T3928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 50.827075][ T3928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.860374][ T3928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.893397][ T3928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.903971][ T3928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.913986][ T3928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.924484][ T3928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.934310][ T3928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.944848][ T3928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.955094][ T3928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 50.965718][ T3928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 50.980223][ T4223] loop4: detected capacity change from 0 to 128 [ 51.001071][ T3928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.011393][ T3928] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.020340][ T3928] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.029230][ T3928] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.038028][ T3928] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.087898][ T3074] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.088739][ T4223] netlink: 'syz.4.240': attribute type 21 has an invalid length. [ 51.176487][ T4235] loop0: detected capacity change from 0 to 128 [ 51.244511][ T29] audit: type=1400 audit(1720958873.844:340): avc: denied { create } for pid=4234 comm="syz.0.216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 51.286881][ T4243] FAULT_INJECTION: forcing a failure. [ 51.286881][ T4243] name failslab, interval 1, probability 0, space 0, times 0 [ 51.299771][ T4243] CPU: 1 PID: 4243 Comm: syz.0.242 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 51.309775][ T4243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 51.319876][ T4243] Call Trace: [ 51.323249][ T4243] [ 51.326270][ T4243] dump_stack_lvl+0xf2/0x150 [ 51.330924][ T4243] dump_stack+0x15/0x20 [ 51.335174][ T4243] should_fail_ex+0x229/0x230 [ 51.339939][ T4243] ? __alloc_skb+0x10b/0x300 [ 51.344562][ T4243] __should_failslab+0x92/0xa0 [ 51.349504][ T4243] should_failslab+0x9/0x20 [ 51.354059][ T4243] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 51.359960][ T4243] __alloc_skb+0x10b/0x300 [ 51.364442][ T4243] netlink_alloc_large_skb+0xad/0xe0 [ 51.369771][ T4243] netlink_sendmsg+0x3b4/0x6e0 [ 51.374631][ T4243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 51.380002][ T4243] __sock_sendmsg+0x140/0x180 [ 51.384709][ T4243] ____sys_sendmsg+0x312/0x410 [ 51.389604][ T4243] __sys_sendmsg+0x1e9/0x280 [ 51.394241][ T4243] __x64_sys_sendmsg+0x46/0x50 [ 51.399110][ T4243] x64_sys_call+0xb25/0x2d70 [ 51.403730][ T4243] do_syscall_64+0xc9/0x1c0 [ 51.408288][ T4243] ? clear_bhb_loop+0x55/0xb0 [ 51.413000][ T4243] ? clear_bhb_loop+0x55/0xb0 [ 51.417752][ T4243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.423755][ T4243] RIP: 0033:0x7f3833a96bd9 [ 51.428183][ T4243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.447837][ T4243] RSP: 002b:00007f3832d18048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.456343][ T4243] RAX: ffffffffffffffda RBX: 00007f3833c24f60 RCX: 00007f3833a96bd9 [ 51.464380][ T4243] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000003 [ 51.464399][ T4243] RBP: 00007f3832d180a0 R08: 0000000000000000 R09: 0000000000000000 [ 51.464414][ T4243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.464427][ T4243] R13: 000000000000000b R14: 00007f3833c24f60 R15: 00007ffff2ce23d8 [ 51.496386][ T4243] [ 51.570851][ T4249] syzkaller0: entered promiscuous mode [ 51.576507][ T4249] syzkaller0: entered allmulticast mode [ 51.598190][ T4249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 51.608660][ T4254] loop3: detected capacity change from 0 to 128 [ 51.619377][ T4254] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 51.638606][ T4251] loop1: detected capacity change from 0 to 512 [ 51.669663][ T29] audit: type=1400 audit(1720958874.324:341): avc: denied { getopt } for pid=4256 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.686958][ T4259] loop3: detected capacity change from 0 to 512 [ 51.701036][ T3159] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.721480][ T4259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.736257][ T4251] loop1: detected capacity change from 0 to 512 [ 51.744381][ T4259] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.759500][ T4268] loop2: detected capacity change from 0 to 128 [ 51.766088][ T29] audit: type=1400 audit(1720958874.414:342): avc: denied { setattr } for pid=4258 comm="syz.3.247" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.769472][ T4259] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 3: comm syz.3.247: bad entry in directory: directory entry overrun - offset=16444, inode=113, rec_len=26368, size=2048 fake=0 [ 51.807237][ T29] audit: type=1400 audit(1720958874.424:343): avc: denied { create } for pid=4258 comm="syz.3.247" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.828278][ T29] audit: type=1400 audit(1720958874.424:344): avc: denied { read append open } for pid=4258 comm="syz.3.247" path="/49/bus/memory.events" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 51.855436][ T3159] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.891813][ T4270] loop1: detected capacity change from 0 to 128 [ 51.892904][ T3083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.925680][ T29] audit: type=1400 audit(1720958874.584:345): avc: denied { setopt } for pid=4267 comm="syz.2.250" lport=52428 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 51.954688][ T3074] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 51.958570][ T4270] netlink: 'syz.1.251': attribute type 21 has an invalid length. [ 51.991580][ T4273] loop2: detected capacity change from 0 to 512 [ 51.998383][ T4273] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 52.108167][ T4280] netlink: 20 bytes leftover after parsing attributes in process `syz.4.255'. [ 52.193723][ T4290] loop3: detected capacity change from 0 to 128 [ 52.207080][ T4290] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 52.225385][ T4273] loop2: detected capacity change from 0 to 512 [ 52.285774][ T4273] tmpfs: Unsupported parameter 'huge' [ 52.287654][ T3074] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.351112][ T4297] loop3: detected capacity change from 0 to 128 [ 52.366577][ T4297] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 52.487861][ T4304] loop3: detected capacity change from 0 to 512 [ 52.547375][ T3074] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 52.560795][ T4304] loop3: detected capacity change from 0 to 512 [ 52.602672][ T4312] loop3: detected capacity change from 0 to 128 [ 52.672483][ T4312] netlink: 'syz.3.264': attribute type 21 has an invalid length. [ 53.037620][ T4325] loop1: detected capacity change from 0 to 128 [ 53.044248][ T4325] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 53.149896][ T4332] No such timeout policy "syz1" [ 53.155665][ T4332] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 53.160063][ T4333] loop1: detected capacity change from 0 to 128 [ 53.168185][ T4332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.271'. [ 53.171842][ T4333] FAT-fs (loop1): Unrecognized mount option "01777777777777777777777" or missing value [ 53.180274][ T4332] netlink: 20 bytes leftover after parsing attributes in process `syz.4.271'. [ 53.215048][ T3074] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 53.264334][ T4339] loop4: detected capacity change from 0 to 512 [ 53.295573][ T3074] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 53.299206][ T4339] loop4: detected capacity change from 0 to 512 [ 53.306752][ T3074] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 53.320829][ T3074] Buffer I/O error on dev loop4, logical block 0, async page read [ 53.370624][ T4345] loop4: detected capacity change from 0 to 128 [ 53.391021][ T4345] netlink: 'syz.4.276': attribute type 21 has an invalid length. [ 53.420370][ T4349] usb usb5: usbfs: process 4349 (syz.1.278) did not claim interface 0 before use [ 53.583383][ T4369] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 53.646155][ T4372] loop4: detected capacity change from 0 to 512 [ 53.705593][ T3074] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 53.719421][ T4372] loop4: detected capacity change from 0 to 512 [ 53.796035][ T4376] loop3: detected capacity change from 0 to 128 [ 53.803271][ T4376] FAT-fs (loop3): Unrecognized mount option "01777777777777777777777" or missing value [ 53.936837][ T4387] loop4: detected capacity change from 0 to 128 [ 53.970062][ T4389] loop3: detected capacity change from 0 to 1024 [ 53.978138][ T4389] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.001368][ T4389] EXT4-fs warning (device loop3): ext4_enable_quotas:7078: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.002378][ T4387] netlink: 'syz.4.291': attribute type 21 has an invalid length. [ 54.017455][ T4389] EXT4-fs (loop3): mount failed [ 54.192689][ T4393] loop4: detected capacity change from 0 to 4096 [ 54.228315][ T4393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.267005][ T4405] loop3: detected capacity change from 0 to 256 [ 54.301728][ T3087] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.396842][ T4407] loop0: detected capacity change from 0 to 512 [ 54.407132][ T4411] loop4: detected capacity change from 0 to 256 [ 54.455603][ T4407] loop0: detected capacity change from 0 to 512 [ 54.563273][ T4420] loop2: detected capacity change from 0 to 1024 [ 54.576471][ T4420] EXT4-fs: Ignoring removed orlov option [ 54.582248][ T4420] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.586274][ T4422] loop0: detected capacity change from 0 to 128 [ 54.616801][ T4422] netlink: 'syz.0.303': attribute type 21 has an invalid length. [ 54.639797][ T4420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.784484][ T4427] syzkaller0: entered promiscuous mode [ 54.790065][ T4427] syzkaller0: entered allmulticast mode [ 54.821271][ T4431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.304'. [ 55.182687][ T4437] netlink: 48 bytes leftover after parsing attributes in process `syz.4.308'. [ 55.206383][ T4437] xt_socket: unknown flags 0x3c [ 55.246541][ T4440] FAULT_INJECTION: forcing a failure. [ 55.246541][ T4440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.259820][ T4440] CPU: 1 PID: 4440 Comm: syz.0.309 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 55.269928][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 55.280035][ T4440] Call Trace: [ 55.283340][ T4440] [ 55.286300][ T4440] dump_stack_lvl+0xf2/0x150 [ 55.291039][ T4440] dump_stack+0x15/0x20 [ 55.295234][ T4440] should_fail_ex+0x229/0x230 [ 55.299938][ T4440] should_fail+0xb/0x10 [ 55.304112][ T4440] should_fail_usercopy+0x1a/0x20 [ 55.309228][ T4440] _copy_from_user+0x1e/0xd0 [ 55.313841][ T4440] lo_ioctl+0x31b/0x1330 [ 55.318156][ T4440] ? __rcu_read_unlock+0x4e/0x70 [ 55.323182][ T4440] ? avc_has_extended_perms+0x60b/0x820 [ 55.328798][ T4440] ? blkdev_common_ioctl+0xa96/0x1970 [ 55.334204][ T4440] ? do_vfs_ioctl+0x99e/0x1560 [ 55.338998][ T4440] ? selinux_file_ioctl+0x2f7/0x380 [ 55.344224][ T4440] ? __pfx_lo_ioctl+0x10/0x10 [ 55.348924][ T4440] blkdev_ioctl+0x35f/0x450 [ 55.353494][ T4440] ? __pfx_blkdev_ioctl+0x10/0x10 [ 55.358551][ T4440] __se_sys_ioctl+0xd3/0x150 [ 55.363197][ T4440] __x64_sys_ioctl+0x43/0x50 [ 55.367854][ T4440] x64_sys_call+0x1581/0x2d70 [ 55.372621][ T4440] do_syscall_64+0xc9/0x1c0 [ 55.377229][ T4440] ? clear_bhb_loop+0x55/0xb0 [ 55.381969][ T4440] ? clear_bhb_loop+0x55/0xb0 [ 55.386675][ T4440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.392740][ T4440] RIP: 0033:0x7f3833a96bd9 [ 55.397169][ T4440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.416811][ T4440] RSP: 002b:00007f3832d18048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 55.425247][ T4440] RAX: ffffffffffffffda RBX: 00007f3833c24f60 RCX: 00007f3833a96bd9 [ 55.433287][ T4440] RDX: 0000000020000100 RSI: 0000000000004c0a RDI: 0000000000000003 [ 55.441336][ T4440] RBP: 00007f3832d180a0 R08: 0000000000000000 R09: 0000000000000000 [ 55.449319][ T4440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.457391][ T4440] R13: 000000000000000b R14: 00007f3833c24f60 R15: 00007ffff2ce23d8 [ 55.465451][ T4440] [ 55.559883][ T4444] FAULT_INJECTION: forcing a failure. [ 55.559883][ T4444] name failslab, interval 1, probability 0, space 0, times 0 [ 55.572584][ T4444] CPU: 0 PID: 4444 Comm: syz.4.312 Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 55.582789][ T4444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 55.592856][ T4444] Call Trace: [ 55.596190][ T4444] [ 55.599145][ T4444] dump_stack_lvl+0xf2/0x150 [ 55.603829][ T4444] dump_stack+0x15/0x20 [ 55.608019][ T4444] should_fail_ex+0x229/0x230 [ 55.612777][ T4444] ? alloc_pipe_info+0xb0/0x360 [ 55.617676][ T4444] __should_failslab+0x92/0xa0 [ 55.622487][ T4444] should_failslab+0x9/0x20 [ 55.627061][ T4444] kmalloc_trace_noprof+0x4b/0x2a0 [ 55.632404][ T4444] ? _parse_integer+0x27/0x30 [ 55.637111][ T4444] alloc_pipe_info+0xb0/0x360 [ 55.641869][ T4444] splice_direct_to_actor+0x615/0x670 [ 55.647284][ T4444] ? kstrtouint_from_user+0xb0/0xe0 [ 55.652665][ T4444] ? __pfx_direct_splice_actor+0x10/0x10 [ 55.658383][ T4444] ? avc_policy_seqno+0x15/0x20 [ 55.663312][ T4444] ? selinux_file_permission+0x22c/0x360 [ 55.669084][ T4444] do_splice_direct+0xd7/0x150 [ 55.673868][ T4444] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 55.679846][ T4444] do_sendfile+0x3ab/0x950 [ 55.684285][ T4444] __x64_sys_sendfile64+0x110/0x150 [ 55.689520][ T4444] x64_sys_call+0x2c9f/0x2d70 [ 55.694243][ T4444] do_syscall_64+0xc9/0x1c0 [ 55.698776][ T4444] ? clear_bhb_loop+0x55/0xb0 [ 55.703571][ T4444] ? clear_bhb_loop+0x55/0xb0 [ 55.708300][ T4444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.714219][ T4444] RIP: 0033:0x7fd4ef353bd9 [ 55.718662][ T4444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.738336][ T4444] RSP: 002b:00007fd4ee5d5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 55.746819][ T4444] RAX: ffffffffffffffda RBX: 00007fd4ef4e1f60 RCX: 00007fd4ef353bd9 [ 55.754809][ T4444] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 55.762862][ T4444] RBP: 00007fd4ee5d50a0 R08: 0000000000000000 R09: 0000000000000000 [ 55.770866][ T4444] R10: 0000000024002de8 R11: 0000000000000246 R12: 0000000000000001 [ 55.778866][ T4444] R13: 000000000000000b R14: 00007fd4ef4e1f60 R15: 00007ffd8f162528 [ 55.786884][ T4444] [ 55.831552][ T4463] loop1: detected capacity change from 0 to 128 [ 55.840735][ T3159] ================================================================== [ 55.848871][ T3159] BUG: KCSAN: data-race in generic_fillattr / shmem_mknod [ 55.856115][ T3159] [ 55.856125][ T3159] write to 0xffff888103e08cb0 of 8 bytes by task 3074 on cpu 1: [ 55.856145][ T3159] shmem_mknod+0x136/0x180 [ 55.856183][ T3159] shmem_create+0x34/0x40 [ 55.856213][ T3159] path_openat+0xdbc/0x1fa0 [ 55.856239][ T3159] do_filp_open+0xf7/0x200 [ 55.856269][ T3159] do_sys_openat2+0xab/0x120 [ 55.856296][ T3159] __x64_sys_openat+0xf3/0x120 [ 55.856323][ T3159] x64_sys_call+0x1057/0x2d70 [ 55.856354][ T3159] do_syscall_64+0xc9/0x1c0 [ 55.856395][ T3159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.856428][ T3159] [ 55.856433][ T3159] read to 0xffff888103e08cb0 of 8 bytes by task 3159 on cpu 0: [ 55.856448][ T3159] generic_fillattr+0x1a6/0x2f0 [ 55.856468][ T3159] shmem_getattr+0x17b/0x200 [ 55.856493][ T3159] vfs_getattr+0x19b/0x1e0 [ 55.856512][ T3159] vfs_statx+0x140/0x320 [ 55.856530][ T3159] vfs_fstatat+0xcd/0x100 [ 55.856550][ T3159] __se_sys_newfstatat+0x58/0x260 [ 55.856577][ T3159] __x64_sys_newfstatat+0x55/0x70 [ 55.856602][ T3159] x64_sys_call+0x1451/0x2d70 [ 55.856632][ T3159] do_syscall_64+0xc9/0x1c0 [ 55.856669][ T3159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.856703][ T3159] [ 55.856707][ T3159] value changed: 0x000000001ce87e26 -> 0x000000001d8114a6 [ 55.856720][ T3159] [ 55.856724][ T3159] Reported by Kernel Concurrency Sanitizer on: [ 55.856733][ T3159] CPU: 0 PID: 3159 Comm: udevd Not tainted 6.10.0-rc7-syzkaller-00266-g4d145e3f830b #0 [ 55.856760][ T3159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 55.856772][ T3159] ================================================================== [ 55.875989][ T4463] netlink: 'syz.1.316': attribute type 21 has an invalid length. [ 55.918312][ T3879] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.925221][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.949438][ T4457] loop3: detected capacity change from 0 to 512 [ 55.999603][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.023061][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 56.023089][ T29] audit: type=1326 audit(1720958878.664:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4454 comm="syz.0.314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3833a96bd9 code=0x0 [ 56.077919][ T4457] loop3: detected capacity change from 0 to 512 [ 56.208291][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.242231][ T4449] netlink: 'syz.3.311': attribute type 4 has an invalid length. [ 56.301122][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.421266][ T11] bridge_slave_1: left allmulticast mode [ 56.427076][ T11] bridge_slave_1: left promiscuous mode [ 56.433257][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.444351][ T11] bridge_slave_0: left allmulticast mode [ 56.450157][ T11] bridge_slave_0: left promiscuous mode [ 56.456881][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.658530][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.672993][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.684441][ T11] bond0 (unregistering): Released all slaves [ 56.780037][ T11] hsr_slave_0: left promiscuous mode [ 56.794978][ T11] hsr_slave_1: left promiscuous mode [ 56.804276][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.811859][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.836242][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.843865][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.854045][ T11] veth1_macvtap: left promiscuous mode [ 56.859844][ T11] veth0_macvtap: left promiscuous mode [ 56.865510][ T11] veth1_vlan: left promiscuous mode [ 56.870768][ T11] veth0_vlan: left promiscuous mode [ 56.994256][ T11] team0 (unregistering): Port device team_slave_1 removed [ 57.005015][ T11] team0 (unregistering): Port device team_slave_0 removed