last executing test programs: 2m3.114258118s ago: executing program 1 (id=1276): r0 = semget(0x0, 0x3, 0x48) semop(r0, &(0x7f00000002c0)=[{0x3, 0x1, 0x1000}, {0x4, 0x9, 0x1800}, {0x4, 0x9}, {0x2, 0x8001}, {0x1, 0x8000, 0x800}, {0x3, 0x0, 0x1000}, {0x0, 0x0, 0x800}, {0x0, 0x1, 0x1800}, {0x3, 0x2, 0x800}, {0x3, 0x5}], 0xa) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000091000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf09000000000000550901000000000095000000000000000700000008000000bf910000000000eeb702000002000000850000002a000000b70000000000000095"], &(0x7f0000000680)='syzkaller\x00', 0x6, 0x1016, &(0x7f0000001880)=""/4118, 0x41100}, 0x94) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x9}, 0xc) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r2, 0x1f, 0x0, 0x40, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0]}, 0x40) 2m2.895121661s ago: executing program 1 (id=1277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f00000000c0)=@ethtool_channels={0x3d, 0x3, 0x5, 0x4, 0x9, 0x1, 0x1, 0x7}}) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10140004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000980)={0xe0c, 0x1, 0x5, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0x7}, 0x4, 0x53, 0x2, 0x4, 0x1f, 'syz0\x00', "a5487f29cee1a08f4e9283188770c142542cb984be32e710bdeaa93d2a1ada7e", "3ae96e4899adb5aa2872a6ffe67d4df2cb47008fc9d00b27aec5be9559e6b401", [{0x8, 0x7, {0x2, 0xa29}}, {0xf, 0x9, {0x1, 0x3}}, {0x80, 0x0, {0x0, 0x3f}}, {0x4, 0x2, {0x1, 0xff}}, {0x40, 0x5, {0x1, 0x80}}, {0x200, 0x7f, {0x3, 0x81}}, {0x49cf, 0x0, {0x0, 0x8}}, {0x4, 0x3, {0x3, 0x1}}, {0x0, 0xfffa, {0x0, 0x40}}, {0x5, 0x1ff, {0x0, 0x10000}}, {0x3, 0x2, {0x2}}, {0x7fff, 0x9, {0x2, 0x4}}, {0x0, 0x7, {0x0, 0x4}}, {0x2, 0xfffd, {0x3, 0xffff}}, {0xbe9, 0x0, {0x2}}, {0x8, 0x1, {0x1, 0x5}}, {0xc, 0x401, {0x2, 0x489}}, {0x7, 0xdce3, {0x1, 0x3}}, {0x4, 0x2, {0x2, 0x6}}, {0x29, 0x200, {0x1, 0x6}}, {0xa94, 0x65}, {0x8, 0x1000, {0x3, 0x52}}, {0x4, 0xdec0, {0x0, 0xf840}}, {0xffff, 0x9, {0x2, 0x1}}, {0x6, 0x9e, {0x3, 0xa}}, {0x5, 0x1, {0x1, 0x5}}, {0x5a9d, 0x7f, {0x2, 0x10100000}}, {0x0, 0x5, {0x0, 0x1}}, {0x40, 0x412, {0x0, 0x4}}, {0x7ff, 0xffff, {0x1, 0xffffffff}}, {0x5, 0x8000, {0x3, 0x4}}, {0x1, 0x1, {0x0, 0x2}}, {0x8, 0x2, {0x0, 0x4d}}, {0x23, 0x7, {0x1, 0x15a1}}, {0x3, 0x101, {0x1, 0x3}}, {0x7ca, 0x5, {0x1, 0x9}}, {0x9, 0x6b5, {0x1, 0x10000}}, {0x5, 0xe000, {0x3, 0x9}}, {0x3d, 0x10, {0x3}}, {0x9, 0x5, {0x2, 0x8001}}]}}}, {{0x254, 0x1, {{0x3, 0x400}, 0xeb, 0x9, 0xffff, 0x9, 0x28, 'syz1\x00', "eb96190e61d6898462f8cf9b5aa94443f5b50a47909c63b699b73f1b52247772", "719336375da79525c5f3c4b1b681a2d4539003fdac4f299a6d4e3d542c0df57e", [{0x3, 0xfff, {0x0, 0x7fff}}, {0x5, 0x9, {0x1, 0x6}}, {0x5, 0x3, {0x1, 0x7}}, {0x3, 0xfff8, {0x3, 0x80}}, {0x8000, 0x28, {0x1}}, {0x7, 0x8, {0x1, 0xfff}}, {0x9, 0x6, {0x0, 0xffff}}, {0x8, 0x4, {0x3, 0x14c}}, {0x8a, 0x1, {0x1, 0x2}}, {0x5, 0x1, {0x0, 0x7}}, {0x9, 0xf, {0x3}}, {0x1c00, 0x40, {0x3, 0x4}}, {0x6, 0x9ca, {0x3, 0x7}}, {0x5522, 0x0, {0x2, 0xa}}, {0x9, 0xaa17, {0x0, 0x4}}, {0x2, 0x1, {0x2, 0x3}}, {0x7, 0x7, {0x0, 0x5}}, {0x7ff, 0x0, {0x2, 0x542}}, {0x8, 0x6, {0x0, 0x50d6ecb6}}, {0x2, 0xc, {0x2, 0x8}}, {0x81, 0x6, {0x0, 0x6}}, {0x2, 0x8, {0x1, 0x7}}, {0x7fff, 0xfff7}, {0x8, 0x0, {0x1}}, {0x400, 0xfffe, {0x3, 0x10000}}, {0x5, 0x0, {0x1, 0x1}}, {0x3a, 0x6, {0x2, 0x400}}, {0x0, 0xfffd, {0x1, 0x7}}, {0x3, 0xc, {0x1, 0x7}}, {0x7fff, 0x6, {0x3}}, {0x3, 0x6, {0x3, 0x8}}, {0xae89, 0xf, {0x0, 0x8}}, {0x9fb7, 0x148b, {0x3, 0x4}}, {0x9, 0x2c9, {0x2, 0x81}}, {0x0, 0x92, {0x3, 0x5}}, {0x4, 0xc02f, {0x3, 0x80000001}}, {0x2, 0x6, {0x3, 0x4}}, {0xfbff, 0x3, {0x3, 0x9}}, {0x7f, 0x1, {0x3, 0x23e678ac}}, {0x0, 0x0, {0x0, 0x9}}]}}}, {{0x254, 0x1, {{0x0, 0xbff}, 0x3, 0xff, 0x6, 0x8, 0x14, 'syz1\x00', "8a7ae71f63d74c1cf5fafca8050e33d1fe0b50d812791326c3f4b2cd43b487d9", "d53facef145cc2e9f972ca169eb8eec2713fac2c95c0baf1dcd8494a5b75d6fd", [{0x5, 0x0, {0x2, 0xe531}}, {0x1, 0x7, {0x0, 0x4}}, {0x6, 0x0, {0x3, 0x6}}, {0x6, 0x1, {0x3, 0x1}}, {0x7, 0x5, {0x1, 0x94e}}, {0x5, 0x3, {0x2, 0x1}}, {0x8, 0x8, {0x0, 0x4}}, {0x3a47, 0x9, {0x3, 0x400}}, {0x3, 0x3ff, {0x1, 0x1ff}}, {0x9f, 0x7, {0x2, 0x6}}, {0xd, 0xf658, {0x0, 0x81}}, {0x1, 0x4, {0x3, 0xfffff10d}}, {0x400, 0xa, {0x3, 0xb3a}}, {0x4, 0x2, {0x0, 0x401}}, {0x0, 0x7, {0x0, 0x5}}, {0x6, 0x4, {0x3, 0x1ff}}, {0x2, 0x0, {0x0, 0x3ff}}, {0x101, 0x1ff, {0x2, 0x6}}, {0x5, 0x8, {0x2, 0x8}}, {0x7, 0x4000, {0x0, 0x56}}, {0xe, 0x7, {0x0, 0x400}}, {0xc, 0x7, {0x2, 0x8001}}, {0xfff, 0x5, {0x3, 0x2}}, {0x5, 0x8, {0x3, 0x7}}, {0xfe1, 0x4, {0x3, 0x2e3}}, {0x7fff, 0x7, {0x1, 0x5}}, {0xf55b, 0xff08, {0x3, 0x200}}, {0x5, 0xe5, {0x3, 0x9}}, {0x66ab, 0x9, {0x0, 0x10001}}, {0x1, 0xece2, {0x2}}, {0x81, 0x200, {0x2, 0x5}}, {0x5, 0x6e8, {0x0, 0x7fffffff}}, {0x3ff, 0xffff, {0x3, 0xffc2}}, {0x0, 0x116, {0x1, 0xd8ed6e2}}, {0x0, 0x5, {0x3}}, {0x4, 0x0, {0x0, 0xfff}}, {0x7fff, 0x1, {0x2, 0x40}}, {0x8, 0x7, {0x0, 0x4}}, {0x5, 0x2, {0x0, 0x5}}, {0x9, 0x10, {0x3, 0xffffff80}}]}}}, {{0x254, 0x1, {{0x0, 0x10001}, 0x9, 0x40, 0x8, 0x4, 0x1e, 'syz0\x00', "e35ebd60b41f878d1b5be5ce51cb186243208de5d1ff6d7eff542fe93e271cd5", "e25d28342c33f7e0f60396cff3b56d5ed1a4c06fd66b15f1f3453d4d4b584384", [{0x6, 0x3, {0x1, 0x6}}, {0x4, 0x8, {0x0, 0x6}}, {0x2000, 0x9, {0x1, 0x2}}, {0x1ff, 0xa6b, {0x2, 0xb}}, {0xff, 0x80, {0x2, 0xfff}}, {0x36, 0x100, {0x2, 0xf5e1}}, {0x3ff, 0x4, {0x2, 0x6}}, {0x1, 0x401, {0x3, 0x1ff}}, {0xb, 0x10}, {0xf60c, 0xc6, {0x2, 0xfffffff6}}, {0x91, 0x9, {0x1, 0x1ff}}, {0x81, 0xe, {0x0, 0xdb}}, {0xfffc, 0x101, {0x1, 0x3}}, {0x8, 0x2, {0x1, 0x5}}, {0x8, 0x9, {0x1, 0x4}}, {0x40, 0x5, {0x2, 0xc}}, {0x1, 0x4, {0x2, 0x8}}, {0x0, 0x9, {0x1, 0x7fffffff}}, {0x4, 0xc7, {0x2, 0x9}}, {0x400, 0xb, {0x0, 0x7ff}}, {0x2, 0x1b8, {0x1, 0x6}}, {0x100, 0x800, {0x2, 0xf7}}, {0x4, 0x8, {0x3, 0x1}}, {0x3b, 0x1, {0x1, 0x400000}}, {0x7, 0x8, {0x2, 0x8}}, {0x9, 0x4, {0x1, 0x8}}, {0x5, 0x6, {0x1, 0x3}}, {0x4, 0x8, {0x1, 0xffffffff}}, {0x14a, 0x2a, {0x3, 0x80000000}}, {0x2, 0x1000, {0x3, 0xfffffffb}}, {0xd, 0xfff, {0x2, 0x101}}, {0x400, 0x1, {0x2, 0x10000}}, {0xc, 0x10, {0x1, 0x100000}}, {0x4, 0xe2, {0x2, 0x1}}, {0xf, 0x1, {0x0, 0x9}}, {0x9, 0x809, {0x1, 0x1}}, {0x0, 0x5, {0x3, 0xfffffffc}}, {0x9, 0x5, {0x0, 0xffffffff}}, {0x9, 0xd3d6, {0x2, 0x8}}, {0x1, 0x8001, {0x1, 0x10001}}]}}}, {{0x254, 0x1, {{0x0, 0x1}, 0x41, 0x90, 0x6, 0xfd02, 0xa, 'syz1\x00', "04fed39b103cada16971d2dc5d089df9447c295a299ba23e5a1c4ecf2419c9b6", "c74927d2cbd586d7971403e060251d2c8a4b689a91a4c3c6dcb34ade531460ff", [{0x800, 0x80, {0x3}}, {0x3, 0x8, {0x0, 0x961}}, {0x2, 0x200, {0x1, 0x6}}, {0x8, 0x100, {0x3, 0x7ff}}, {0x0, 0x1, {0x3, 0x80000001}}, {0x2, 0x3, {0x3, 0x800}}, {0x1, 0x4, {0x3, 0x80000001}}, {0x9c6b, 0xb, {0x3, 0x118}}, {0xc725, 0x5}, {0x9, 0x4, {0x1, 0x7}}, {0x0, 0x7, {0x0, 0x1}}, {0x5, 0x7fff, {0x3, 0x6}}, {0x5, 0x3, {0x2}}, {0x9a, 0xb0, {0x0, 0x2807}}, {0x7, 0xf7fc, {0x1, 0xffc0}}, {0x7, 0x0, {0x1, 0x1000000}}, {0x6, 0x6, {0x0, 0x4}}, {0xfff, 0x9, {0x2, 0x1}}, {0x8, 0xa, {0x0, 0x9}}, {0x1, 0x1000, {0x2, 0xfd3}}, {0x2, 0x9, {0x1, 0xfbf6}}, {0x7ff, 0x6, {0x3, 0x4}}, {0x7, 0x6, {0x2, 0x6}}, {0x7, 0x2, {0x1, 0xd1f}}, {0x101, 0x0, {0x1, 0x194}}, {0x10, 0x3, {0x0, 0x7}}, {0x8, 0x6, {0x1, 0xfffffffe}}, {0x4, 0x5, {0x2, 0xfffffff7}}, {0xfffa, 0x5d8c, {0x2, 0x7ff}}, {0xe61, 0x80, {0x3, 0x3}}, {0x1890, 0x2, {0x1, 0xf}}, {0x8001, 0xf, {0x3, 0x1}}, {0x10, 0x22f, {0x3, 0x7}}, {0x9, 0x6, {0x3, 0x2}}, {0x2, 0x5, {0x0, 0xcfe1}}, {0x5, 0x0, {0x0, 0x4}}, {0x5, 0x3ff, {0x3, 0x5}}, {0x8, 0x4, {0x0, 0x2}}, {0x5, 0x81, {0x2, 0xfffff800}}, {0x0, 0x10, {0x0, 0x40b5}}]}}}, {{0x254, 0x1, {{0x2, 0xffff0001}, 0x1, 0x0, 0x9, 0x4, 0x6, 'syz0\x00', "476a338a5ff31560248c4db4ba62b08ba1833094dd5b6713ee8c8188bd016b4c", "183f762902d5309c6a6b70c005df5d2aaadb66c444e1df9faad0e4bf468fad8b", [{0x200, 0x2, {0x1, 0x7}}, {0x3, 0x1, {0x0, 0x6}}, {0x7ff, 0x800, {0x0, 0x7f}}, {0x2, 0xef68, {0x1, 0x1}}, {0x5, 0x0, {0x2, 0x8}}, {0x800, 0xfffb, {0x2, 0x2}}, {0x6, 0x9, {0x1, 0x7}}, {0x0, 0x3ff, {0x1, 0x10}}, {0x400, 0x0, {0x1, 0x1}}, {0x81, 0x9, {0x3, 0x5}}, {0x8, 0x2, {0x0, 0x4}}, {0xfeff, 0xfff, {0x1, 0x5}}, {0x8001, 0x3, {0x1, 0x4}}, {0x1, 0x1, {0x2, 0x9}}, {0x8, 0x4, {0x2, 0x9}}, {0x1, 0x1, {0x3, 0x6}}, {0x1000, 0x8, {0x3, 0x9}}, {0x0, 0x5, {0x2, 0x400}}, {0x9, 0xb, {0x2, 0x84}}, {0x2, 0x1, {0x1, 0xa}}, {0x9, 0x200, {0x1, 0x8000}}, {0x1, 0x2, {0x2, 0x6}}, {0x7fff, 0x40, {0x2, 0xbfd5}}, {0x1ff, 0x482, {0x0, 0xffff}}, {0x1, 0x911c, {0x1, 0x7}}, {0x8, 0x7fff, {0x3, 0x2}}, {0x8, 0x0, {0x2, 0x67540c71}}, {0xe, 0x5, {0x0, 0x800}}, {0x400, 0x3, {0x3, 0x6}}, {0xfff, 0x7, {0xdcd3b9b52e08a502, 0x3ff}}, {0x7, 0x4a, {0x3, 0x9}}, {0x6, 0x1, {0x2, 0x400}}, {0xf2, 0xf001, {0x1, 0x2}}, {0x1, 0xea98, {0x3, 0x401}}, {0x2, 0x2, {0x2, 0x7}}, {0x1, 0x8, {0x3, 0x7}}, {0x5, 0x1, {0x0, 0x580}}, {0x8, 0xfb9, {0x1, 0x3}}, {0xf, 0x5, {0x1, 0x7f}}, {0x4, 0x1, {0x1, 0x9}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x24000004}, 0x20048010) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000020180)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 2m2.812218255s ago: executing program 1 (id=1278): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$KDENABIO(r0, 0x4b36) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7, 0x61, 0x0, 0x405, 0x0}) sendmmsg$inet6(r1, &(0x7f0000005d00)=[{{&(0x7f0000002100)={0xa, 0x4e22, 0x17, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}, 0x1c, &(0x7f0000002640)=[{&(0x7f0000002140)='7\v', 0x2}], 0x1}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x68, 0x30, 0xf8f5, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x3c, 0x10000000, 0x1, 0xfff}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x18}}, 0x804) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xf0, 0x2, 0x6, 0x101, 0x7, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xf6f}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x10001}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CIDR={0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xf}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x54}, 0x8404) r5 = socket$inet_udp(0x2, 0x2, 0x0) shutdown(r1, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, r8, 0x25, 0x0, @void}, 0x10) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x200, 0x70bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x8, 0x3}, {0xffe0}, {0x8}}}, 0x24}}, 0x40004) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8000, 0x8, 0x200, 0x7f, {{0x10, 0x4, 0x2, 0x5, 0x40, 0x65, 0x0, 0x10, 0x0, 0x0, @empty, @multicast1, {[@lsrr={0x83, 0x2b, 0xeb, [@private=0xa010101, @local, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x20}, @multicast2, @remote, @remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x3e}, @private=0xa010101]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x114, 0x0, 0x20e, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x8000}, 0x2048805) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001400)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfc, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffffffff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @local}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x84}}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) epoll_create(0x1000) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BB\x00', {0x1, 0x0, 0x0, 0x0, 0x7}}) 2m2.305522725s ago: executing program 3 (id=1286): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x59b}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0x7, 0xd) 2m2.237760329s ago: executing program 3 (id=1288): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit(0xffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000080), 0x0, 0x40, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000100), &(0x7f0000000080), 0x8, 0x98, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 2m2.060693699s ago: executing program 1 (id=1289): socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x5, 0x106) r0 = socket$inet6_sctp(0xa, 0x4, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='c 8:', @ANYRESOCT=r3], 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)}, {0x0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r4}}], 0x20, 0x2400e044}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r4, 0x10000, 0x401, 0xfffffff9}, 0x10) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xc040, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=[{0x18, 0x109, 0xae680000, "e0ba58"}], 0x18}, 0x8080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='net_prio.prioidx\x00', 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x700, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) fdatasync(r6) close(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) r9 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregset(0x4205, r9, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r9, 0x2, &(0x7f00000003c0)={&(0x7f0000000380)=""/48, 0x30}) 2m1.7048956s ago: executing program 1 (id=1293): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffffffffffc, 0x0, 0x0, 0x1000000000}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x3c}, 0xa, @in6=@remote, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x1001}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) timer_settime(0x0, 0x1, 0x0, 0x0) 2m1.385216078s ago: executing program 3 (id=1297): r0 = socket$nl_route(0x10, 0x3, 0x0) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1000, 0x800, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) setreuid(r1, r2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004380)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x5c}}, 0x0) 2m1.384998998s ago: executing program 1 (id=1298): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x59b}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0x7, 0xd) 2m1.384081068s ago: executing program 3 (id=1299): syz_emit_ethernet(0x52, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x6000000, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='wchan\x00') pread64(r2, &(0x7f0000000500)=""/31, 0x1f, 0x6677) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00'}, 0x94) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file7\x00', 0x200000, &(0x7f0000000140)=ANY=[], 0xfc, 0x2b0, &(0x7f0000000280)="$eJzs3E1rE10UwPHTtOlLSpssHh5QEA+60c3Qxk8QpAUxoNRGtAvh1k40ZExKJkYiYrtz6+coLt0J1i9QEHfuxU0RBDddSEc6L3Zaom1j22mb/w/C3My9Z+6dyUw4MzB3/d7rJ9Wya5VNU1LDKimRZdkQyW2VQn3hMuWXByVuWa6O/vh84c79uZuFYnFqRnW6MHstr6rjF98/e/Hm0ofm6N234++GZC33YP17/sva/2vn1jdno63Xm2p0vl5vmnnH1oWKW7VUbzu2cW2t1Fy7saO+7NQXF9tqagtjmcWG7bpqam2t2m1t1rXZaKt5ZCo1tSxLxzLSa/oPHFFamZkxhSMZDJIw0mllo1Ew/R0rSyvHMSgAAHCydJv/z30M1nWb/z+uuFpxtbZX/p+SA+X/ffKH/H/4+A7pKeLn/5sdk0acDemtG4CCyYTX707k/wAAAAAAAAAAAAAAAAAAAAAAnAYbnpf1PC8bLaPPUPjOTPQ96XHiaHTx+/clOFwcstiLe8MizqtWqVUKlkF9oSwVccSWibTIT/98CAXl6RvFqQn15WTVWQrj/ZcEh6L4SK5z/GQQr7H4pVYpLZl4/3nJyn+d4/O74tMi0ioNypXLsXhLsvLpodTFkQX/vN6Ofzmpev1WcVf/I347AAAAAADOAkt/y+28/w1mk7QsjaYN2VUfrFyW6PmAZPd4PqCyOijb8QNyfiC5/QYAAAAAoJe47edV4zh2g8LBCr146KxwFuW/NvY8b2mr0b93mhKRhPb0m4icgAMeK6QP44L9+jTYyH4aJ/WPBAAAAOCobCf9SY8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDetd/Jw6L23cw9FuuuP5m9BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE6GXwEAAP//2MgYNQ==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff02}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x4}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0xe0, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@TCA_STAB={0xb4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9e, 0x1, 0x2, 0x3, 0x1, 0x80, 0x9, 0x4}}, {0xc, 0x2, [0xd, 0x8000, 0xa, 0x0]}}, {{0x1c, 0x1, {0x2, 0x6, 0x75f1, 0xb, 0x1, 0xff, 0x8, 0x3}}, {0xa, 0x2, [0xffff, 0x5, 0x7d10]}}, {{0x1c, 0x1, {0x9, 0x1, 0x7, 0xe44, 0x2, 0x5, 0x80000000, 0xa}}, {0x18, 0x2, [0x0, 0x67, 0x101, 0x80, 0x1, 0x1, 0x7b, 0x1, 0x6, 0x4]}}, {{0x1c, 0x1, {0x5, 0x4, 0x4, 0x1, 0x2, 0x5, 0x0, 0x5}}, {0xe, 0x2, [0x8, 0x69b, 0x3, 0x9, 0x9]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0xe0}}, 0x0) 2m1.326325852s ago: executing program 32 (id=1298): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x301}, 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x59b}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0x7, 0xd) 2m0.812863832s ago: executing program 3 (id=1307): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0xc0105502, 0x0) syz_clone3(&(0x7f0000000200)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x7}, &(0x7f00000000c0)=""/155, 0x9b, &(0x7f0000000180)=""/3, &(0x7f00000001c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x7}, 0x58) ptrace$setregs(0xf, r1, 0x7, &(0x7f0000000280)="148ac0bc3c46664226940fa053f3b43bc75bfaa1016c5dbcb43c0087c2218e78578ed944d62a01bef0b9ca60810f6b3d864ed3a1bba8f61d95fc319b83b18f6a7c566b9a384324a2cfcd59c0db0c3e0807fb60106572298d564aef819c317272d4d294af6c5983ead88c6679286b632bb398e491fcb0d0e55217ffdb8a4d5c8d30ab987b10e51eb5c8100f01437965012121aea5b83310744ddb9c3ddfd9f992b5b76b999f1430a6a80adb75347eabbd49247714bf93bc213b411f20dfbbaede32dbc4894c77b38b51c1ae6fe70288b306fa59a80074ad07") r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, 0x0, 0x0) 2m0.613290623s ago: executing program 3 (id=1308): r0 = getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b70, 0x7, @perf_bp, 0x14b3d, 0x32, 0xfffffbff, 0x0, 0x2, 0x0, 0x4, 0x0, 0x2180000, 0x0, 0x2007}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") read(r2, &(0x7f0000000580)=""/250, 0xfa) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 2m0.597776464s ago: executing program 33 (id=1308): r0 = getpid() perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b70, 0x7, @perf_bp, 0x14b3d, 0x32, 0xfffffbff, 0x0, 0x2, 0x0, 0x4, 0x0, 0x2180000, 0x0, 0x2007}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") read(r2, &(0x7f0000000580)=""/250, 0xfa) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 1m17.391538754s ago: executing program 6 (id=2022): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020001, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x28, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x40000000, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0x0, 0x800}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1b0}}, 0x4050) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000100)={0x3, 0x80, 0xd, 0xb, 0xb, 0x7, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x794, 0x0, @perf_config_ext={0x6, 0x6d88}, 0x80000, 0x81, 0x3, 0x4, 0x7f, 0x3, 0x6, 0x0, 0x3, 0x0, 0x4}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m17.328569978s ago: executing program 6 (id=2023): fsopen(&(0x7f0000000580)='squashfs\x00', 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="dd3a1e741a0069ae00000000000000001c000000fe000004000000000800010000000000"], 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000006000000000000000001"], 0x84}, 0x1, 0x0, 0x0, 0x2000}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="05dff72e1800cd13381600000000000000", @ANYRES32=0x0, @ANYBLOB="0800050004000000050053"], 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) mmap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0xd3283d036fe269bf, 0x8031, 0xffffffffffffffff, 0xffffd000) mlock(&(0x7f0000007000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x8001}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3656}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) mlock2(&(0x7f0000003000/0x10000)=nil, 0x10000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000001240)=[{0x1, 0x0, 0x86}], 0x1, 0x0, 0x0, 0x1) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a00000009500000000000000178f53551c054299a6283843fedb410e7a7e489ab1beea89600cc9ecc8fca3f9265796a3f8532e352534895a2fa049fec7e55de2d281aa53915ae752a80c11b5b66f2182bbb523e30fd2883ea8b5b01e686e0c387341c3eb6d635446613e28da1ac9b74fe760611a7cee20132e7e39bae7a79e20ee1050b2d1abb59387e22bb5b0e58d51a36df3a84eb9d16411dd49226c817630856fbbf286b95982c020162198f814f62024a95ace664aa9b7be1a4e7f5a6e59cf2f196ce74f47ec67ec59c1c423"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m16.960133979s ago: executing program 6 (id=2030): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000000)="f9f407e69ddc86f592ea63c799335d889b31737345c4111266942cb2cdc20cea7dc029decc714515783e4de9", 0x2c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x100900, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) getsockname(r0, &(0x7f0000000100), &(0x7f0000000180)=0x80) listen(r4, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x80089419, &(0x7f00000001c0)) r5 = syz_open_dev$rtc(&(0x7f0000000200), 0x80, 0x4040) r6 = signalfd(r3, &(0x7f0000000240)={[0x100000000]}, 0x8) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000280)=""/126, &(0x7f0000000300)=0x7e) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, r7, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x84}, 0x1, 0x0, 0x0, 0x48081}, 0x80) sendfile(r4, r1, 0x0, 0xf) sendmsg$NFT_BATCH(r4, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x1cc, 0x8, 0xa, 0x401, 0x0, 0x0, {0xa}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x4}, @NFTA_DYNSET_EXPR={0x10, 0x7, 0x0, 0x1, {{0xb}, @void}}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_RULE_USERDATA={0xb1, 0x7, 0x1, 0x0, "451bd82c73d4110423dfe50fbb8bc8814474367620b7272cd07ab3df4e822426d798ca903aa5a8227daf4062576c363e9d00aa31ae10261973c2e58873e5f2109241ea4c555482f35f54115d58079aaa3a6fc6e94eebe833d3476f87c6400f1148cdf535eec55083f818284b91b5bde1ae7bb47f2a02d07ca4871ebc18360a3772c7219260ba70e55c4df8ec3772fd677aca8492629094d85280f35380f07407e66ee19cf635a05949d5ba87fb"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_EXPRESSIONS={0x9c, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x7c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}, @NFT_MSG_DELTABLE={0x84, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1059f9769714907c, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x63, 0x6, "69bb8f53a4c85d1fb0353bbb8721ab3f824736f95467e1c9a802cd4f6316f859135c26fa1a053a34a51b8a1efa7930b97a0f11511df1d8e0eded813b5ec348ff95fa2069a13218d01369292645948c0d3f907563029c186601b63b9b1b41c8"}]}, @NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x320}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000900)={r4}, 0x8) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x60, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7d4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000085}, 0x40000) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), r6) sendmsg$L2TP_CMD_SESSION_MODIFY(r8, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, r9, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x3a}}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x332bb30a}]}, 0x40}, 0x1, 0x0, 0x0, 0x8010}, 0x200000c0) fcntl$setsig(r3, 0xa, 0x1c) setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000bc0)=0x800, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x2, 0x0, r8, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{r4, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)=r3}, 0x20) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_ext={0x1c, 0x3e, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf6e}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_fd={0x18, 0x6, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0x6, 0x6, 0xa, 0x10, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x81}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f40)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000f80)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000fc0)={0x0, 0x8, 0x6, 0x2}, 0x10, 0xaca0, r8, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) close_range(r8, r8, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r5, 0x80089419, &(0x7f00000010c0)) getsockopt$inet_sctp_SCTP_CONTEXT(r12, 0x84, 0x11, &(0x7f0000001100)={0x0, 0x4}, &(0x7f0000001140)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000001180)=r13, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000001200)={0x6, &(0x7f00000011c0)=[{0x4c3, 0x76, 0xfa, 0x1}, {0x100, 0x1a, 0x2}, {0x3, 0x1, 0x8}, {0x2, 0x5, 0x0, 0x1000}, {0xfff7, 0x6, 0x5f, 0x2}, {0xfff, 0xfe, 0x3, 0x1}]}) semop(0x0, &(0x7f0000001240)=[{0x4, 0xca6c}, {0x3, 0xe, 0x800}, {0x1, 0x551d, 0x1000}, {0x3, 0xffff, 0x1000}], 0x4) 1m16.891183643s ago: executing program 6 (id=2033): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r5], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB], 0x1c}}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) fchown(r0, 0x0, 0xee01) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x18, 0x140a, 0x8, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000081}, 0xc008) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) write$P9_RLOPEN(r0, &(0x7f0000000080)={0x18, 0xd, 0x2, {{0x4, 0x0, 0x2}, 0x401}}, 0x18) listxattr(0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x7, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x54}, 0x8404) 1m16.394122582s ago: executing program 6 (id=2040): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0x0, 0xff}, 0x0, @in=@loopback}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (fail_nth: 2) 1m16.24359646s ago: executing program 6 (id=2044): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5d}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611076000000000063000000000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = semget(0x2, 0x0, 0x82) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x109001, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0xbb59, 0x3, 0xfffffff9, 0x3, 0x3}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000440)={r3, 0xbc, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x9, @private1, 0x9}, @in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x80000000}, @in6={0xa, 0x4e23, 0x800, @empty, 0x6}, @in6={0xa, 0x4e23, 0xf8c3, @private1, 0xa}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x7ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000480)=0x10) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xa, 0x1ff, 0xed1, 0x200, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) setresuid(r6, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) unlink(&(0x7f00000004c0)='./file0\x00') semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000240)={{0x0, r4, r5, r6, r7, 0x40, 0x7}, 0x1, 0xb9f, 0x0, 0x0, 0x0, 0x0, 0x9}) 1m16.153701456s ago: executing program 34 (id=2044): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5d}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611076000000000063000000000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r1 = semget(0x2, 0x0, 0x82) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x109001, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0xbb59, 0x3, 0xfffffff9, 0x3, 0x3}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000440)={r3, 0xbc, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x9, @private1, 0x9}, @in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x80000000}, @in6={0xa, 0x4e23, 0x800, @empty, 0x6}, @in6={0xa, 0x4e23, 0xf8c3, @private1, 0xa}, @in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e24, 0x7ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000480)=0x10) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=@base={0xa, 0x1ff, 0xed1, 0x200, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x50) setresuid(r6, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) unlink(&(0x7f00000004c0)='./file0\x00') semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000240)={{0x0, r4, r5, r6, r7, 0x40, 0x7}, 0x1, 0xb9f, 0x0, 0x0, 0x0, 0x0, 0x9}) 1m8.712444628s ago: executing program 5 (id=2166): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, &(0x7f0000000780)=""/106, &(0x7f0000000380), &(0x7f0000000000), 0x80, r0, 0x0, 0x7}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r2, &(0x7f0000000100), 0x6) r3 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) fcntl$setpipe(r3, 0x407, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) readv(r6, &(0x7f0000000700)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/177, 0xb1}, {&(0x7f00000005c0)=""/168, 0xa8}, {&(0x7f0000000680)=""/76, 0x4c}], 0x6) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x880) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) r10 = open(&(0x7f00000000c0)='./file0\x00', 0x1002, 0x88) close_range(r9, r10, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001bc0)=@gettaction={0x130, 0x32, 0x100, 0x70bd27, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x90, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xac5}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40000}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6cd7}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x74, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7f}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x130}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xe, &(0x7f0000001b80)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x5}, 0x10}, 0x94) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f000014e000/0x1000)=nil, &(0x7f0000e18000/0x3000)=nil, 0x0, &(0x7f0000000040)=[{0x7, 0x0, 0x3}, {0x1, 0xfffffffffffffff7, 0x80}], 0x2, 0xe4, 0x0, 0x0, 0x0, 0x18}) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002300)=ANY=[@ANYBLOB="241700001000010000000000fedbdf2507000000130000000e73cf1271a887b9b26fd255969f3dd20fae82352a4f8d22f1440135ee85c1717a72a3a6212e4ee36b5ccf9793a8ae7462315e309dd22ed7350a14b08bbebd59185690f3f990c044264cc3df1a53be43882cb7218e34ac879e76f89092712c1e82851733a9f3449cd886a7af374e489459537da266002573ea4a11332d5972977e761d641bc83f07a2e43391c94a471282856275b527b065c57dcdaba457c9e4d6c0ebe78fc21f90ab15d1ec85f3b10c001a8008000200010000005016378008004400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04000400080029001abc64b23b1414db4592bd08b5ae217cbb4b3293c623084de2750ae48c50ed35202fca6a42cf133ab2c6051e5be6ab6f03f19fb14017ff9c003669e59e0b1dccf1656f33136e5586e87842d2a6f4e69e8ba57044d7bac44e7752d5f2df122cde6f6b526176da35512a33585f8d8b95675d5742bc2e", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00\'\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x1724}], 0x1}, 0x0) 1m8.527648229s ago: executing program 5 (id=2173): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x3}, 0x20) 1m8.503122081s ago: executing program 5 (id=2175): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x4055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m8.455158963s ago: executing program 5 (id=2176): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040)={[{@grpquota}, {@errors_remount}]}, 0x21, 0x4f3, &(0x7f00000012c0)="$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") r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000001"], 0xc4}}, 0x4008800) lseek(r1, 0x2000, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x1c, 0x0, 0x0}) socket$nl_audit(0x10, 0x3, 0x9) r4 = syz_clone(0x0, &(0x7f00000000c0)="222ca1b3c160287a0e1b3f62968b7422a4beabead9a05dce6f8bd30e42e85a09445abd4557d8840ade4d82999c60b31c4cceed41fe1f650247b62d7332b3e4c08d8c872f4027f84d6fced0060f190644f9f5ebbfc12b8d1135c8c5cfb8e6918cc279e98f3da64eebce7a1516f506beec17933c1c51239cf36ae83cf204602386ffb478466eb761ba74613f784718c7ea5118e7b119b076ce6a4a4b1a5f8ed5146a9856f1c0f5275719f88d5801c439c94031c9ee6b952b05530f463a0b6ee99d9801c34e395054ddfbd3dc01da7aa7827a7789bf133fcf681360eb08a2fabf6e6bf5803dc2e7d9a3c5ae846795", 0xed, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000004c0)="14dd9bc6cfa3cd2f9bf939dfe86d8de8b87613a3c799c754706966da9123ab04ac90cb480cb022f99d53f29eb91f6e1f789a4f9f709baf42d5c5c944959c84d5e55a740affab633804194e9db5bc0215bab87bfcdd12e9011b9a3cb65bea1e67e7e44ac9d86512830a259e269897d456182dad023de07fa0caf07f9ab352a30e6c85168904249d3a7d4152c59e5f19de870134b2b61ccd00cf1a9c759adfb7c7ba5306c8e073f8dd0813b20763532517554cac3a57ce626c7fe5233adc66e38397707284c1b0d9c4") capset(&(0x7f0000000240)={0x20071026, r4}, &(0x7f0000000280)={0xa2d, 0xe7e, 0x1000, 0xf4, 0x0, 0x9}) 1m8.245104925s ago: executing program 5 (id=2179): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x7, 0x20005, 0xfff8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x26, 0x37, 0x1, {0x2, 0x400000000, 0x200, 0x0, 0x8, 'nl80211\x00'}}, 0x26) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_getoverrun(r3) timer_gettime(r3, 0x0) timer_gettime(r3, &(0x7f00000001c0)) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) 1m7.337228638s ago: executing program 5 (id=2187): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b85, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e2, &(0x7f0000000800)="$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") 1m7.30567541s ago: executing program 35 (id=2187): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b85, 0x2, @perf_config_ext={0x0, 0x3fff8080}, 0x88, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/28], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e2, &(0x7f0000000800)="$eJzs3c9vVNUeAPDvnf6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4cYVISFqWBodc6f3lk57pz+Gtrfhfj7J0HPPmcs5t9Nvz5nTc+4EUFmD6T+1iP0RMZ1E9Cfzi2WdkRUOLjzv4R8fnU0fSdTrr/2WRJLl5c9Psq992ck9EfHjD0ns61hZ78zctYvjU1OTV7Pj4dlL08Mzc9cOX7g0fn7y/OTl0RdGTxw/dvzEyJG2rut6Qd7pm+++3//J2JvffPVnMvLtL2NJnIyXsycuvY7NMhiDje9JsrKo78RmV1aSjuznZOlLnHSW2CA2JH/9uiLif9EfHfHoxeuPj18ptXHAlqonEXWgohLxDxWVjwPy9/bL3wfXShmVANvhwamFCYCV8d+5MDcYPY25gd0Pk1g6rZNERHszc832RMTdO2M3z90ZuxlbNA8HFJu/ERH/L4r/pBH/A9ETA434rzXFfzouOJN9TfNfbbP+5VPF4h+2z0L896wa/1EQ//+OiLeWxP/bbdY/+Cj5Tm9T/Pe2e0kAAAAAAABQWbdPRcTzRX//ry2u/4mC9T99EXFyE+ofXHa88u//tfubUA1Q4MGpiJcK1//W8tW/Ax1Z6l+N9QBdybkLU5NHsjUAh6JrV3o8skodhz/d92WrssFs/V/+SOu/m60FzNpxv3NX8zkT47Pjj3vdQMSDGxFPFa7/TRb7/6Sg/09/H0yvs459z94606ps7fgHtkr964iDhf3/o7tWJKvfn2O4MR4YzkcFKz394Wfftaq/3fh3iwl4fGn/v3v1+B9Ilt6vZ2bjdRyd66y3Kmt3/N+dvN645Ux3lvfB+Ozs1ZGI7uR0R5rblD+68TbDkyiPhzxe0vg/9Eyr+b97Lcf/vRExv+z/Tn5v3lOc++/ffb+2ao/xP5Qnjf+JDfX/G0+M3hr4vlX96+v/jzX6+kNZjvk/WPBFHqbdzfkF4dhZVLTd7QUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJ0EtIvZEUhtaTNdqQ0MRfRHxn9hdm7oyM/vcuSvvXZ5Iyxqf/1/LP+m3f+E4yT//f2DJ8eiy46MRsTciPu/obRwPnb0yNVH2xQMAAAAAAAAAAAAAAAAAAMAO0ddi/3/qXkfZrQO2XGfZDQBKUxD/P5XRDmD76f+husQ/VJf4h+oS/1Bd4h+qS/xDdYl/qC7xDwAAAAAAT5S9B27/nETE/Iu9jUeqOyvrKrVlwFarld0AoDRu8QPVZekPVJf3+ECyRnlPy5PWOnM102cf42QAAAAAAAAAAAAAqJyD++3/h6qy/x+qy/5/qK58//+BktsBbD/v8YFYYyd/4f7/Nc8CAAAAAAAAAAAAADbTzNy1i+NTU5NXJd7YGc3YzkS9Xr+e/hTslPbs1MRf63tyvhR+R7R5ZSLf67e+s8r7nQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADT7JwAA//8SzSZK") 23.323929415s ago: executing program 7 (id=3013): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x5) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) syz_pidfd_open(0x0, 0x0) (async) ioctl$SG_BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000180)={'\x00', 0x1000, 0x0, 0x2, 0x8001}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112b8000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) pselect6(0x40, &(0x7f0000000100)={0x9, 0x10000, 0x10, 0xf1c, 0x10000, 0xfffffffffffffffa, 0x8001, 0x8001}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x1, 0xff, 0x7, 0x7f, 0x5, 0x4, 0x3, 0x2, 0x0, 0x2, 0x5, 0x2d, 0x1}, 0xe) (async, rerun: 64) sendmmsg$inet(r0, &(0x7f0000001e80)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000100)="89", 0x1}], 0x1, 0x0, 0x0, 0x2000060}}], 0x1, 0x24020891) (rerun: 64) 23.319035075s ago: executing program 7 (id=3015): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x400000000000d07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d58c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb6220030100dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000066d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c9727ec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f0dafc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa1c22015e53fd8a46be933ab460d8629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8f12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d61800aaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e3c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c59869c9200a1306ffa5a71ca69e89a69fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0dc4b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec086174439af6ee6c7fdb2d19c9280fa9a02e8fa6a38acfff09050d912635fed175fd06f577d40000000000000000000000000000754bffd73c0888ba8834f20b3acea57b7817663e12c1a5503bc4c13af59bda21688d68698c53ce3aa767657774db09ece7ec888d3af290207d36fa433b35e17dc0f3dc728ea1c633a4ef9e7d9bf81b57492e0544800921d1b751c5fbc163"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000047, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) (fail_nth: 7) 22.880754641s ago: executing program 7 (id=3016): socket$kcm(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x164, 0x10, 0x713, 0x70bd25, 0x25dfdbfe, {{@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x0, 0x4e23, 0x202, 0x2, 0x20, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast1, {0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x541}, {0x4, 0x7fffffffffffffff, 0xffffffffffffff03}, {}, 0x70bd28, 0x3500, 0xa, 0x1, 0x0, 0x5}, [@algo_aead={0x57, 0x12, {{'aegis128l\x00'}, 0x58, 0x60, "cb7a0000000002d3ff9caa"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x24}}}]}, 0x164}, 0x1, 0x0, 0x0, 0x880}, 0x0) 22.740795049s ago: executing program 7 (id=3018): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x42000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 22.72502007s ago: executing program 7 (id=3020): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x6, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x1, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r0, 0x8, &(0x7f00000000c0)) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@bridge_delneigh={0x1c, 0x1d, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, 0xd3, 0xa0, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x480c0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1, 0x0) fcntl$setpipe(r2, 0x408, 0x7) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) mkdirat(r4, &(0x7f0000002040)='./file0\x00', 0x5) ioperm(0x8e9e, 0x7, 0x1f94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010100}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) ioperm(0xafec3a4, 0x7, 0x80000001) 21.791777824s ago: executing program 7 (id=3027): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x10000, 0x5, 0x6, 0x2ed5, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000008c0)={0x9, {{0x2, 0x4e23, @remote}}, 0x1, 0x1, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}]}, 0x110) 7.521556723s ago: executing program 36 (id=3027): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e0a, 0x1, @perf_bp={0x0, 0x3}, 0x1216, 0x10000, 0x5, 0x6, 0x2ed5, 0x7, 0x3, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000008c0)={0x9, {{0x2, 0x4e23, @remote}}, 0x1, 0x1, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}}]}, 0x110) 3.108037379s ago: executing program 8 (id=3267): syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 1.595366057s ago: executing program 2 (id=3297): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf400"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r0, 0x400, 0x0) 1.5365962s ago: executing program 2 (id=3298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027000000060002001100000008000b00736970000800080009000000060004"], 0x70}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="d4110000100000001800000000000000000000000000000095000000000000003d5464977e80d616cd4bbc1282f163b2d09c"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x6}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4850}, 0x50) unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f0000000000)={0x0, ""/19}, 0x2000, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) ioctl$TIOCGRS485(r2, 0x542e, 0x0) 1.214142719s ago: executing program 2 (id=3308): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r0, 0x400, 0x0) 1.115269705s ago: executing program 2 (id=3311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x6}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="04010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542b0000880ac000080060005000000000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a00fffc00000000ff020000000000000000000000000001000000001400040002000000ac1414aa00000000000000004800098028000080060001000a0000001400020000000000000000000000ffffe000000205000300000000001cbcb47def472350ce00000008000200e0000002050003000000000014000200776730"], 0x104}}, 0x0) 1.097295456s ago: executing program 8 (id=3312): socket$rxrpc(0x21, 0x2, 0xa) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0x3}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1.072888418s ago: executing program 8 (id=3314): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.054514099s ago: executing program 8 (id=3315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f00000001c0)={@empty, @local}, 0xc) sendmsg$inet(r3, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000380)="0800fbfaffab2be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x9, @private1, 0xa77}, 0x1c) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x2, 0x2, 0x2a}, 0x2c) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f0000000200)=0x7, 0x4) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000c00)=0x6, 0x5, 0x3) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f00000003c0)={'broute\x00', 0x0, 0x3, 0x53, [0xca, 0xcd, 0x9, 0x3, 0x200000, 0x1], 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000340)=""/83}, &(0x7f00000001c0)=0x78) write$tun(r1, &(0x7f0000000f00)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x38, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @time_exceed={0x3, 0x0, 0x0, 0x8, '\x00', {0x0, 0x6, "aabc2b", 0x2, 0x84, 0x1, @local, @private2}}}}}}, 0xfdef) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206012100400000f2e000000300000205000100070000000500040002000000050005000a00000005000400030000000900020073797a300000000011000300686173683a69702c706f727400000000"], 0x54}, 0x1, 0x0, 0x0, 0x24000000}, 0x50) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.03051855s ago: executing program 4 (id=3316): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004380)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x300, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x5c}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 983.457952ms ago: executing program 4 (id=3317): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)=0x1) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 982.597122ms ago: executing program 4 (id=3318): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004380)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffe}, [@TCA_NETEM_LOSS={0x4}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x5c}}, 0x0) (fail_nth: 5) socket$inet_sctp(0x2, 0x5, 0x84) 960.160644ms ago: executing program 2 (id=3319): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b800800090003000000080009000000000008000a0000"], 0x184}}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000b, 0x1, @perf_bp={0x0, 0xf}, 0x104101, 0x4, 0x9, 0x8, 0xe, 0x4, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x8000000001, 0xffffffffffffffff, 0x8) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="09000000180000000800000040"], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x0, 0x3}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 656.603572ms ago: executing program 4 (id=3320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0xf00, 0xfffe, 0x0, 0xfffffff9, 0x0}) 460.526353ms ago: executing program 0 (id=3324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000000) 411.714376ms ago: executing program 9 (id=3326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 377.847308ms ago: executing program 9 (id=3327): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, 0x0, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0xfefe) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'macvtap0\x00'}}, 0xfffffffffffffdac) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000240)) sendmmsg$inet(r4, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x44, &(0x7f00000002c0)=[{&(0x7f0000000300)="44bdce12c590b56ec0c96000", 0x1}], 0x1}}], 0x2, 0x24040011) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000111401002dbd7000ffdbdf2608004a000000000008004b00130000000800010000000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x48884) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) tee(r2, r0, 0x3, 0x3) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x328, 0x328, 0x0, 0x328, 0x0, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, &(0x7f0000000140), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0xffffff00, 'sit0\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x21, 0x0, 0x20}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "6d18"}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@rand_addr=0x64010100, @multicast2, 0xff000000, 0xffffff00, 'veth1_macvtap\x00', 'wg1\x00', {0xff}, {}, 0x62, 0x1, 0x16}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x4, 0x0, 0x1, 0xc, 0xd, 0x6], 0x1, 0x2}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@empty, @dev={0xac, 0x14, 0x14, 0xb}, 0xff000000, 0xffffff00, 'veth1_to_bridge\x00', 'geneve0\x00', {}, {}, 0x4, 0x1}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x64}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x4, 0x0, 0x0, 0x6, 0x4, 0x5], 0x6, 0x3}, {0x4, [0x0, 0x3, 0x2, 0x5, 0x3, 0x5], 0x3}}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, 0xff000000, 0xff, 'vlan0\x00', 'veth1_vlan\x00', {}, {0xff}, 0x73, 0x1, 0x40}, 0x0, 0x108, 0x138, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'veth0_virt_wifi\x00', 'veth1_vlan\x00', 0x2, 0x3, 0x8000, 0x9, 0x5, 0x800, {0x7}, {0x6}}}, @common=@addrtype={{0x30}, {0x850, 0x80, 0x0, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0xffffffff, @remote, 0x4e23}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x558) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005"], 0x84}}, 0x0) 315.878901ms ago: executing program 4 (id=3328): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map, 0x12, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xd, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x0, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x404c000}, 0x0) 269.889004ms ago: executing program 9 (id=3329): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)=0x1) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 269.378704ms ago: executing program 9 (id=3330): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket(0x23, 0x80000, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0x2}, @exit, @tail_call], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x6, &(0x7f0000000000)=""/6, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) close(r0) 178.1793ms ago: executing program 9 (id=3331): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="cc0000002100010000000000fddbdf25fc000000000000000000000000000001fc020000000000000000000000000001fffc0000000000000a00008000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000005000110000000000000009000000ffff7f00000100000000000000000000ffff0a01010264010102000000000000000000000000e00000"], 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 177.62558ms ago: executing program 9 (id=3332): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b800800090003000000080009000000000008000a0000"], 0x184}}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe7, 0x0, 0x0, 0x0, 0x0, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000b, 0x1, @perf_bp={0x0, 0xf}, 0x104101, 0x4, 0x9, 0x8, 0xe, 0x4, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x8000000001, 0xffffffffffffffff, 0x8) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$can_raw(0x1d, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4, 0x0, 0x3}) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 170.52645ms ago: executing program 8 (id=3333): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf94b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x200003, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a0b000000000000000000020000000900010073797a300000000008000340000000010900020073797a31"], 0x98}}, 0x0) 144.810402ms ago: executing program 0 (id=3334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000040), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) 80.864055ms ago: executing program 0 (id=3335): syz_emit_ethernet(0x4e, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 79.937805ms ago: executing program 0 (id=3336): socket$rxrpc(0x21, 0x2, 0xa) socket$inet(0x2, 0x80001, 0x84) socket$inet(0x2, 0x80001, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r1, 0x0, 0x3}) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 79.432805ms ago: executing program 0 (id=3337): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, 0x0, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbf, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450800b10000000000019078ac1e0001ac1414aa03009078032400af0d0000000000000000010000ac1414aaac1e0001867100000000000ce2ffb28c599d1681fb520009789607671442eb000e7434954373561de584b703c80009e706d30bd224f80007cfa11cab1a00108475be675de6a78a05a0dc91e5c6010a6580a9e97612fe86001224001100030000000000000000000000000cc8f46876e79e56c7a95e860c0000000300067f36c52500000023"], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r3 = syz_open_dev$sg(&(0x7f00000000c0), 0x7, 0x111000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000002c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000340)={r5, 0x8}, &(0x7f0000000380)=0x8) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @loopback={0xffffffffffffff9d}}, r8}}, 0x48) r9 = syz_open_procfs(0x0, &(0x7f0000001280)='net/ip6_tables_names\x00') r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r10, 0x0, 0x13, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0, 0x2}, @in={0x2, 0x4e22, @broadcast}], 0x48) ioctl$SCSI_IOCTL_START_UNIT(r3, 0x5) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000000280)=""/4095, 0xfff}], 0x1, 0x9, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x300, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f0000000100)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x36, 0x0, 0xd}]}) close(0x3) 70.864086ms ago: executing program 4 (id=3338): r0 = memfd_create(0x0, 0x7) fcntl$addseals(r0, 0x409, 0x4) dup(0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) 49.594757ms ago: executing program 2 (id=3339): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0xf00, 0xfffe, 0x0, 0xfffffff9, 0x0}) 22.120269ms ago: executing program 0 (id=3340): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fcdbdf251b00000008000100", @ANYRES32=r7, @ANYBLOB="08002500010000000500e89fb2ab941137922d6fad8fa2266158ec193a5697e4f09ea127"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r1, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x200080d0) socket$igmp6(0xa, 0x3, 0x2) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r8, 0xfffd, 0x0) ioctl$HIDIOCSREPORT(r8, 0x400c4808, &(0x7f0000000080)={0x1, 0x100, 0x5}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x10, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x40}}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x50}}, 0x2040084) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0xc3dc, 0x4, 0x35, 0xe}, {0x6, 0x5, 0xf, 0x9}, {0x400, 0x3, 0x8, 0x6}, {0xcd91, 0xe, 0x5, 0x80000001}, {0x0, 0x6, 0x5, 0x8}, {0x10, 0x58, 0x4, 0x4}, {0x0, 0x9c, 0x10, 0x4}]}) 0s ago: executing program 8 (id=3341): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782db44b904", 0x10}], 0x1}, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, 0xb, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4064}, 0x4800) kernel console output (not intermixed with test programs): c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.937525][T11863] RSP: 002b:00007f210af36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.937552][T11863] RAX: ffffffffffffffda RBX: 00007f210c776090 RCX: 00007f210c4faeb9 [ 188.937571][T11863] RDX: 0000000000000000 RSI: 0000200000001940 RDI: 0000000000000004 [ 188.937589][T11863] RBP: 00007f210af36090 R08: 0000000000000000 R09: 0000000000000000 [ 188.937634][T11863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.937651][T11863] R13: 00007f210c776128 R14: 00007f210c776090 R15: 00007ffc0f7697d8 [ 188.937680][T11863] [ 188.973558][T11856] EXT4-fs (loop2): Remounting filesystem read-only [ 189.168837][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.320884][T11878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58504 sclass=netlink_route_socket pid=11878 comm=syz.2.2562 [ 189.423554][T11887] smc: net device bond0 applied user defined pnetid SYZ0 [ 189.436530][T11889] netlink: 'syz.2.2565': attribute type 3 has an invalid length. [ 189.466089][T11887] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 189.555259][T11893] lo speed is unknown, defaulting to 1000 [ 189.747927][T11906] siw: device registration error -23 [ 189.794012][T11914] loop2: detected capacity change from 0 to 512 [ 189.806971][T11914] EXT4-fs: user quota file already specified [ 189.820259][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 189.820276][ T29] audit: type=1400 audit(6082.499:5595): avc: denied { create } for pid=11913 comm="syz.2.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 189.861805][ T29] audit: type=1326 audit(6082.531:5596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.0.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210c4faeb9 code=0x7ffc0000 [ 189.885673][ T29] audit: type=1326 audit(6082.531:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.0.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210c4faeb9 code=0x7ffc0000 [ 189.908767][ T29] audit: type=1326 audit(6082.531:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.0.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210c4faeb9 code=0x7ffc0000 [ 189.932588][ T29] audit: type=1326 audit(6082.531:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.0.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210c4faeb9 code=0x7ffc0000 [ 189.956308][ T29] audit: type=1326 audit(6082.531:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.0.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f210c4faeb9 code=0x7ffc0000 [ 189.980087][ T29] audit: type=1326 audit(6082.531:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.0.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210c4faeb9 code=0x7ffc0000 [ 190.003174][ T29] audit: type=1326 audit(6082.531:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.0.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210c4faeb9 code=0x7ffc0000 [ 190.027132][ T29] audit: type=1326 audit(6082.531:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.0.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210c4faeb9 code=0x7ffc0000 [ 190.050367][ T29] audit: type=1326 audit(6082.531:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11916 comm="syz.0.2579" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210c4faeb9 code=0x7ffc0000 [ 190.174925][T11929] loop7: detected capacity change from 0 to 512 [ 190.182068][T11929] EXT4-fs: Ignoring removed nobh option [ 190.189308][T11929] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 190.224515][T11929] EXT4-fs (loop7): 1 truncate cleaned up [ 190.231260][T11929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.247170][T11932] netlink: 'syz.2.2585': attribute type 36 has an invalid length. [ 190.292097][T11934] loop8: detected capacity change from 0 to 512 [ 190.299030][T11934] EXT4-fs: dax option not supported [ 190.341024][T11937] loop2: detected capacity change from 0 to 1024 [ 190.370694][T11937] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.442388][T11923] netlink: 'syz.0.2581': attribute type 5 has an invalid length. [ 190.473122][T11937] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 190.488571][T11937] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1736 with error 28 [ 190.501836][T11937] EXT4-fs (loop2): This should not happen!! Data will be lost [ 190.501836][T11937] [ 190.511636][T11937] EXT4-fs (loop2): Total free blocks count 0 [ 190.517687][T11937] EXT4-fs (loop2): Free/Dirty block details [ 190.523636][T11937] EXT4-fs (loop2): free_blocks=68451041280 [ 190.530404][T11937] EXT4-fs (loop2): dirty_blocks=1744 [ 190.535815][T11937] EXT4-fs (loop2): Block reservation details [ 190.541865][T11937] EXT4-fs (loop2): i_reserved_data_blocks=109 [ 190.712154][ T8378] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1736 with error 28 [ 190.985609][T10097] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.058070][T11986] program syz.7.2605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.087180][T11986] FAULT_INJECTION: forcing a failure. [ 191.087180][T11986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.101051][T11986] CPU: 1 UID: 0 PID: 11986 Comm: syz.7.2605 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.101094][T11986] Tainted: [W]=WARN [ 191.101104][T11986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 191.101121][T11986] Call Trace: [ 191.101131][T11986] [ 191.101181][T11986] __dump_stack+0x1d/0x30 [ 191.101211][T11986] dump_stack_lvl+0x95/0xd0 [ 191.101319][T11986] dump_stack+0x15/0x1b [ 191.101346][T11986] should_fail_ex+0x263/0x280 [ 191.101389][T11986] should_fail+0xb/0x20 [ 191.101424][T11986] should_fail_usercopy+0x1a/0x20 [ 191.101476][T11986] _copy_from_user+0x1c/0xb0 [ 191.101503][T11986] scsi_ioctl+0x1402/0x1750 [ 191.101540][T11986] ? __rcu_read_unlock+0x4e/0x70 [ 191.101604][T11986] ? avc_has_perm_noaudit+0xab/0x130 [ 191.101641][T11986] ? avc_has_perm+0x101/0x190 [ 191.101686][T11986] ? do_vfs_ioctl+0x84f/0xe70 [ 191.101750][T11986] sg_ioctl+0xebf/0x1350 [ 191.101799][T11986] ? __pfx_sg_ioctl+0x10/0x10 [ 191.101908][T11986] __se_sys_ioctl+0xce/0x140 [ 191.101945][T11986] __x64_sys_ioctl+0x43/0x50 [ 191.102029][T11986] x64_sys_call+0x14b0/0x3000 [ 191.102095][T11986] do_syscall_64+0xc0/0x2a0 [ 191.102138][T11986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.102191][T11986] RIP: 0033:0x7ffb5d9eaeb9 [ 191.102211][T11986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.102303][T11986] RSP: 002b:00007ffb5c447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.102329][T11986] RAX: ffffffffffffffda RBX: 00007ffb5dc65fa0 RCX: 00007ffb5d9eaeb9 [ 191.102347][T11986] RDX: 0000200000000040 RSI: 0000000000000001 RDI: 0000000000000003 [ 191.102365][T11986] RBP: 00007ffb5c447090 R08: 0000000000000000 R09: 0000000000000000 [ 191.102382][T11986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.102436][T11986] R13: 00007ffb5dc66038 R14: 00007ffb5dc65fa0 R15: 00007ffdc3738948 [ 191.102508][T11986] [ 191.214894][T11987] netlink: 'syz.8.2602': attribute type 5 has an invalid length. [ 191.323186][T11990] siw: device registration error -23 [ 191.333188][T11990] loop7: detected capacity change from 0 to 512 [ 191.357260][T11990] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 191.395334][T11992] program syz.4.2607 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.411810][T11990] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.2606: Failed to acquire dquot type 1 [ 191.430773][T11990] EXT4-fs (loop7): 1 truncate cleaned up [ 191.436944][T11990] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 191.488992][T11998] __nla_validate_parse: 11 callbacks suppressed [ 191.489009][T11998] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2608'. [ 191.582941][T12005] netlink: 312 bytes leftover after parsing attributes in process `syz.8.2612'. [ 191.691164][T12013] loop4: detected capacity change from 0 to 1024 [ 191.714638][T12013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.727541][T10097] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 192.020516][T11998] lo speed is unknown, defaulting to 1000 [ 192.032939][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2618'. [ 192.042336][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2618'. [ 192.126627][T12022] loop2: detected capacity change from 0 to 1024 [ 192.185664][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.245260][T12035] blktrace: Concurrent blktraces are not allowed on loop14 [ 192.256677][T12037] loop4: detected capacity change from 0 to 512 [ 192.274256][T12037] EXT4-fs: Ignoring removed nobh option [ 192.301172][T12037] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 192.324024][T12037] EXT4-fs (loop4): 1 truncate cleaned up [ 192.330388][T12037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.492344][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.509410][T12022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.514344][T12033] netlink: 'syz.8.2620': attribute type 5 has an invalid length. [ 192.676236][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.772048][T12065] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2631'. [ 192.875513][T12086] loop8: detected capacity change from 0 to 1024 [ 192.892924][T12086] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.168776][T12104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.2642: iget: bad extra_isize 90 (inode size 256) [ 193.184360][T10600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.195109][T12104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2642: error while reading EA inode 11 err=-117 [ 193.222049][T12104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.2642: iget: bad extra_isize 90 (inode size 256) [ 193.239983][T12104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2642: error while reading EA inode 11 err=-117 [ 193.299462][T12104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.2642: iget: bad extra_isize 90 (inode size 256) [ 193.336730][T12110] netlink: 'syz.0.2640': attribute type 30 has an invalid length. [ 193.410167][T12104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2642: error while reading EA inode 18 err=-117 [ 193.424047][T12104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.2642: iget: bad extra_isize 90 (inode size 256) [ 193.451818][T12104] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.2642: error while reading EA inode 18 err=-117 [ 193.467392][T12104] EXT4-fs (loop2): 1 orphan inode deleted [ 193.473895][T12104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.516582][T12104] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.642982][T12109] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.688764][T12119] tipc: Started in network mode [ 193.694770][T12119] tipc: Node identity 4, cluster identity 4711 [ 193.700984][T12119] tipc: Node number set to 4 [ 193.761321][T12125] siw: device registration error -23 [ 193.771941][T12125] set_capacity_and_notify: 2 callbacks suppressed [ 193.771963][T12125] loop4: detected capacity change from 0 to 512 [ 193.805579][T12125] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.830091][T10600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.868096][T12125] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2648: Failed to acquire dquot type 1 [ 193.948596][T12144] loop2: detected capacity change from 0 to 7 [ 193.987630][T12125] EXT4-fs (loop4): 1 truncate cleaned up [ 194.013573][T12125] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 194.040457][T12149] loop8: detected capacity change from 0 to 512 [ 194.047408][T12149] EXT4-fs: quotafile must be on filesystem root [ 194.192027][T12160] loop8: detected capacity change from 0 to 512 [ 194.259483][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 194.312511][T12160] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 194.387779][T12155] loop2: detected capacity change from 0 to 1024 [ 194.483461][T10600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 194.583569][T12177] loop4: detected capacity change from 0 to 1024 [ 194.713360][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2672'. [ 194.732151][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2672'. [ 194.755448][T12155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.822548][T12177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.867167][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 194.867186][ T29] audit: type=1400 audit(6087.819:5794): avc: granted { setsecparam } for pid=12176 comm="syz.4.2670" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 194.867657][T12177] netlink: 'syz.4.2670': attribute type 21 has an invalid length. [ 194.920122][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.937984][T12198] batadv1: entered promiscuous mode [ 195.006325][T12207] netlink: 312 bytes leftover after parsing attributes in process `syz.2.2678'. [ 195.045855][ T29] audit: type=1326 audit(6088.009:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5d9eaeb9 code=0x50000 [ 195.070069][ T29] audit: type=1326 audit(6088.009:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5d9eaeb9 code=0x50000 [ 195.094232][ T29] audit: type=1326 audit(6088.009:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5d9eaeb9 code=0x50000 [ 195.118198][ T29] audit: type=1326 audit(6088.009:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5d9eaeb9 code=0x50000 [ 195.142373][ T29] audit: type=1326 audit(6088.009:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5d9eaeb9 code=0x50000 [ 195.148379][T12177] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.2670: Freeing blocks not in datazone - block = 0, count = 16 [ 195.167010][ T29] audit: type=1326 audit(6088.009:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5d9eaeb9 code=0x50000 [ 195.204548][ T29] audit: type=1326 audit(6088.009:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5d9eaeb9 code=0x50000 [ 195.228375][ T29] audit: type=1326 audit(6088.009:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5d9eaeb9 code=0x50000 [ 195.252308][ T29] audit: type=1326 audit(6088.009:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz.7.2675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb5d9eaeb9 code=0x50000 [ 195.405236][ T8382] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:63: bg 0: block 112: padding at end of block bitmap is not set [ 195.424340][ T8382] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 195.437594][ T8382] EXT4-fs (loop4): This should not happen!! Data will be lost [ 195.437594][ T8382] [ 195.447819][ T8382] EXT4-fs (loop4): Total free blocks count 0 [ 195.453828][ T8382] EXT4-fs (loop4): Free/Dirty block details [ 195.459818][ T8382] EXT4-fs (loop4): free_blocks=16 [ 195.464876][ T8382] EXT4-fs (loop4): dirty_blocks=16 [ 195.470804][ T8382] EXT4-fs (loop4): Block reservation details [ 195.477571][ T8382] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 195.527812][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.585582][T12224] loop8: detected capacity change from 0 to 512 [ 195.595414][T12224] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.2683: corrupted inode contents [ 195.628620][T12226] FAULT_INJECTION: forcing a failure. [ 195.628620][T12226] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 195.642724][T12226] CPU: 1 UID: 0 PID: 12226 Comm: syz.0.2685 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.642880][T12226] Tainted: [W]=WARN [ 195.642887][T12226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.642904][T12226] Call Trace: [ 195.642914][T12226] [ 195.642926][T12226] __dump_stack+0x1d/0x30 [ 195.642962][T12226] dump_stack_lvl+0x95/0xd0 [ 195.642993][T12226] dump_stack+0x15/0x1b [ 195.643096][T12226] should_fail_ex+0x263/0x280 [ 195.643136][T12226] should_fail_alloc_page+0xf2/0x100 [ 195.643172][T12226] __alloc_frozen_pages_noprof+0x108/0x350 [ 195.643220][T12226] alloc_pages_mpol+0xb3/0x260 [ 195.643282][T12226] vma_alloc_folio_noprof+0x1a9/0x300 [ 195.643336][T12226] do_wp_page+0xf6d/0x2560 [ 195.643385][T12226] ? css_rstat_updated+0xbb/0x280 [ 195.643419][T12226] ? __rcu_read_lock+0x36/0x50 [ 195.643465][T12226] handle_mm_fault+0x8c7/0x3030 [ 195.643590][T12226] ? vma_start_read+0x1c7/0x2c0 [ 195.643698][T12226] do_user_addr_fault+0x62f/0x1050 [ 195.643739][T12226] ? ksys_mmap_pgoff+0xc1/0x310 [ 195.643929][T12226] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 195.643958][T12226] ? arch_exit_to_user_mode_prepare+0x26/0x80 [ 195.644005][T12226] ? irqentry_exit+0x3c/0x510 [ 195.644041][T12226] exc_page_fault+0x62/0xa0 [ 195.644095][T12226] asm_exc_page_fault+0x26/0x30 [ 195.644121][T12226] RIP: 0033:0x7f210c3b2898 [ 195.644138][T12226] Code: 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41 [ 195.644237][T12226] RSP: 002b:00007f210af56470 EFLAGS: 00010202 [ 195.644261][T12226] RAX: 0000000000005005 RBX: 00007f210af56530 RCX: 0000000000000013 [ 195.644278][T12226] RDX: 00000000000027ff RSI: 0000000000000400 RDI: 00007f210af565d0 [ 195.644296][T12226] RBP: 0000000000000014 R08: 00007f2102b37000 R09: 0000000000000004 [ 195.644314][T12226] R10: 0000200000001042 R11: 0000000000000481 R12: 0000000000000301 [ 195.644332][T12226] R13: 00007f210c5a7920 R14: 0000000000000013 R15: 00007f210af565d0 [ 195.644362][T12226] [ 195.644376][T12226] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 195.762598][T12224] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 195.885665][T12224] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.2683: corrupted inode contents [ 195.899725][T12224] EXT4-fs error (device loop8): ext4_evict_inode:301: inode #15: comm syz.8.2683: mark_inode_dirty error [ 195.912241][T12224] EXT4-fs (loop8): 1 orphan inode deleted [ 195.918364][T12224] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.088994][T12241] loop4: detected capacity change from 0 to 1024 [ 196.106923][T12241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.269286][T12249] lo speed is unknown, defaulting to 1000 [ 196.339880][T10600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.369326][T12251] blktrace: Concurrent blktraces are not allowed on loop16 [ 196.421136][T12253] loop8: detected capacity change from 0 to 128 [ 196.448262][T12253] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 196.472373][T12256] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2694'. [ 196.564111][T10600] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.700033][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 196.838210][T12280] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2703'. [ 196.911736][T12286] netlink: 312 bytes leftover after parsing attributes in process `syz.8.2706'. [ 196.969638][ T8379] Bluetooth: hci0: Frame reassembly failed (-84) [ 197.118715][T12299] UHID_CREATE from different security context by process 1395 (syz.4.2712), this is not allowed. [ 197.204220][T12305] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2715'. [ 197.405062][T12315] loop4: detected capacity change from 0 to 512 [ 197.431062][T12315] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 197.456986][T12315] System zones: 0-2, 18-18, 34-35 [ 197.463027][T12315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.517716][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.216750][T12321] netlink: 'syz.4.2720': attribute type 1 has an invalid length. [ 198.274439][T12321] bond2: entered promiscuous mode [ 198.280239][T12321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.288268][T12354] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 198.296406][T12354] System zones: 0-2, 18-18, 34-35 [ 198.309770][T12354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.323247][T12332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 198.331479][T12332] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 198.342862][T12332] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 198.354934][T12332] bond2: (slave wireguard0): making interface the new active one [ 198.363469][T12332] wireguard0: entered promiscuous mode [ 198.371912][T12332] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 198.421933][T12343] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.454149][T10097] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.479026][T10600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.553669][T12369] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2734'. [ 198.614710][T12378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2738'. [ 198.633406][T12378] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12378 comm=syz.4.2738 [ 198.683405][T12385] set_capacity_and_notify: 2 callbacks suppressed [ 198.683421][T12385] loop4: detected capacity change from 0 to 512 [ 198.691311][T12383] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.717005][T12385] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 198.727483][T12385] System zones: 0-2, 18-18, 34-35 [ 198.733613][T12385] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.852257][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.878013][ T5383] Bluetooth: hci0: command 0x1003 tx timeout [ 198.883899][ T3785] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 199.026299][T12411] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2750'. [ 199.120266][T12423] loop4: detected capacity change from 0 to 512 [ 199.143953][T12423] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 199.157298][T12423] System zones: 0-2, 18-18, 34-35 [ 199.164412][T12423] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.203167][ T8376] Bluetooth: hci0: Frame reassembly failed (-84) [ 199.230519][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.362342][T12442] loop4: detected capacity change from 0 to 512 [ 199.371201][T12442] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.382537][T12442] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 199.390815][T12442] EXT4-fs (loop4): orphan cleanup on readonly fs [ 199.397889][T12442] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2761: Allocating blocks 41-42 which overlap fs metadata [ 199.413220][T12442] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.2761: Failed to acquire dquot type 0 [ 199.424873][T12442] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 199.441144][T12442] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2761: corrupted inode contents [ 199.454123][T12442] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.2761: mark_inode_dirty error [ 199.466973][T12442] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2761: corrupted inode contents [ 199.479252][T12442] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.2761: mark_inode_dirty error [ 199.491708][T12442] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2761: corrupted inode contents [ 199.505013][T12442] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 199.515463][T12442] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.2761: corrupted inode contents [ 199.527619][T12442] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.2761: mark_inode_dirty error [ 199.540345][T12442] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 199.549730][T12442] EXT4-fs (loop4): 1 truncate cleaned up [ 199.555526][T12442] EXT4-fs (loop4): pa ffff88810764dbd0: logic 1, phys. 41, len 23 [ 199.564687][T12442] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 22, pa_free 23 [ 199.575477][T12442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.590753][T12442] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 199.600391][T12442] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c018, mo2=0002] [ 199.618718][T12442] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 199.627746][T12442] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2761'. [ 199.896923][ T29] kauditd_printk_skb: 12183 callbacks suppressed [ 199.896943][ T29] audit: type=1400 audit(6093.126:17985): avc: denied { setopt } for pid=12460 comm="syz.7.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.162567][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.645817][T12486] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12486 comm=syz.2.2777 [ 200.811027][T12505] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2785'. [ 200.949455][T12515] loop7: detected capacity change from 0 to 8192 [ 201.080200][T12528] loop2: detected capacity change from 0 to 512 [ 201.087104][T12528] EXT4-fs: Ignoring removed nobh option [ 201.096605][T12528] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.128435][T12528] EXT4-fs (loop2): 1 truncate cleaned up [ 201.137303][T12528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.152401][ T5383] Bluetooth: hci0: command 0x1003 tx timeout [ 201.155916][ T3785] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 201.200831][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.217545][T12534] loop8: detected capacity change from 0 to 1024 [ 201.284655][T12534] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 201.365743][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2802'. [ 201.386227][T12548] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2802'. [ 201.437139][ T29] audit: type=1400 audit(6094.730:17986): avc: denied { checkpoint_restore } for pid=12551 comm="syz.0.2800" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 201.452740][T12552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2800'. [ 201.472082][T12554] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2796'. [ 201.543159][T12556] netlink: 428 bytes leftover after parsing attributes in process `syz.2.2803'. [ 201.551234][T12534] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.2796: Freeing blocks not in datazone - block = 0, count = 16 [ 201.596718][ T29] audit: type=1400 audit(6094.919:17987): avc: denied { ioctl } for pid=12533 comm="syz.8.2796" path="socket:[38046]" dev="sockfs" ino=38046 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 201.629388][T12568] loop7: detected capacity change from 0 to 512 [ 201.650320][T12568] EXT4-fs: Ignoring removed nobh option [ 201.656371][T12568] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 201.668192][T12568] EXT4-fs (loop7): 1 truncate cleaned up [ 201.676240][T12568] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.729933][ T8382] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:63: bg 0: block 112: padding at end of block bitmap is not set [ 201.761094][ T8382] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 201.773496][ T8382] EXT4-fs (loop8): This should not happen!! Data will be lost [ 201.773496][ T8382] [ 201.783479][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2812'. [ 201.812202][ T8382] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 67 with error 28 [ 201.825872][ T8382] EXT4-fs (loop8): This should not happen!! Data will be lost [ 201.825872][ T8382] [ 201.836699][ T8382] EXT4-fs (loop8): Total free blocks count 0 [ 201.842807][ T8382] EXT4-fs (loop8): Free/Dirty block details [ 201.848964][ T8382] EXT4-fs (loop8): free_blocks=16 [ 201.854120][ T8382] EXT4-fs (loop8): dirty_blocks=80 [ 201.859295][ T8382] EXT4-fs (loop8): Block reservation details [ 201.870955][ T29] audit: type=1400 audit(6095.204:17988): avc: denied { ioctl } for pid=12577 comm="syz.7.2812" path="socket:[39063]" dev="sockfs" ino=39063 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 201.951385][T12587] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2812'. [ 202.095243][T12617] loop8: detected capacity change from 0 to 512 [ 202.104116][T12617] EXT4-fs: Ignoring removed nobh option [ 202.110543][T12617] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 202.127055][T12617] EXT4-fs (loop8): 1 truncate cleaned up [ 202.162344][ T29] audit: type=1400 audit(6095.510:17989): avc: denied { connect } for pid=12623 comm="syz.7.2824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 202.283107][T12636] netlink: 312 bytes leftover after parsing attributes in process `syz.8.2828'. [ 202.344097][T12645] netlink: 'syz.7.2832': attribute type 2 has an invalid length. [ 202.472276][T12656] netlink: 'syz.7.2836': attribute type 1 has an invalid length. [ 202.487829][T12656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.522848][T12659] loop8: detected capacity change from 0 to 512 [ 202.551264][T12659] EXT4-fs: Ignoring removed nobh option [ 202.571887][T12659] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 202.596402][T12665] FAULT_INJECTION: forcing a failure. [ 202.596402][T12665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.596774][T12659] EXT4-fs (loop8): 1 truncate cleaned up [ 202.609609][T12665] CPU: 0 UID: 0 PID: 12665 Comm: syz.7.2839 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 202.609694][T12665] Tainted: [W]=WARN [ 202.609704][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.609722][T12665] Call Trace: [ 202.609731][T12665] [ 202.609743][T12665] __dump_stack+0x1d/0x30 [ 202.609783][T12665] dump_stack_lvl+0x95/0xd0 [ 202.609835][T12665] dump_stack+0x15/0x1b [ 202.609858][T12665] should_fail_ex+0x263/0x280 [ 202.609921][T12665] should_fail+0xb/0x20 [ 202.609965][T12665] should_fail_usercopy+0x1a/0x20 [ 202.610076][T12665] _copy_to_user+0x20/0xa0 [ 202.610101][T12665] __se_sys_move_pages+0x1070/0x1420 [ 202.610171][T12665] ? ksys_write+0x194/0x1a0 [ 202.610198][T12665] __x64_sys_move_pages+0x78/0x90 [ 202.610234][T12665] x64_sys_call+0x27c3/0x3000 [ 202.610348][T12665] do_syscall_64+0xc0/0x2a0 [ 202.610388][T12665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.610477][T12665] RIP: 0033:0x7ffb5d9eaeb9 [ 202.610498][T12665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.610521][T12665] RSP: 002b:00007ffb5c447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 202.610546][T12665] RAX: ffffffffffffffda RBX: 00007ffb5dc65fa0 RCX: 00007ffb5d9eaeb9 [ 202.610574][T12665] RDX: 0000200000000080 RSI: 20000000000000fe RDI: 0000000000000000 [ 202.610593][T12665] RBP: 00007ffb5c447090 R08: 00002000000000c0 R09: 0000000000000000 [ 202.610611][T12665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.610628][T12665] R13: 00007ffb5dc66038 R14: 00007ffb5dc65fa0 R15: 00007ffdc3738948 [ 202.610656][T12665] [ 202.960361][T12678] netlink: 312 bytes leftover after parsing attributes in process `syz.8.2845'. [ 203.005968][T12682] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2847'. [ 203.224775][T12699] loop8: detected capacity change from 0 to 512 [ 203.243589][T12699] EXT4-fs: Ignoring removed nobh option [ 203.249892][T12699] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 203.263537][T12699] EXT4-fs (loop8): 1 truncate cleaned up [ 203.569800][T12709] loop7: detected capacity change from 0 to 1024 [ 203.590791][T12710] netlink: 'syz.8.2855': attribute type 10 has an invalid length. [ 203.603239][T12710] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.612769][T12709] EXT4-fs: Ignoring removed orlov option [ 203.619750][T12710] bond0: (slave team0): Enslaving as an active interface with an up link [ 203.660287][T12710] netlink: 'syz.8.2855': attribute type 10 has an invalid length. [ 203.686540][T12710] siw: device registration error -23 [ 203.686683][ T29] audit: type=1400 audit(6097.124:17990): avc: denied { ioctl } for pid=12707 comm="syz.8.2855" path="socket:[38315]" dev="sockfs" ino=38315 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 204.008070][T12723] loop7: detected capacity change from 0 to 2048 [ 204.044529][ T3307] loop7: p1 < > p4 [ 204.055382][ T3307] loop7: p4 size 8388608 extends beyond EOD, truncated [ 204.066803][T12725] FAULT_INJECTION: forcing a failure. [ 204.066803][T12725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.079961][T12725] CPU: 1 UID: 0 PID: 12725 Comm: syz.4.2861 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.080035][T12725] Tainted: [W]=WARN [ 204.080045][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.080061][T12725] Call Trace: [ 204.080071][T12725] [ 204.080106][T12725] __dump_stack+0x1d/0x30 [ 204.080138][T12725] dump_stack_lvl+0x95/0xd0 [ 204.080207][T12725] dump_stack+0x15/0x1b [ 204.080228][T12725] should_fail_ex+0x263/0x280 [ 204.080297][T12725] should_fail+0xb/0x20 [ 204.080329][T12725] should_fail_usercopy+0x1a/0x20 [ 204.080421][T12725] _copy_to_user+0x20/0xa0 [ 204.080451][T12725] simple_read_from_buffer+0xb5/0x130 [ 204.080503][T12725] proc_fail_nth_read+0x10e/0x150 [ 204.080533][T12725] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.080573][T12725] vfs_read+0x1ab/0x7f0 [ 204.080598][T12725] ? __rcu_read_unlock+0x4e/0x70 [ 204.080676][T12725] ? __fget_files+0x184/0x1c0 [ 204.080704][T12725] ? mutex_lock+0x57/0x90 [ 204.080771][T12725] ksys_read+0xdc/0x1a0 [ 204.080799][T12725] __x64_sys_read+0x40/0x50 [ 204.080826][T12725] x64_sys_call+0x2889/0x3000 [ 204.080952][T12725] do_syscall_64+0xc0/0x2a0 [ 204.081049][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.081071][T12725] RIP: 0033:0x7f9c4ca7b78e [ 204.081090][T12725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 204.081114][T12725] RSP: 002b:00007f9c4b516fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.081139][T12725] RAX: ffffffffffffffda RBX: 00007f9c4b5176c0 RCX: 00007f9c4ca7b78e [ 204.081159][T12725] RDX: 000000000000000f RSI: 00007f9c4b5170a0 RDI: 0000000000000008 [ 204.081253][T12725] RBP: 00007f9c4b517090 R08: 0000000000000000 R09: 0000000000000000 [ 204.081270][T12725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.081338][T12725] R13: 00007f9c4cd36038 R14: 00007f9c4cd35fa0 R15: 00007ffcae447298 [ 204.081365][T12725] [ 204.318053][ T29] audit: type=1400 audit(6097.788:17991): avc: denied { append } for pid=12731 comm="syz.4.2862" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 204.343322][T12723] loop7: p1 < > p4 [ 204.351181][T12723] loop7: p4 size 8388608 extends beyond EOD, truncated [ 204.563371][T12749] FAULT_INJECTION: forcing a failure. [ 204.563371][T12749] name failslab, interval 1, probability 0, space 0, times 0 [ 204.577125][T12749] CPU: 0 UID: 0 PID: 12749 Comm: syz.7.2869 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 204.577163][T12749] Tainted: [W]=WARN [ 204.577183][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 204.577197][T12749] Call Trace: [ 204.577203][T12749] [ 204.577211][T12749] __dump_stack+0x1d/0x30 [ 204.577240][T12749] dump_stack_lvl+0x95/0xd0 [ 204.577266][T12749] dump_stack+0x15/0x1b [ 204.577353][T12749] should_fail_ex+0x263/0x280 [ 204.577439][T12749] should_failslab+0x8c/0xb0 [ 204.577474][T12749] kmem_cache_alloc_noprof+0x68/0x490 [ 204.577496][T12749] ? skb_clone+0x151/0x1f0 [ 204.577515][T12749] skb_clone+0x151/0x1f0 [ 204.577551][T12749] __netlink_deliver_tap+0x2c9/0x500 [ 204.577591][T12749] ? netlink_attachskb+0x2e2/0x660 [ 204.577618][T12749] netlink_sendskb+0x126/0x150 [ 204.577644][T12749] netlink_unicast+0x2a2/0x690 [ 204.577705][T12749] netlink_ack+0x4c8/0x500 [ 204.577765][T12749] netlink_rcv_skb+0x192/0x220 [ 204.577792][T12749] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 204.577880][T12749] rtnetlink_rcv+0x1c/0x30 [ 204.577898][T12749] netlink_unicast+0x5c0/0x690 [ 204.577984][T12749] netlink_sendmsg+0x5c8/0x6f0 [ 204.578004][T12749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.578020][T12749] ____sys_sendmsg+0x5af/0x600 [ 204.578040][T12749] ___sys_sendmsg+0x195/0x1e0 [ 204.578079][T12749] __x64_sys_sendmsg+0xd4/0x160 [ 204.578174][T12749] x64_sys_call+0x17ba/0x3000 [ 204.578196][T12749] do_syscall_64+0xc0/0x2a0 [ 204.578225][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.578310][T12749] RIP: 0033:0x7ffb5d9eaeb9 [ 204.578324][T12749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.578340][T12749] RSP: 002b:00007ffb5c447028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.578420][T12749] RAX: ffffffffffffffda RBX: 00007ffb5dc65fa0 RCX: 00007ffb5d9eaeb9 [ 204.578433][T12749] RDX: 0000000020004004 RSI: 0000200000006040 RDI: 0000000000000006 [ 204.578501][T12749] RBP: 00007ffb5c447090 R08: 0000000000000000 R09: 0000000000000000 [ 204.578518][T12749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.578536][T12749] R13: 00007ffb5dc66038 R14: 00007ffb5dc65fa0 R15: 00007ffdc3738948 [ 204.578556][T12749] [ 204.855725][T12761] loop7: detected capacity change from 0 to 1024 [ 204.862837][T12761] EXT4-fs: Ignoring removed orlov option [ 204.958895][T12768] rdma_op ffff8881396c2d80 conn xmit_rdma 0000000000000000 [ 204.986914][T12772] loop7: detected capacity change from 0 to 512 [ 205.036999][T12772] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 205.052765][T12772] System zones: 0-2, 18-18, 34-35 [ 205.191065][T12800] SELinux: Context /usr/lib/telepathy/mission-control-5 is not valid (left unmapped). [ 205.197409][ T29] audit: type=1400 audit(6098.705:17992): avc: denied { relabelfrom } for pid=12799 comm="syz.4.2888" name="IEEE-802.15.4-RAW" dev="sockfs" ino=39435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.225530][T12800] loop4: detected capacity change from 0 to 512 [ 205.234426][ T29] audit: type=1400 audit(6098.716:17993): avc: denied { relabelto } for pid=12799 comm="syz.4.2888" name="IEEE-802.15.4-RAW" dev="sockfs" ino=39435 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=ieee802154_socket permissive=1 trawcon="/usr/lib/telepathy/mission-control-5" [ 205.264675][ T29] audit: type=1400 audit(6098.716:17994): avc: denied { bind } for pid=12799 comm="syz.4.2888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 205.290780][T12800] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 205.307973][T12800] EXT4-fs (loop4): orphan cleanup on readonly fs [ 205.319282][T12800] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.2888: bad orphan inode 15 [ 205.330638][T12800] ext4_test_bit(bit=14, block=18) = 1 [ 205.337029][T12800] is_bad_inode(inode)=0 [ 205.341227][T12800] NEXT_ORPHAN(inode)=1023 [ 205.346814][T12800] max_ino=32 [ 205.350143][T12800] i_nlink=0 [ 205.354966][T12800] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2888: bg 0: block 161: padding at end of block bitmap is not set [ 205.371067][T12800] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 205.465784][T12811] syzkaller0: entered promiscuous mode [ 205.472749][T12811] syzkaller0: entered allmulticast mode [ 205.489271][T12821] loop4: detected capacity change from 0 to 512 [ 205.519078][T12821] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 205.530456][T12821] System zones: 0-2, 18-18, 34-35 [ 205.765179][T12851] bridge1: entered promiscuous mode [ 205.772114][T12851] bridge1: entered allmulticast mode [ 205.813383][T12855] netlink: 'syz.2.2907': attribute type 6 has an invalid length. [ 205.826345][T12857] loop8: detected capacity change from 0 to 1024 [ 205.926419][T12869] syz_tun: entered allmulticast mode [ 205.936915][T12869] syz_tun: left allmulticast mode [ 206.239611][T12896] FAULT_INJECTION: forcing a failure. [ 206.239611][T12896] name failslab, interval 1, probability 0, space 0, times 0 [ 206.252351][T12896] CPU: 1 UID: 0 PID: 12896 Comm: syz.4.2919 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 206.252431][T12896] Tainted: [W]=WARN [ 206.252441][T12896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 206.252455][T12896] Call Trace: [ 206.252463][T12896] [ 206.252471][T12896] __dump_stack+0x1d/0x30 [ 206.252507][T12896] dump_stack_lvl+0x95/0xd0 [ 206.252536][T12896] dump_stack+0x15/0x1b [ 206.252563][T12896] should_fail_ex+0x263/0x280 [ 206.252606][T12896] should_failslab+0x8c/0xb0 [ 206.252649][T12896] __kmalloc_noprof+0xb8/0x580 [ 206.252729][T12896] ? security_msg_msg_alloc+0x45/0x100 [ 206.252768][T12896] ? should_fail_ex+0xd9/0x280 [ 206.252841][T12896] security_msg_msg_alloc+0x45/0x100 [ 206.252881][T12896] load_msg+0x222/0x2f0 [ 206.252913][T12896] do_mq_timedsend+0x247/0x6d0 [ 206.252959][T12896] __x64_sys_mq_timedsend+0xd1/0x180 [ 206.253038][T12896] x64_sys_call+0x22db/0x3000 [ 206.253148][T12896] do_syscall_64+0xc0/0x2a0 [ 206.253189][T12896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.253211][T12896] RIP: 0033:0x7f9c4cabaeb9 [ 206.253228][T12896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.253251][T12896] RSP: 002b:00007f9c4b4f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 206.253368][T12896] RAX: ffffffffffffffda RBX: 00007f9c4cd36090 RCX: 00007f9c4cabaeb9 [ 206.253383][T12896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 206.253462][T12896] RBP: 00007f9c4b4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 206.253480][T12896] R10: 0000000000000400 R11: 0000000000000246 R12: 0000000000000001 [ 206.253498][T12896] R13: 00007f9c4cd36128 R14: 00007f9c4cd36090 R15: 00007ffcae447298 [ 206.253526][T12896] [ 206.485563][T12882] lo speed is unknown, defaulting to 1000 [ 206.653270][T12882] chnl_net:caif_netlink_parms(): no params data found [ 206.716886][T12882] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.725363][T12882] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.733801][T12882] bridge_slave_0: entered allmulticast mode [ 206.741450][T12882] bridge_slave_0: entered promiscuous mode [ 206.751834][T12882] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.760253][T12882] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.768703][T12882] bridge_slave_1: entered allmulticast mode [ 206.775224][T12882] bridge_slave_1: entered promiscuous mode [ 206.795102][T12882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.806128][T12882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.830124][T12882] team0: Port device team_slave_0 added [ 206.838103][T12882] team0: Port device team_slave_1 added [ 206.872714][T12882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.879793][T12882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.906984][T12882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.920148][T12882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.927213][T12882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.954441][T12882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.001956][ T8381] bridge_slave_1: left allmulticast mode [ 207.008593][ T8381] bridge_slave_1: left promiscuous mode [ 207.014632][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.024758][ T8381] bridge_slave_0: left allmulticast mode [ 207.030480][ T8381] bridge_slave_0: left promiscuous mode [ 207.036943][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.115441][ T8381] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 207.167365][ T8381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.177782][ T8381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.188531][ T8381] bond0 (unregistering): Released all slaves [ 207.196876][ T8381] bond1 (unregistering): Released all slaves [ 207.208154][T12882] hsr_slave_0: entered promiscuous mode [ 207.215454][T12882] hsr_slave_1: entered promiscuous mode [ 207.229738][T12928] tipc: Started in network mode [ 207.235783][T12928] tipc: Node identity , cluster identity 4711 [ 207.243072][T12928] tipc: Failed to obtain node identity [ 207.248603][T12928] tipc: Enabling of bearer rejected, failed to enable media [ 207.288182][T12935] __nla_validate_parse: 12 callbacks suppressed [ 207.288199][T12935] netlink: 312 bytes leftover after parsing attributes in process `syz.8.2931'. [ 207.359568][ T8381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.371605][ T8381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.452900][ T8381] team0 (unregistering): Port device team_slave_1 removed [ 207.468101][ T8381] team0 (unregistering): Port device team_slave_0 removed [ 207.562746][T12957] loop4: detected capacity change from 0 to 8192 [ 207.589707][T12957] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 1044) [ 207.599598][T12957] FAT-fs (loop4): Filesystem has been set read-only [ 207.745223][T12882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.785923][ T8381] IPVS: stop unused estimator thread 0... [ 207.796334][T12882] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.804672][ T29] audit: type=1400 audit(6101.468:17995): avc: denied { read } for pid=12978 comm="syz.8.2942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 207.827527][ T8378] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.834730][ T8378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.894178][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.901305][ T8382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.072076][T13007] syzkaller0: entered promiscuous mode [ 208.078760][T13007] syzkaller0: entered allmulticast mode [ 208.157317][T12882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.183650][T13012] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2948'. [ 208.193877][T13012] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2948'. [ 208.292731][T13026] usb usb7: usbfs: process 13026 (syz.4.2952) did not claim interface 0 before use [ 208.350166][T13026] FAULT_INJECTION: forcing a failure. [ 208.350166][T13026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.364161][T13026] CPU: 1 UID: 0 PID: 13026 Comm: syz.4.2952 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 208.364277][T13026] Tainted: [W]=WARN [ 208.364287][T13026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 208.364305][T13026] Call Trace: [ 208.364313][T13026] [ 208.364323][T13026] __dump_stack+0x1d/0x30 [ 208.364353][T13026] dump_stack_lvl+0x95/0xd0 [ 208.364432][T13026] dump_stack+0x15/0x1b [ 208.364459][T13026] should_fail_ex+0x263/0x280 [ 208.364502][T13026] should_fail+0xb/0x20 [ 208.364629][T13026] should_fail_usercopy+0x1a/0x20 [ 208.364670][T13026] _copy_to_user+0x20/0xa0 [ 208.364692][T13026] simple_read_from_buffer+0xb5/0x130 [ 208.364821][T13026] proc_fail_nth_read+0x10e/0x150 [ 208.364860][T13026] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.364889][T13026] vfs_read+0x1ab/0x7f0 [ 208.364961][T13026] ? __schedule+0x82d/0xc90 [ 208.364985][T13026] ? __rcu_read_unlock+0x4e/0x70 [ 208.365026][T13026] ? __fget_files+0x184/0x1c0 [ 208.365057][T13026] ? mutex_lock+0x57/0x90 [ 208.365161][T13026] ksys_read+0xdc/0x1a0 [ 208.365264][T13026] __x64_sys_read+0x40/0x50 [ 208.365284][T13026] x64_sys_call+0x2889/0x3000 [ 208.365314][T13026] do_syscall_64+0xc0/0x2a0 [ 208.365346][T13026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.365425][T13026] RIP: 0033:0x7f9c4ca7b78e [ 208.365442][T13026] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.365461][T13026] RSP: 002b:00007f9c4b516fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.365484][T13026] RAX: ffffffffffffffda RBX: 00007f9c4b5176c0 RCX: 00007f9c4ca7b78e [ 208.365540][T13026] RDX: 000000000000000f RSI: 00007f9c4b5170a0 RDI: 0000000000000004 [ 208.365558][T13026] RBP: 00007f9c4b517090 R08: 0000000000000000 R09: 0000000000000000 [ 208.365576][T13026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.365593][T13026] R13: 00007f9c4cd36038 R14: 00007f9c4cd35fa0 R15: 00007ffcae447298 [ 208.365621][T13026] [ 208.604918][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2954'. [ 208.732587][T13058] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2962'. [ 208.777237][T12882] veth0_vlan: entered promiscuous mode [ 208.789971][ T29] audit: type=1400 audit(6102.501:17996): avc: denied { bind } for pid=13059 comm="syz.8.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.805430][T12882] veth1_vlan: entered promiscuous mode [ 208.810971][ T29] audit: type=1400 audit(6102.501:17997): avc: denied { listen } for pid=13059 comm="syz.8.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.834584][ T29] audit: type=1400 audit(6102.501:17998): avc: denied { accept } for pid=13059 comm="syz.8.2963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.856903][T13058] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2962'. [ 208.893943][T12882] veth0_macvtap: entered promiscuous mode [ 208.910164][ T29] audit: type=1400 audit(6102.627:17999): avc: denied { ioctl } for pid=13069 comm="syz.4.2965" path="socket:[40069]" dev="sockfs" ino=40069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.935749][ T29] audit: type=1400 audit(6102.627:18000): avc: denied { write } for pid=13069 comm="syz.4.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 208.956018][T12882] veth1_macvtap: entered promiscuous mode [ 208.964627][ T29] audit: type=1400 audit(6102.680:18001): avc: denied { read } for pid=13069 comm="syz.4.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 209.000675][T12882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.015611][T12882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.115647][T13082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2968'. [ 209.141886][T13087] loop8: detected capacity change from 0 to 1024 [ 209.199982][T13087] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 3: comm syz.8.2970: lblock 3 mapped to illegal pblock 3 (length 3) [ 209.215194][T13091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2968'. [ 209.296324][T13087] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 209.308754][T13087] EXT4-fs (loop8): This should not happen!! Data will be lost [ 209.308754][T13087] [ 209.381781][ T8382] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:63: lblock 8 mapped to illegal pblock 8 (length 5) [ 209.407223][ T8382] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 209.420727][ T8382] EXT4-fs (loop8): This should not happen!! Data will be lost [ 209.420727][ T8382] [ 209.481273][ T8382] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:63: bg 0: block 112: padding at end of block bitmap is not set [ 209.539123][ T8382] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 19 with error 117 [ 209.552815][ T8382] EXT4-fs (loop8): This should not happen!! Data will be lost [ 209.552815][ T8382] [ 209.964523][ T8294] syz_tun (unregistering): left allmulticast mode [ 209.971077][ T8294] bridge0: port 3(syz_tun) entered disabled state [ 209.979116][T13151] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.2981'. [ 209.988429][T13151] netlink: zone id is out of range [ 209.994382][T13151] netlink: zone id is out of range [ 210.000274][T13151] netlink: zone id is out of range [ 210.030626][T13151] netlink: set zone limit has 8 unknown bytes [ 210.286600][ T8377] smc: removing ib device syz1 [ 210.674580][T13146] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2982'. [ 210.969587][T13175] bond2: option ad_select: invalid value (4) [ 210.978081][T13175] bond2 (unregistering): Released all slaves [ 211.098849][T13157] chnl_net:caif_netlink_parms(): no params data found [ 211.139632][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 211.139660][ T29] audit: type=1400 audit(6104.978:18003): avc: denied { setopt } for pid=13184 comm="syz.7.2991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 211.203981][T13157] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.204071][T13157] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.204249][T13157] bridge_slave_0: entered allmulticast mode [ 211.212638][T13157] bridge_slave_0: entered promiscuous mode [ 211.222500][T13157] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.240008][T13157] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.250941][T13157] bridge_slave_1: entered allmulticast mode [ 211.251712][T13157] bridge_slave_1: entered promiscuous mode [ 211.271531][T13199] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=13199 comm=syz.2.2989 [ 211.279620][T13157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.316873][T13157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.333677][T13157] team0: Port device team_slave_0 added [ 211.334901][T13157] team0: Port device team_slave_1 added [ 211.385468][T13157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.393596][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.420901][T13157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.435559][T13157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.442715][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.471293][T13157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.521216][T13210] vhci_hcd vhci_hcd.4: invalid port number 254 [ 211.537875][ T29] audit: type=1400 audit(6105.389:18004): avc: denied { listen } for pid=13207 comm="syz.0.2996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 211.558814][ T29] audit: type=1400 audit(6105.399:18005): avc: denied { connect } for pid=13207 comm="syz.0.2996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 211.593773][T13157] hsr_slave_0: entered promiscuous mode [ 211.600095][T13157] hsr_slave_1: entered promiscuous mode [ 211.638758][T13157] debugfs: 'hsr0' already exists in 'hsr' [ 211.645703][T13157] Cannot create hsr debugfs directory [ 211.690782][T13221] loop7: detected capacity change from 0 to 512 [ 211.702898][T13221] EXT4-fs: Ignoring removed orlov option [ 211.708750][T13221] EXT4-fs: Ignoring removed mblk_io_submit option [ 211.736751][T13221] EXT4-fs error (device loop7): ext4_iget_extra_inode:5073: inode #15: comm syz.7.3002: corrupted in-inode xattr: e_value size too large [ 211.761896][T13221] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.3002: couldn't read orphan inode 15 (err -117) [ 211.862455][T13157] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.869594][T13157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.877069][T13157] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.884189][T13157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.935622][T13157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.945942][ T29] audit: type=1400 audit(6105.800:18006): avc: denied { setopt } for pid=13241 comm="syz.7.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 211.967933][ T8378] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.977156][ T8378] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.998007][T13157] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.007989][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.015137][ T8382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.028012][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.035193][ T8376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.184495][T13157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.193251][T13263] __nla_validate_parse: 4 callbacks suppressed [ 212.193271][T13263] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3014'. [ 212.219772][T13263] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3014'. [ 212.231082][T13270] FAULT_INJECTION: forcing a failure. [ 212.231082][T13270] name failslab, interval 1, probability 0, space 0, times 0 [ 212.243792][T13270] CPU: 0 UID: 0 PID: 13270 Comm: syz.7.3015 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.243916][T13270] Tainted: [W]=WARN [ 212.243927][T13270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 212.243946][T13270] Call Trace: [ 212.243956][T13270] [ 212.243966][T13270] __dump_stack+0x1d/0x30 [ 212.243997][T13270] dump_stack_lvl+0x95/0xd0 [ 212.244040][T13270] dump_stack+0x15/0x1b [ 212.244073][T13270] should_fail_ex+0x263/0x280 [ 212.244116][T13270] should_failslab+0x8c/0xb0 [ 212.244149][T13270] kmem_cache_alloc_noprof+0x68/0x490 [ 212.244257][T13270] ? skb_clone+0x151/0x1f0 [ 212.244284][T13270] skb_clone+0x151/0x1f0 [ 212.244309][T13270] bpf_clone_redirect+0xf7/0x290 [ 212.244381][T13270] bpf_prog_cfa4bf6e1e03aea2+0x5f/0x68 [ 212.244410][T13270] ? obj_cgroup_charge_account+0x122/0x1a0 [ 212.244453][T13270] ? should_fail_ex+0x30/0x280 [ 212.244556][T13270] ? __rcu_read_unlock+0x4e/0x70 [ 212.244595][T13270] ? avc_has_perm_noaudit+0xab/0x130 [ 212.244690][T13270] ? __rcu_read_unlock+0x4e/0x70 [ 212.244804][T13270] ? trace_call_bpf+0x33b/0x420 [ 212.244844][T13270] ? __rcu_read_unlock+0x4e/0x70 [ 212.244885][T13270] ? is_bpf_text_address+0x141/0x160 [ 212.245006][T13270] ? kernel_text_address+0x94/0xb0 [ 212.245050][T13270] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 212.245079][T13270] ? __kernel_text_address+0xd/0x30 [ 212.245148][T13270] ? unwind_get_return_address+0x16/0x40 [ 212.245206][T13270] ? find_stack+0xda/0x1d0 [ 212.245244][T13270] ? read_tsc+0x9/0x20 [ 212.245283][T13270] ? ktime_get+0x1eb/0x210 [ 212.245313][T13270] bpf_test_run+0x29d/0x620 [ 212.245413][T13270] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 212.245462][T13270] ? bpf_test_run+0x19b/0x620 [ 212.245561][T13270] bpf_prog_test_run_skb+0x9ce/0xf50 [ 212.245600][T13270] ? __fget_files+0x184/0x1c0 [ 212.245627][T13270] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 212.245721][T13270] bpf_prog_test_run+0x204/0x340 [ 212.245764][T13270] __sys_bpf+0x4c0/0x7b0 [ 212.245811][T13270] __x64_sys_bpf+0x41/0x50 [ 212.245871][T13270] x64_sys_call+0x28e1/0x3000 [ 212.245906][T13270] do_syscall_64+0xc0/0x2a0 [ 212.245950][T13270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.246062][T13270] RIP: 0033:0x7ffb5d9eaeb9 [ 212.246086][T13270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.246234][T13270] RSP: 002b:00007ffb5c447028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.246256][T13270] RAX: ffffffffffffffda RBX: 00007ffb5dc65fa0 RCX: 00007ffb5d9eaeb9 [ 212.246271][T13270] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 212.246328][T13270] RBP: 00007ffb5c447090 R08: 0000000000000000 R09: 0000000000000000 [ 212.246409][T13270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.246427][T13270] R13: 00007ffb5dc66038 R14: 00007ffb5dc65fa0 R15: 00007ffdc3738948 [ 212.246457][T13270] [ 212.768779][T13285] netlink: 312 bytes leftover after parsing attributes in process `syz.8.3019'. [ 212.850187][T13157] veth0_vlan: entered promiscuous mode [ 212.860006][T13157] veth1_vlan: entered promiscuous mode [ 212.884555][T13157] veth0_macvtap: entered promiscuous mode [ 212.896466][T13157] veth1_macvtap: entered promiscuous mode [ 212.911771][T13157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.922363][T13157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.187193][ T4329] bond0: (slave syz_tun): Releasing backup interface [ 213.242786][T13306] loop8: detected capacity change from 0 to 512 [ 213.286158][T13306] EXT4-fs: Ignoring removed nobh option [ 213.292334][T13306] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 213.324074][T13306] EXT4-fs (loop8): 1 truncate cleaned up [ 213.395317][T13318] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2983'. [ 213.485160][ T29] audit: type=1400 audit(6107.455:18007): avc: denied { read } for pid=13319 comm="syz.8.3026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 213.515875][T13320] loop8: detected capacity change from 0 to 512 [ 213.516376][ T29] audit: type=1326 audit(6107.486:18008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13319 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef05aeb9 code=0x7ffc0000 [ 213.525107][T13320] EXT4-fs: test_dummy_encryption option not supported [ 213.548709][ T29] audit: type=1326 audit(6107.486:18009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13319 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef05aeb9 code=0x7ffc0000 [ 213.579797][ T29] audit: type=1326 audit(6107.486:18010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13319 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef05aeb9 code=0x7ffc0000 [ 213.602942][ T29] audit: type=1326 audit(6107.486:18011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13319 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef05aeb9 code=0x7ffc0000 [ 213.627368][ T29] audit: type=1326 audit(6107.486:18012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13319 comm="syz.8.3026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41ef05aeb9 code=0x7ffc0000 [ 213.694182][T13307] chnl_net:caif_netlink_parms(): no params data found [ 213.775170][ T8382] bridge_slave_1: left allmulticast mode [ 213.782113][ T8382] bridge_slave_1: left promiscuous mode [ 213.788959][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.798574][ T8382] bridge_slave_0: left allmulticast mode [ 213.804323][ T8382] bridge_slave_0: left promiscuous mode [ 213.811153][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.849583][ T8382] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 213.894831][ T8382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.906172][ T8382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.917089][ T8382] bond0 (unregistering): Released all slaves [ 213.926346][ T8382] bond1 (unregistering): Released all slaves [ 213.936683][ T8382] bond2 (unregistering): Released all slaves [ 214.029218][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.047672][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.145312][ T8382] team0 (unregistering): Port device team_slave_1 removed [ 214.169408][ T8382] team0 (unregistering): Port device C removed [ 214.273133][T13307] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.281590][T13307] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.299235][T13307] bridge_slave_0: entered allmulticast mode [ 214.306279][T13307] bridge_slave_0: entered promiscuous mode [ 214.328567][T13307] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.335685][T13307] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.373030][T13307] bridge_slave_1: entered allmulticast mode [ 214.403201][T13307] bridge_slave_1: entered promiscuous mode [ 214.455197][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3029'. [ 214.475590][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3029'. [ 214.530531][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3029'. [ 214.584950][T13307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.658385][T13307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.724830][T13355] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3031'. [ 214.746692][T13307] team0: Port device team_slave_0 added [ 214.765530][T13307] team0: Port device team_slave_1 added [ 214.903038][T13307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.910890][T13307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.938404][T13307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.994562][T13307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.001665][T13307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.028995][T13307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.046963][T13371] loop8: detected capacity change from 0 to 1024 [ 215.064143][T13371] EXT4-fs mount: 24 callbacks suppressed [ 215.064164][T13371] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.154779][T13307] hsr_slave_0: entered promiscuous mode [ 215.160938][T13307] hsr_slave_1: entered promiscuous mode [ 215.187268][T13307] debugfs: 'hsr0' already exists in 'hsr' [ 215.194432][T13307] Cannot create hsr debugfs directory [ 215.223962][T13378] loop4: detected capacity change from 0 to 512 [ 215.231975][T13378] ext3: Unknown parameter 'dont_appraise' [ 215.512816][T10600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.538717][T13307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.577389][T13416] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 215.593850][T13307] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.637163][T13421] FAULT_INJECTION: forcing a failure. [ 215.637163][T13421] name failslab, interval 1, probability 0, space 0, times 0 [ 215.651482][T13421] CPU: 1 UID: 0 PID: 13421 Comm: syz.8.3041 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 215.651522][T13421] Tainted: [W]=WARN [ 215.651533][T13421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.651547][T13421] Call Trace: [ 215.651555][T13421] [ 215.651610][T13421] __dump_stack+0x1d/0x30 [ 215.651644][T13421] dump_stack_lvl+0x95/0xd0 [ 215.651673][T13421] dump_stack+0x15/0x1b [ 215.651701][T13421] should_fail_ex+0x263/0x280 [ 215.651765][T13421] should_failslab+0x8c/0xb0 [ 215.651833][T13421] __kmalloc_node_track_caller_noprof+0xb8/0x590 [ 215.651873][T13421] ? v9fs_init_fs_context+0xae/0x220 [ 215.651923][T13421] kstrdup+0x3e/0xd0 [ 215.651964][T13421] v9fs_init_fs_context+0xae/0x220 [ 215.652048][T13421] alloc_fs_context+0x4a3/0x590 [ 215.652077][T13421] fs_context_for_mount+0x22/0x30 [ 215.652108][T13421] do_new_mount+0xea/0x700 [ 215.652208][T13421] ? security_capable+0x7b/0x90 [ 215.652249][T13421] path_mount+0x4d0/0xbc0 [ 215.652272][T13421] ? user_path_at+0xbf/0x130 [ 215.652315][T13421] __se_sys_mount+0x28c/0x2e0 [ 215.652406][T13421] ? fput+0x8f/0xc0 [ 215.652436][T13421] __x64_sys_mount+0x67/0x80 [ 215.652538][T13421] x64_sys_call+0x2cca/0x3000 [ 215.652603][T13421] do_syscall_64+0xc0/0x2a0 [ 215.652648][T13421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.652713][T13421] RIP: 0033:0x7f41ef05aeb9 [ 215.652730][T13421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.652752][T13421] RSP: 002b:00007f41edab7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 215.652779][T13421] RAX: ffffffffffffffda RBX: 00007f41ef2d5fa0 RCX: 00007f41ef05aeb9 [ 215.652800][T13421] RDX: 0000200000000480 RSI: 0000200000000140 RDI: 0000000000000000 [ 215.652819][T13421] RBP: 00007f41edab7090 R08: 0000200000000000 R09: 0000000000000000 [ 215.652911][T13421] R10: 0000000000000084 R11: 0000000000000246 R12: 0000000000000002 [ 215.652994][T13421] R13: 00007f41ef2d6038 R14: 00007f41ef2d5fa0 R15: 00007ffdf068d528 [ 215.653017][T13421] [ 215.873794][T13423] FAULT_INJECTION: forcing a failure. [ 215.873794][T13423] name failslab, interval 1, probability 0, space 0, times 0 [ 215.887840][T13423] CPU: 0 UID: 0 PID: 13423 Comm: syz.0.3042 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 215.887958][T13423] Tainted: [W]=WARN [ 215.887968][T13423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 215.887982][T13423] Call Trace: [ 215.887988][T13423] [ 215.887996][T13423] __dump_stack+0x1d/0x30 [ 215.888028][T13423] dump_stack_lvl+0x95/0xd0 [ 215.888178][T13423] dump_stack+0x15/0x1b [ 215.888200][T13423] should_fail_ex+0x263/0x280 [ 215.888243][T13423] should_failslab+0x8c/0xb0 [ 215.888276][T13423] kmem_cache_alloc_noprof+0x68/0x490 [ 215.888315][T13423] ? skb_clone+0x151/0x1f0 [ 215.888336][T13423] skb_clone+0x151/0x1f0 [ 215.888355][T13423] __netlink_deliver_tap+0x2c9/0x500 [ 215.888422][T13423] netlink_unicast+0x66b/0x690 [ 215.888569][T13423] netlink_sendmsg+0x5c8/0x6f0 [ 215.888597][T13423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.888672][T13423] ____sys_sendmsg+0x5af/0x600 [ 215.888696][T13423] ___sys_sendmsg+0x195/0x1e0 [ 215.888877][T13423] __x64_sys_sendmsg+0xd4/0x160 [ 215.888902][T13423] x64_sys_call+0x17ba/0x3000 [ 215.888928][T13423] do_syscall_64+0xc0/0x2a0 [ 215.888988][T13423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.889011][T13423] RIP: 0033:0x7fdd996baeb9 [ 215.889027][T13423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.889051][T13423] RSP: 002b:00007fdd98117028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.889087][T13423] RAX: ffffffffffffffda RBX: 00007fdd99935fa0 RCX: 00007fdd996baeb9 [ 215.889107][T13423] RDX: 0000000000000014 RSI: 0000200000000180 RDI: 0000000000000005 [ 215.889126][T13423] RBP: 00007fdd98117090 R08: 0000000000000000 R09: 0000000000000000 [ 215.889141][T13423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.889153][T13423] R13: 00007fdd99936038 R14: 00007fdd99935fa0 R15: 00007fffb624e1a8 [ 215.889244][T13423] [ 215.946938][ T29] kauditd_printk_skb: 394 callbacks suppressed [ 215.947006][ T29] audit: type=1326 audit(6110.047:18407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 216.127435][ T29] audit: type=1326 audit(6110.152:18408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 216.144242][ T8382] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.154066][ T29] audit: type=1326 audit(6110.163:18409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 216.157652][ T8382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.183795][ T29] audit: type=1326 audit(6110.163:18410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 216.212351][ T29] audit: type=1326 audit(6110.163:18411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 216.213522][T13425] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3043'. [ 216.237632][ T29] audit: type=1326 audit(6110.163:18412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 216.270406][ T29] audit: type=1326 audit(6110.173:18413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 216.295038][ T29] audit: type=1326 audit(6110.173:18414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 216.297716][ T8382] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.318213][ T29] audit: type=1326 audit(6110.173:18415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 216.325303][ T8382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.358608][ T29] audit: type=1326 audit(6110.173:18416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13404 comm="syz.4.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 216.451783][T13432] FAULT_INJECTION: forcing a failure. [ 216.451783][T13432] name failslab, interval 1, probability 0, space 0, times 0 [ 216.465936][T13432] CPU: 1 UID: 0 PID: 13432 Comm: syz.4.3045 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.465980][T13432] Tainted: [W]=WARN [ 216.466058][T13432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.466071][T13432] Call Trace: [ 216.466078][T13432] [ 216.466087][T13432] __dump_stack+0x1d/0x30 [ 216.466120][T13432] dump_stack_lvl+0x95/0xd0 [ 216.466149][T13432] dump_stack+0x15/0x1b [ 216.466247][T13432] should_fail_ex+0x263/0x280 [ 216.466347][T13432] should_failslab+0x8c/0xb0 [ 216.466376][T13432] __kmalloc_cache_noprof+0x64/0x4a0 [ 216.466412][T13432] ? nf_tables_newtable+0x375/0xea0 [ 216.466501][T13432] ? __nla_validate_parse+0x1650/0x1cf0 [ 216.466549][T13432] nf_tables_newtable+0x375/0xea0 [ 216.466599][T13432] nfnetlink_rcv+0xc1e/0x1720 [ 216.466708][T13432] netlink_unicast+0x5c0/0x690 [ 216.466741][T13432] netlink_sendmsg+0x5c8/0x6f0 [ 216.466768][T13432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.466806][T13432] ____sys_sendmsg+0x5af/0x600 [ 216.466869][T13432] ___sys_sendmsg+0x195/0x1e0 [ 216.466908][T13432] __x64_sys_sendmsg+0xd4/0x160 [ 216.466936][T13432] x64_sys_call+0x17ba/0x3000 [ 216.466969][T13432] do_syscall_64+0xc0/0x2a0 [ 216.467017][T13432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.467077][T13432] RIP: 0033:0x7f6b7adaaeb9 [ 216.467098][T13432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.467161][T13432] RSP: 002b:00007f6b79807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.467189][T13432] RAX: ffffffffffffffda RBX: 00007f6b7b025fa0 RCX: 00007f6b7adaaeb9 [ 216.467208][T13432] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 216.467269][T13432] RBP: 00007f6b79807090 R08: 0000000000000000 R09: 0000000000000000 [ 216.467286][T13432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.467303][T13432] R13: 00007f6b7b026038 R14: 00007f6b7b025fa0 R15: 00007fffd2eca7f8 [ 216.467328][T13432] [ 216.799005][T13447] vhci_hcd vhci_hcd.4: invalid port number 254 [ 216.831068][T13307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.936884][T13461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3050'. [ 217.092675][T13480] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3049'. [ 217.249823][T13307] veth0_vlan: entered promiscuous mode [ 217.271439][T13307] veth1_vlan: entered promiscuous mode [ 217.310046][T13307] veth0_macvtap: entered promiscuous mode [ 217.329561][T13307] veth1_macvtap: entered promiscuous mode [ 217.362017][T13307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.393423][T13307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.655129][T13507] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3058'. [ 217.688028][T13500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=13500 comm=syz.0.3055 [ 217.848235][T13510] vhci_hcd vhci_hcd.4: invalid port number 254 [ 218.120631][T13529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3063'. [ 218.464423][T13541] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3070'. [ 218.569274][T13547] vhci_hcd vhci_hcd.4: invalid port number 254 [ 218.654993][T13539] loop8: detected capacity change from 0 to 1024 [ 218.692203][T13550] lo speed is unknown, defaulting to 1000 [ 218.700328][T13550] lo speed is unknown, defaulting to 1000 [ 218.726097][T13550] lo speed is unknown, defaulting to 1000 [ 218.794702][T13530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3066'. [ 218.961372][T13539] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.011589][T13550] infiniband syz0: set active [ 219.017681][T13550] infiniband syz0: added lo [ 219.022468][T13535] lo speed is unknown, defaulting to 1000 [ 219.023393][T10600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.080151][T13550] RDS/IB: syz0: added [ 219.110228][T13550] smc: adding ib device syz0 with port count 1 [ 219.161559][T13550] smc: ib device syz0 port 1 has no pnetid [ 219.167943][ T3402] lo speed is unknown, defaulting to 1000 [ 219.191607][T13550] lo speed is unknown, defaulting to 1000 [ 219.259532][T13550] lo speed is unknown, defaulting to 1000 [ 219.275594][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3077'. [ 219.310566][T13550] lo speed is unknown, defaulting to 1000 [ 219.352924][T13550] lo speed is unknown, defaulting to 1000 [ 219.396771][T13550] lo speed is unknown, defaulting to 1000 [ 219.440294][T13550] lo speed is unknown, defaulting to 1000 [ 219.493669][T13550] lo speed is unknown, defaulting to 1000 [ 219.533248][T13572] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3079'. [ 219.653516][T13576] netlink: 'syz.2.3081': attribute type 2 has an invalid length. [ 219.670949][T13576] loop2: detected capacity change from 0 to 2048 [ 219.680212][T13576] EXT4-fs: Ignoring removed oldalloc option [ 219.693901][T13576] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802c028, mo2=0002] [ 219.707312][T13576] System zones: 0-7 [ 219.727580][T13576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.814049][T13576] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.3081: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 219.871155][T13576] EXT4-fs (loop2): Remounting filesystem read-only [ 220.111313][T13595] loop8: detected capacity change from 0 to 512 [ 220.290771][T13595] EXT4-fs (loop8): 1 orphan inode deleted [ 220.308404][T13595] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.321818][ T8378] EXT4-fs error (device loop8): ext4_release_dquot:7022: comm kworker/u8:59: Failed to release dquot type 1 [ 220.570784][T10600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.749801][T13307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.886981][T13634] vhci_hcd vhci_hcd.4: invalid port number 254 [ 221.046332][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3094'. [ 221.103283][T13643] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 221.142149][T13643] bond2 (unregistering): Released all slaves [ 221.315411][T13652] netlink: 'syz.8.3100': attribute type 1 has an invalid length. [ 221.331098][T13652] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.359689][T13652] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.368282][T13652] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 221.386513][T13652] bond2: (slave gre1): Error -95 calling set_mac_address [ 221.630666][T13662] FAULT_INJECTION: forcing a failure. [ 221.630666][T13662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.645009][T13662] CPU: 0 UID: 0 PID: 13662 Comm: syz.8.3103 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 221.645043][T13662] Tainted: [W]=WARN [ 221.645050][T13662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 221.645072][T13662] Call Trace: [ 221.645082][T13662] [ 221.645093][T13662] __dump_stack+0x1d/0x30 [ 221.645193][T13662] dump_stack_lvl+0x95/0xd0 [ 221.645224][T13662] dump_stack+0x15/0x1b [ 221.645252][T13662] should_fail_ex+0x263/0x280 [ 221.645345][T13662] should_fail+0xb/0x20 [ 221.645374][T13662] should_fail_usercopy+0x1a/0x20 [ 221.645417][T13662] _copy_to_user+0x20/0xa0 [ 221.645455][T13662] simple_read_from_buffer+0xb5/0x130 [ 221.645522][T13662] proc_fail_nth_read+0x10e/0x150 [ 221.645567][T13662] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 221.645728][T13662] vfs_read+0x1ab/0x7f0 [ 221.645756][T13662] ? __rcu_read_unlock+0x4e/0x70 [ 221.645798][T13662] ? __fget_files+0x184/0x1c0 [ 221.645822][T13662] ? put_task_struct_rcu_user+0x5e/0x90 [ 221.645915][T13662] ? mutex_lock+0x57/0x90 [ 221.645945][T13662] ksys_read+0xdc/0x1a0 [ 221.645971][T13662] __x64_sys_read+0x40/0x50 [ 221.646039][T13662] x64_sys_call+0x2889/0x3000 [ 221.646113][T13662] do_syscall_64+0xc0/0x2a0 [ 221.646153][T13662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.646187][T13662] RIP: 0033:0x7f41ef01b78e [ 221.646209][T13662] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 221.646233][T13662] RSP: 002b:00007f41edab6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 221.646260][T13662] RAX: ffffffffffffffda RBX: 00007f41edab76c0 RCX: 00007f41ef01b78e [ 221.646316][T13662] RDX: 000000000000000f RSI: 00007f41edab70a0 RDI: 0000000000000004 [ 221.646332][T13662] RBP: 00007f41edab7090 R08: 0000000000000000 R09: 0000000000000000 [ 221.646349][T13662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.646366][T13662] R13: 00007f41ef2d6038 R14: 00007f41ef2d5fa0 R15: 00007ffdf068d528 [ 221.646392][T13662] [ 221.979672][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 221.979694][ T29] audit: type=1400 audit(6116.389:18568): avc: denied { bind } for pid=13664 comm="syz.0.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 222.006065][ T29] audit: type=1400 audit(6116.389:18569): avc: denied { listen } for pid=13664 comm="syz.0.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 222.026425][ T29] audit: type=1400 audit(6116.399:18570): avc: denied { read } for pid=13666 comm="syz.8.3106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 222.027749][T13667] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 222.158841][ T29] audit: type=1400 audit(6116.494:18571): avc: denied { accept } for pid=13664 comm="syz.0.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 222.261117][T13670] lo speed is unknown, defaulting to 1000 [ 222.570334][T13672] loop2: detected capacity change from 0 to 1024 [ 222.865319][ T29] audit: type=1400 audit(6117.337:18572): avc: denied { create } for pid=13719 comm="syz.4.3116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=pppox_socket permissive=1 [ 222.910886][T13724] FAULT_INJECTION: forcing a failure. [ 222.910886][T13724] name failslab, interval 1, probability 0, space 0, times 0 [ 222.923604][T13724] CPU: 1 UID: 0 PID: 13724 Comm: syz.0.3117 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 222.923641][T13724] Tainted: [W]=WARN [ 222.923649][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 222.923663][T13724] Call Trace: [ 222.923670][T13724] [ 222.923732][T13724] __dump_stack+0x1d/0x30 [ 222.923819][T13724] dump_stack_lvl+0x95/0xd0 [ 222.923845][T13724] dump_stack+0x15/0x1b [ 222.923867][T13724] should_fail_ex+0x263/0x280 [ 222.923949][T13724] should_failslab+0x8c/0xb0 [ 222.923975][T13724] kmem_cache_alloc_noprof+0x68/0x490 [ 222.924058][T13724] ? security_file_alloc+0x32/0xf0 [ 222.924143][T13724] security_file_alloc+0x32/0xf0 [ 222.924170][T13724] init_file+0x5c/0x1c0 [ 222.924202][T13724] alloc_empty_file+0x8b/0x200 [ 222.924232][T13724] alloc_file_pseudo+0xf6/0x190 [ 222.924302][T13724] __shmem_file_setup+0x1dd/0x210 [ 222.924342][T13724] shmem_file_setup+0x3b/0x50 [ 222.924416][T13724] memfd_alloc_file+0x4e/0x300 [ 222.924559][T13724] __se_sys_memfd_create+0x2e1/0x3b0 [ 222.924596][T13724] __x64_sys_memfd_create+0x31/0x40 [ 222.924634][T13724] x64_sys_call+0x28cb/0x3000 [ 222.924711][T13724] do_syscall_64+0xc0/0x2a0 [ 222.924752][T13724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.924779][T13724] RIP: 0033:0x7fdd996baeb9 [ 222.924802][T13724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.924827][T13724] RSP: 002b:00007fdd98116e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 222.924853][T13724] RAX: ffffffffffffffda RBX: 0000000000000b80 RCX: 00007fdd996baeb9 [ 222.924871][T13724] RDX: 00007fdd98116ee0 RSI: 0000000000000000 RDI: 00007fdd99727333 [ 222.924887][T13724] RBP: 0000200000000c40 R08: 00000000ffffffff R09: 0000000000000000 [ 222.924908][T13724] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000017c0 [ 222.924922][T13724] R13: 00007fdd98116ee0 R14: 00007fdd98116ea0 R15: 0000200000000000 [ 222.924947][T13724] [ 223.154934][T13672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.311684][T13737] netlink: 'syz.0.3118': attribute type 1 has an invalid length. [ 223.334522][T13307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.538089][T13749] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3121'. [ 223.621856][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3122'. [ 223.841438][T13760] loop4: detected capacity change from 0 to 1024 [ 223.862614][T13760] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.968449][T13157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.027290][T13765] pim6reg: entered allmulticast mode [ 224.058562][T13765] pim6reg: left allmulticast mode [ 224.674215][T13775] lo speed is unknown, defaulting to 1000 [ 224.804974][T13778] pim6reg: entered allmulticast mode [ 224.817623][T13778] pim6reg: left allmulticast mode [ 224.996750][ T29] audit: type=1400 audit(6119.570:18573): avc: denied { create } for pid=13789 comm="syz.0.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 225.046222][ T29] audit: type=1400 audit(6119.612:18574): avc: denied { map } for pid=13789 comm="syz.0.3135" path="socket:[43592]" dev="sockfs" ino=43592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 225.070381][ T29] audit: type=1400 audit(6119.612:18575): avc: denied { read } for pid=13789 comm="syz.0.3135" path="socket:[43592]" dev="sockfs" ino=43592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 225.165845][T13796] team0 (unregistering): Port device team_slave_0 removed [ 225.189976][T13796] team0 (unregistering): Port device team_slave_1 removed [ 225.285951][ T29] audit: type=1326 audit(6119.885:18576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.4.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7adaaeb9 code=0x7ffc0000 [ 225.311821][ T29] audit: type=1326 audit(6119.885:18577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13807 comm="syz.4.3140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7adaaeb9 code=0x7ffc0000 [ 225.448882][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'. [ 225.668771][T13829] vhci_hcd vhci_hcd.4: invalid port number 254 [ 225.707838][T13831] loop4: detected capacity change from 0 to 512 [ 225.788799][T13838] netlink: 'syz.4.3154': attribute type 8 has an invalid length. [ 225.797354][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3154'. [ 225.816773][T13838] bond0: entered promiscuous mode [ 225.821916][T13838] bond_slave_0: entered promiscuous mode [ 225.828594][T13838] bond_slave_1: entered promiscuous mode [ 225.838831][T13838] gretap0: entered promiscuous mode [ 225.845634][T13838] bond0: left promiscuous mode [ 225.850546][T13838] bond_slave_0: left promiscuous mode [ 225.856963][T13838] bond_slave_1: left promiscuous mode [ 225.881407][T13838] gretap0: left promiscuous mode [ 226.002774][T13851] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3159'. [ 226.025060][T13853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3160'. [ 226.209914][T13848] loop4: detected capacity change from 0 to 512 [ 226.255490][T13859] vhci_hcd vhci_hcd.4: invalid port number 254 [ 226.323672][T13848] EXT4-fs error (device loop4): ext4_init_orphan_info:583: comm syz.4.3158: inode #0: comm syz.4.3158: iget: illegal inode # [ 226.362778][T13863] netlink: 312 bytes leftover after parsing attributes in process `syz.8.3163'. [ 226.373502][T13848] EXT4-fs (loop4): get orphan inode failed [ 226.404581][T13848] EXT4-fs (loop4): mount failed [ 226.518467][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3164'. [ 226.703409][T13848] loop4: detected capacity change from 0 to 512 [ 226.788265][T13848] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 226.817237][T13877] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3167'. [ 226.837787][T13848] System zones: 1-12 [ 226.901214][T13848] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3158: invalid indirect mapped block 1819239214 (level 1) [ 226.946746][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3171'. [ 226.974906][T13848] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3158: bg 0: block 361: padding at end of block bitmap is not set [ 227.003888][T13848] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 227.014261][T13848] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.3158: attempt to clear invalid blocks 33619980 len 1 [ 227.049839][T13848] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.3158: invalid indirect mapped block 1819239214 (level 0) [ 227.092391][T13848] EXT4-fs (loop4): 1 truncate cleaned up [ 227.129854][T13892] netlink: 'syz.8.3174': attribute type 4 has an invalid length. [ 227.134261][T13848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.439583][T13904] netlink: 'syz.0.3178': attribute type 3 has an invalid length. [ 227.448177][T13904] netlink: 'syz.0.3178': attribute type 1 has an invalid length. [ 227.482779][T13906] tipc: Started in network mode [ 227.487729][T13906] tipc: Node identity a2eddcb87577, cluster identity 4711 [ 227.495052][T13906] tipc: Enabled bearer , priority 0 [ 227.536510][T13906] syzkaller0: entered promiscuous mode [ 227.538108][T13157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.542045][T13906] syzkaller0: entered allmulticast mode [ 227.663938][T13911] syzkaller0: mtu less than device minimum [ 227.676973][T13923] FAULT_INJECTION: forcing a failure. [ 227.676973][T13923] name failslab, interval 1, probability 0, space 0, times 0 [ 227.690509][T13923] CPU: 1 UID: 0 PID: 13923 Comm: syz.0.3184 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 227.690550][T13923] Tainted: [W]=WARN [ 227.690559][T13923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 227.690577][T13923] Call Trace: [ 227.690587][T13923] [ 227.690634][T13923] __dump_stack+0x1d/0x30 [ 227.690665][T13923] dump_stack_lvl+0x95/0xd0 [ 227.690694][T13923] dump_stack+0x15/0x1b [ 227.690757][T13923] should_fail_ex+0x263/0x280 [ 227.690800][T13923] should_failslab+0x8c/0xb0 [ 227.690827][T13923] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 227.690934][T13923] ? __alloc_skb+0x2f0/0x4b0 [ 227.690975][T13923] __alloc_skb+0x2f0/0x4b0 [ 227.691006][T13923] ? __alloc_skb+0x219/0x4b0 [ 227.691112][T13923] _sctp_make_chunk+0x59/0x210 [ 227.691146][T13923] sctp_make_init+0x404/0x8e0 [ 227.691185][T13923] sctp_sf_do_prm_asoc+0x7c/0x1d0 [ 227.691239][T13923] sctp_do_sm+0xd0/0x3330 [ 227.691277][T13923] ? xfrm_lookup_route+0xd6/0x110 [ 227.691386][T13923] sctp_primitive_ASSOCIATE+0x71/0x90 [ 227.691468][T13923] sctp_sendmsg_to_asoc+0xa9f/0xf50 [ 227.691501][T13923] ? sctp_connect_new_asoc+0x29c/0x3a0 [ 227.691534][T13923] sctp_sendmsg+0x13b9/0x1d60 [ 227.691575][T13923] ? selinux_socket_sendmsg+0x192/0x1c0 [ 227.691667][T13923] ? __pfx_sctp_sendmsg+0x10/0x10 [ 227.691687][T13923] inet_sendmsg+0xc5/0xd0 [ 227.691737][T13923] ____sys_sendmsg+0x53a/0x600 [ 227.691870][T13923] ___sys_sendmsg+0x195/0x1e0 [ 227.691919][T13923] __x64_sys_sendmsg+0xd4/0x160 [ 227.691949][T13923] x64_sys_call+0x17ba/0x3000 [ 227.691987][T13923] do_syscall_64+0xc0/0x2a0 [ 227.692075][T13923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.692098][T13923] RIP: 0033:0x7fdd996baeb9 [ 227.692200][T13923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.692226][T13923] RSP: 002b:00007fdd98117028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.692252][T13923] RAX: ffffffffffffffda RBX: 00007fdd99935fa0 RCX: 00007fdd996baeb9 [ 227.692272][T13923] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000003 [ 227.692290][T13923] RBP: 00007fdd98117090 R08: 0000000000000000 R09: 0000000000000000 [ 227.692308][T13923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.692339][T13923] R13: 00007fdd99936038 R14: 00007fdd99935fa0 R15: 00007fffb624e1a8 [ 227.692363][T13923] [ 228.016130][T13938] sock: sock_timestamping_bind_phc: sock not bind to device [ 228.026834][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 228.026849][ T29] audit: type=1400 audit(6123.768:18603): avc: denied { setopt } for pid=13936 comm="syz.0.3190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 228.161285][ T29] audit: type=1400 audit(6123.904:18604): avc: denied { accept } for pid=13953 comm="syz.2.3193" lport=59622 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 228.174099][T13954] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 228.261688][T13973] Cannot find add_set index 1 as target [ 228.376477][T13905] tipc: Resetting bearer [ 228.383797][T13973] __nla_validate_parse: 7 callbacks suppressed [ 228.383816][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3195'. [ 228.404619][T13905] tipc: Disabling bearer [ 228.435527][T13951] lo speed is unknown, defaulting to 1000 [ 228.447626][ T8382] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.473644][T13985] loop4: detected capacity change from 0 to 128 [ 228.507822][T13985] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.545341][T13992] vhci_hcd vhci_hcd.4: invalid port number 254 [ 228.550935][T13157] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.588718][ T8382] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.675187][ T8382] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.764198][ T8382] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.811683][T14016] loop8: detected capacity change from 0 to 512 [ 228.864771][T13951] chnl_net:caif_netlink_parms(): no params data found [ 228.894765][T14016] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 228.927587][T14016] EXT4-fs (loop8): external journal device major/minor numbers have changed [ 228.953988][T14016] EXT4-fs (loop8): failed to open journal device unknown-block(8,0) -16 [ 229.000205][T14016] Cannot find add_set index 0 as target [ 229.033868][T14016] program syz.8.3208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.045169][T14045] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3214'. [ 229.115668][ T8382] bridge_slave_1: left allmulticast mode [ 229.122609][ T8382] bridge_slave_1: left promiscuous mode [ 229.128618][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.155092][ T8382] bridge_slave_0: left allmulticast mode [ 229.160836][ T8382] bridge_slave_0: left promiscuous mode [ 229.167830][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.209932][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3216'. [ 229.221519][T14025] SELinux: failed to load policy [ 229.349685][ T8382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.363314][ T23] IPVS: starting estimator thread 0... [ 229.371363][ T8382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.385239][ T8382] bond0 (unregistering): Released all slaves [ 229.393776][ T8382] bond1 (unregistering): Released all slaves [ 229.412079][ T29] audit: type=1326 audit(6125.217:18605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7adaaeb9 code=0x7ffc0000 [ 229.416543][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3221'. [ 229.456423][T13951] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.464763][T13951] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.473180][T14083] IPVS: using max 1968 ests per chain, 98400 per kthread [ 229.481646][T13951] bridge_slave_0: entered allmulticast mode [ 229.488304][T13951] bridge_slave_0: entered promiscuous mode [ 229.490376][ T29] audit: type=1326 audit(6125.217:18606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f6b7adaaeb9 code=0x7ffc0000 [ 229.518305][ T29] audit: type=1326 audit(6125.227:18607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b7adaaeb9 code=0x7ffc0000 [ 229.541658][ T29] audit: type=1326 audit(6125.227:18608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6b7adac747 code=0x7ffc0000 [ 229.565407][ T29] audit: type=1326 audit(6125.227:18609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 229.588592][ T29] audit: type=1326 audit(6125.227:18610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 229.612297][ T29] audit: type=1326 audit(6125.227:18611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 229.635438][ T29] audit: type=1326 audit(6125.227:18612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14076 comm="syz.4.3221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6b7ad6b78e code=0x7ffc0000 [ 229.669933][T13951] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.677115][T13951] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.685192][T13951] bridge_slave_1: entered allmulticast mode [ 229.715600][T13951] bridge_slave_1: entered promiscuous mode [ 229.752665][T14091] loop8: detected capacity change from 0 to 2048 [ 229.764444][T14077] loop4: detected capacity change from 0 to 4096 [ 229.777772][T14077] EXT4-fs: Ignoring removed oldalloc option [ 229.783903][T14077] EXT4-fs: Ignoring removed orlov option [ 229.789691][T13951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.795187][T13951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.828024][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.836572][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.847949][T14077] EXT4-fs: inline encryption not supported [ 229.857695][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.858751][T14091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.865163][ T8382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.893130][T14077] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 229.903342][ T8382] veth1_macvtap: left promiscuous mode [ 229.910303][ T8382] veth0_macvtap: left promiscuous mode [ 229.919464][T14077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.935324][ T8382] veth1_vlan: left promiscuous mode [ 229.941744][ T8382] veth0_vlan: left promiscuous mode [ 229.980234][T14091] SELinux: failed to load policy [ 230.005879][T14091] FAULT_INJECTION: forcing a failure. [ 230.005879][T14091] name failslab, interval 1, probability 0, space 0, times 0 [ 230.019820][T14091] CPU: 0 UID: 0 PID: 14091 Comm: syz.8.3224 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 230.019894][T14091] Tainted: [W]=WARN [ 230.019904][T14091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.019967][T14091] Call Trace: [ 230.020021][T14091] [ 230.020033][T14091] __dump_stack+0x1d/0x30 [ 230.020067][T14091] dump_stack_lvl+0x95/0xd0 [ 230.020096][T14091] dump_stack+0x15/0x1b [ 230.020166][T14091] should_fail_ex+0x263/0x280 [ 230.020208][T14091] should_failslab+0x8c/0xb0 [ 230.020239][T14091] __kmalloc_noprof+0xb8/0x580 [ 230.020311][T14091] ? alloc_pipe_info+0x1c8/0x340 [ 230.020337][T14091] ? alloc_pipe_info+0xad/0x340 [ 230.020419][T14091] alloc_pipe_info+0x1c8/0x340 [ 230.020446][T14091] create_pipe_files+0x67/0x440 [ 230.020471][T14091] __do_pipe_flags+0x44/0x140 [ 230.020493][T14091] do_pipe2+0x61/0x140 [ 230.020594][T14091] ? ksys_write+0x194/0x1a0 [ 230.020616][T14091] __x64_sys_pipe2+0x30/0x40 [ 230.020638][T14091] x64_sys_call+0x1de2/0x3000 [ 230.020686][T14091] do_syscall_64+0xc0/0x2a0 [ 230.020732][T14091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.020761][T14091] RIP: 0033:0x7f41ef05aeb9 [ 230.020782][T14091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.020823][T14091] RSP: 002b:00007f41edab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 230.020851][T14091] RAX: ffffffffffffffda RBX: 00007f41ef2d5fa0 RCX: 00007f41ef05aeb9 [ 230.020870][T14091] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001900 [ 230.020888][T14091] RBP: 00007f41edab7090 R08: 0000000000000000 R09: 0000000000000000 [ 230.020934][T14091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.020947][T14091] R13: 00007f41ef2d6038 R14: 00007f41ef2d5fa0 R15: 00007ffdf068d528 [ 230.020968][T14091] [ 230.242875][T10600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.260695][ T8382] team0 (unregistering): Port device team_slave_1 removed [ 230.283183][T13157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.292857][ T8382] team0 (unregistering): Port device team_slave_0 removed [ 230.347510][T14113] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3227'. [ 230.477767][T13951] team0: Port device team_slave_0 added [ 230.511123][T13951] team0: Port device team_slave_1 added [ 230.548439][T13951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.555572][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.582608][T13951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.611570][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3232'. [ 230.626439][T13951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.634583][T13951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.661705][T13951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.702004][T13951] hsr_slave_0: entered promiscuous mode [ 230.708256][T13951] hsr_slave_1: entered promiscuous mode [ 230.714564][T13951] debugfs: 'hsr0' already exists in 'hsr' [ 230.721513][T13951] Cannot create hsr debugfs directory [ 230.740057][T14128] loop4: detected capacity change from 0 to 512 [ 230.765293][T14128] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 230.800421][T14128] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.3233: iget: bad i_size value: 38620345925642 [ 230.802128][T14130] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3234'. [ 230.844688][T14140] loop8: detected capacity change from 0 to 512 [ 230.866164][T14128] EXT4-fs (loop4): Remounting filesystem read-only [ 230.873415][T14140] EXT4-fs: inline encryption not supported [ 230.918287][T14128] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.950141][T14140] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.004768][T13157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.083977][T10600] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.093243][T14169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3241'. [ 231.108094][T14169] IPv6: Can't replace route, no match found [ 231.118261][T13951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.150688][T13951] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.175217][T13535] Process accounting resumed [ 231.191291][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.198457][ T8381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.234819][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.241975][ T8381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.255847][T14184] loop4: detected capacity change from 0 to 1024 [ 231.297524][T13951] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.308110][T13951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.338872][T14184] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.542799][T13951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.594030][T14220] vhci_hcd vhci_hcd.4: invalid port number 254 [ 231.669008][T14227] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3254'. [ 231.857488][T14247] loop2: detected capacity change from 0 to 1024 [ 231.889195][T13951] veth0_vlan: entered promiscuous mode [ 231.912461][T13951] veth1_vlan: entered promiscuous mode [ 231.942415][T14247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.988423][T13951] veth0_macvtap: entered promiscuous mode [ 232.037730][T13951] veth1_macvtap: entered promiscuous mode [ 232.048106][T13307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.076241][T13951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.107686][T13951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.170045][T14278] netlink: 312 bytes leftover after parsing attributes in process `syz.8.3262'. [ 232.185532][T14272] rtc_cmos 00:00: Alarms can be up to one day in the future [ 232.199078][T13157] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.336836][T14288] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 232.351665][T14291] vhci_hcd vhci_hcd.4: invalid port number 254 [ 232.360297][T14302] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 232.393598][ T8376] Bluetooth: hci0: Frame reassembly failed (-84) [ 232.438752][T10777] rtc_cmos 00:00: Alarms can be up to one day in the future [ 232.447786][T10777] rtc_cmos 00:00: Alarms can be up to one day in the future [ 232.456804][T10777] rtc_cmos 00:00: Alarms can be up to one day in the future [ 232.465715][T10777] rtc_cmos 00:00: Alarms can be up to one day in the future [ 232.474306][T10777] rtc rtc0: __rtc_set_alarm: err=-22 [ 232.704324][T14331] loop2: detected capacity change from 0 to 1024 [ 232.722870][T14331] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.970131][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 232.970185][ T29] audit: type=1400 audit(6128.954:18622): avc: denied { getopt } for pid=14332 comm="syz.9.3278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 233.074182][T14347] lo speed is unknown, defaulting to 1000 [ 233.088111][T14345] vhci_hcd vhci_hcd.4: invalid port number 254 [ 233.158667][T14350] __nla_validate_parse: 2 callbacks suppressed [ 233.158688][T14350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3282'. [ 233.174630][T14350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3282'. [ 233.183702][T14350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3282'. [ 233.216636][T14350] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 233.255759][T14354] netlink: 'syz.0.3283': attribute type 83 has an invalid length. [ 233.302265][T14356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3284'. [ 233.372385][T13307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.533929][ T29] audit: type=1400 audit(6129.542:18623): avc: denied { create } for pid=14368 comm="syz.4.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 233.626785][T14378] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3292'. [ 233.676816][T14367] loop2: detected capacity change from 0 to 1024 [ 233.770632][T14367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.785704][ T36] IPVS: starting estimator thread 0... [ 233.798830][T14391] netlink: 'syz.4.3295': attribute type 4 has an invalid length. [ 233.870962][T14390] IPVS: using max 1584 ests per chain, 79200 per kthread [ 233.913988][T13307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.960271][T14369] IPVS: starting estimator thread 0... [ 234.052981][T14397] IPVS: using max 2112 ests per chain, 105600 per kthread [ 234.100307][T14407] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3303'. [ 234.186349][T14411] macvlan2: entered promiscuous mode [ 234.191716][T14411] macvlan2: entered allmulticast mode [ 234.301977][T14415] vhci_hcd vhci_hcd.4: invalid port number 254 [ 234.327210][T14421] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3310'. [ 234.356553][ T5383] Bluetooth: hci0: command 0x1003 tx timeout [ 234.359553][ T3785] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 234.375947][T14425] netlink: 'syz.2.3311': attribute type 4 has an invalid length. [ 234.377360][T14423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3309'. [ 234.464144][T14434] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 234.536353][T14442] FAULT_INJECTION: forcing a failure. [ 234.536353][T14442] name failslab, interval 1, probability 0, space 0, times 0 [ 234.550006][T14442] CPU: 1 UID: 0 PID: 14442 Comm: syz.4.3318 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.550043][T14442] Tainted: [W]=WARN [ 234.550053][T14442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.550107][T14442] Call Trace: [ 234.550114][T14442] [ 234.550123][T14442] __dump_stack+0x1d/0x30 [ 234.550154][T14442] dump_stack_lvl+0x95/0xd0 [ 234.550182][T14442] dump_stack+0x15/0x1b [ 234.550205][T14442] should_fail_ex+0x263/0x280 [ 234.550268][T14442] should_failslab+0x8c/0xb0 [ 234.550299][T14442] kmem_cache_alloc_noprof+0x68/0x490 [ 234.550342][T14442] ? skb_clone+0x151/0x1f0 [ 234.550368][T14442] skb_clone+0x151/0x1f0 [ 234.550391][T14442] __netlink_deliver_tap+0x2c9/0x500 [ 234.550495][T14442] netlink_unicast+0x66b/0x690 [ 234.550534][T14442] netlink_sendmsg+0x5c8/0x6f0 [ 234.550556][T14442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 234.550628][T14442] ____sys_sendmsg+0x5af/0x600 [ 234.550734][T14442] ___sys_sendmsg+0x195/0x1e0 [ 234.550770][T14442] __x64_sys_sendmsg+0xd4/0x160 [ 234.550794][T14442] x64_sys_call+0x17ba/0x3000 [ 234.550902][T14442] do_syscall_64+0xc0/0x2a0 [ 234.550951][T14442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.550979][T14442] RIP: 0033:0x7f6b7adaaeb9 [ 234.550999][T14442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.551096][T14442] RSP: 002b:00007f6b79807028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.551124][T14442] RAX: ffffffffffffffda RBX: 00007f6b7b025fa0 RCX: 00007f6b7adaaeb9 [ 234.551144][T14442] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 234.551161][T14442] RBP: 00007f6b79807090 R08: 0000000000000000 R09: 0000000000000000 [ 234.551178][T14442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.551223][T14442] R13: 00007f6b7b026038 R14: 00007f6b7b025fa0 R15: 00007fffd2eca7f8 [ 234.551248][T14442] [ 234.551720][ T23] IPVS: starting estimator thread 0... [ 234.569164][T14445] netlink: 312 bytes leftover after parsing attributes in process `syz.2.3319'. [ 234.869405][T14450] vhci_hcd vhci_hcd.4: invalid port number 254 [ 234.877111][T14443] IPVS: using max 2064 ests per chain, 103200 per kthread [ 235.106849][T14467] netlink: 96 bytes leftover after parsing attributes in process `syz.9.3326'. [ 235.159124][ T29] audit: type=1400 audit(6131.253:18624): avc: denied { ioctl } for pid=14468 comm="syz.9.3327" path="socket:[45045]" dev="sockfs" ino=45045 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 235.331182][T14477] SELinux: failed to load policy [ 235.486682][ T2] ================================================================== [ 235.494837][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 235.501387][ T2] [ 235.503734][ T2] read-write to 0xffffffff86a60018 of 4 bytes by task 10600 on cpu 1: [ 235.511906][ T2] free_pid+0xb9/0x1d0 [ 235.516023][ T2] free_pids+0x54/0xb0 [ 235.520144][ T2] release_task+0x9a7/0xb60 [ 235.524674][ T2] wait_consider_task+0x1160/0x1670 [ 235.529899][ T2] __do_wait+0xf9/0x510 [ 235.534160][ T2] do_wait+0xb6/0x240 [ 235.538167][ T2] kernel_wait4+0x19f/0x210 [ 235.542694][ T2] __x64_sys_wait4+0x91/0x120 [ 235.547398][ T2] x64_sys_call+0x28ec/0x3000 [ 235.552106][ T2] do_syscall_64+0xc0/0x2a0 [ 235.556636][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.562556][ T2] [ 235.564894][ T2] read to 0xffffffff86a60018 of 4 bytes by task 2 on cpu 0: [ 235.572195][ T2] copy_process+0x16e4/0x1f10 [ 235.576911][ T2] kernel_clone+0x16b/0x5b0 [ 235.581445][ T2] kernel_thread+0xe5/0x120 [ 235.585977][ T2] kthreadd+0x26b/0x330 [ 235.590158][ T2] ret_from_fork+0x148/0x280 [ 235.594780][ T2] ret_from_fork_asm+0x1a/0x30 [ 235.599572][ T2] [ 235.601930][ T2] value changed: 0x80000172 -> 0x80000171 [ 235.607665][ T2] [ 235.610002][ T2] Reported by Kernel Concurrency Sanitizer on: [ 235.616174][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 235.627061][ T2] Tainted: [W]=WARN [ 235.630900][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.640984][ T2] ================================================================== [ 235.671801][T14504] vhci_hcd vhci_hcd.4: invalid port number 254 [ 235.761796][T14495] netlink: 'syz.4.3338': attribute type 5 has an invalid length.