last executing test programs: 2m21.762644057s ago: executing program 2 (id=1165): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x810, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_forget\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) timer_create(0x7, &(0x7f00000004c0)={0x0, 0x17, 0x2, @thr={&(0x7f00000003c0)="98ccb5f42c8e70592e5b9843fa619623c40ee4f0286b45a7d46544dd85b3b2ec67305f797688063daa2af5aff2a417559d0574fb19f54a85aabc65161e97d8aa62b3c7a1aaa3b8afa3b4c93c533c14a68ba9497618e0c8d931cab3e8ccc4085a5d272a8864b23c01c18044218d7eb1f9f93dceb795fce1bc55abf187b55c2361bd5851fa733119326c7f50776bc13db2b4ccd544f39288935ea4f9b0d0883703c25f", &(0x7f0000000480)="c6fda6b6b2d5afd483aac470f0569ccc778af0bdcb150f"}}, &(0x7f0000000500)) fcntl$lock(r4, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x393, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1020008}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x5c, r5, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 2m21.674083949s ago: executing program 2 (id=1167): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c48a, &(0x7f0000004040)=ANY=[@ANYBLOB="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"], 0x6, 0x2d5, &(0x7f0000000980)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x53, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x3) (fail_nth: 1) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 2m20.727619743s ago: executing program 2 (id=1177): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000003, 0x810, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_forget\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x88}, 0x1, 0x7}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) timer_create(0x7, &(0x7f00000004c0)={0x0, 0x17, 0x2, @thr={&(0x7f00000003c0)="98ccb5f42c8e70592e5b9843fa619623c40ee4f0286b45a7d46544dd85b3b2ec67305f797688063daa2af5aff2a417559d0574fb19f54a85aabc65161e97d8aa62b3c7a1aaa3b8afa3b4c93c533c14a68ba9497618e0c8d931cab3e8ccc4085a5d272a8864b23c01c18044218d7eb1f9f93dceb795fce1bc55abf187b55c2361bd5851fa733119326c7f50776bc13db2b4ccd544f39288935ea4f9b0d0883703c25f", &(0x7f0000000480)="c6fda6b6b2d5afd483aac470f0569ccc778af0bdcb150f"}}, &(0x7f0000000500)) fcntl$lock(r4, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c9e00000002001300027f0000000000000000004105000600200000000a000000000000000005000201080f00e0001f080000000000092000000000000200010020e9ffeeffff0702000098a805000500ea0000000a"], 0x80}}, 0x0) sendmmsg(r6, &(0x7f0000000180), 0x393, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8000009, 0x5, 0x1}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendmsg$NL80211_CMD_SET_MAC_ACL(r4, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1020008}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x5c, r5, 0x10, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8}, 0x0) 2m19.63146058s ago: executing program 2 (id=1181): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) 2m19.390347803s ago: executing program 2 (id=1185): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)}], 0x1, 0x0, 0x0, 0x11000000}, 0x14) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r2, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000800020000000000000001000004080000000000000002000000200000000000004e00000009030000000000000000000004000000000000"], 0x0, 0x4a}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="000010000100"/28], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000002c0)=0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x143900, 0x8f) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x20, 0x40, 0x7000, 0x4, {{0x12, 0x4, 0x0, 0x8, 0x48, 0x64, 0x0, 0x6, 0x29, 0x0, @broadcast, @loopback, {[@rr={0x7, 0x23, 0x35, [@multicast1, @multicast2, @multicast2, @multicast1, @loopback, @local, @remote, @multicast2]}, @timestamp={0x44, 0x10, 0xe0, 0x0, 0xe, [0x2, 0x5, 0x3]}]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="18090000ed899000000000000500000018430000070000000000000000000000850000007200000085000000cc000000852000000100000085a0000002000000"], &(0x7f00000001c0)='GPL\x00', 0x6584, 0x7a, &(0x7f0000000240)=""/122, 0x40f00, 0x0, '\x00', r8, 0x25, r1, 0x8, &(0x7f0000000380)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000003c0)=[{0x3, 0x3, 0x10, 0x5}, {0x4, 0x4, 0xa, 0x3}, {0x1, 0x1, 0xc, 0x2}], 0x10, 0x4}, 0x94) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x415}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x1}, 0x18) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) close_range(r9, 0xffffffffffffffff, 0x200000000000000) 2m18.93367684s ago: executing program 2 (id=1188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x84) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/242, 0xf2}], 0x1, 0x2, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0xf16, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10cd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb1f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x463}]}, 0x44}, 0x1, 0x0, 0x0, 0x200088c4}, 0x4008880) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e74657200"], 0x118}}, 0x0) 2m3.937182163s ago: executing program 32 (id=1188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x84) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/242, 0xf2}], 0x1, 0x2, 0x2) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x0, 0xf16, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x10cd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb1f}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x137b}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x463}]}, 0x44}, 0x1, 0x0, 0x0, 0x200088c4}, 0x4008880) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008cc}, 0x20004804) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c000100636f756e74657200"], 0x118}}, 0x0) 32.745707712s ago: executing program 5 (id=3373): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$link(0x8, 0x0, r0) 32.721451502s ago: executing program 5 (id=3376): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) setpriority(0x3, 0x0, 0xfffffffd) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x7f, 0x5, 0x0, 0x0, 0x7, 0x89008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8, 0x7ffffefc, 0x3, 0xfffffffffffffffe, 0x0, 0x4000, 0x0, 0x8001, 0x0, 0x1}, 0x0, 0x6, 0xffffffffffffffff, 0x9) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x1000}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 32.439912276s ago: executing program 5 (id=3385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e746572001400"], 0xdc}}, 0x0) 32.412540017s ago: executing program 5 (id=3386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000a40), 0x1, 0x55e, &(0x7f0000000a80)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000040)={{0xc, 0x5}, {0xb, 0x75}, 0xa, 0x2, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) r6 = gettid() tkill(r6, 0x12) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x540, 0x210, 0x940c, 0x3002, 0x210, 0x2c0, 0x470, 0x3d8, 0x3d8, 0x470, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00', 0x40}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010102, 'syzkaller0\x00'}}}, {{@ipv6={@loopback, @empty, [0xffffff00, 0xffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff000000], 'syzkaller1\x00', 'macvtap0\x00', {}, {}, 0x2f, 0x9, 0x1, 0x8}, 0x0, 0x1f8, 0x260, 0x0, {0x700}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x8, 0xc4f, 0x2, 0x2, 0x6, 0xfffffff7, 0xf5b1, 0x0, 0x80}, {0x7fff}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) 31.709117147s ago: executing program 5 (id=3400): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) mount$9p_unix(0x0, &(0x7f0000000580)='./file1\x00', &(0x7f0000000600), 0x2, &(0x7f0000000780)={'trans=unix,', {[{@uname={'uname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}], [{@pcr={'pcr', 0x3d, 0x2a}}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xefff}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) 31.370358672s ago: executing program 5 (id=3409): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000d80)=""/204, 0xcc}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001040)=""/226, 0xe2}, {&(0x7f0000001140)=""/84, 0x54}], 0x6}, 0x64}], 0x1, 0x40010001, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000400)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}]}, 0x1, 0x504, &(0x7f0000001000)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0xfffffffffffffffd, 0x9b}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2, &(0x7f0000000740)=[@mark={{0x14}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xab00}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x60}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4044020) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\'], 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) unshare(0x20060400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1}, 0x6e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={@null, 0x4, 'syzkaller1\x00'}) 31.370187512s ago: executing program 33 (id=3409): r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) recvmmsg(0xffffffffffffffff, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000d80)=""/204, 0xcc}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001040)=""/226, 0xe2}, {&(0x7f0000001140)=""/84, 0x54}], 0x6}, 0x64}], 0x1, 0x40010001, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f0000000400)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}]}, 0x1, 0x504, &(0x7f0000001000)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x0, 0x100000000, 0x2000000000000000, 0x3, 0x0, 0xffffffffffffffff, 0x7b, 0xfffffffffffffffd, 0x9b}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[], 0x32600) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x30}}, {{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}], 0x2, &(0x7f0000000740)=[@mark={{0x14}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0xab00}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x60}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4044020) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\'], 0x5c}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) unshare(0x20060400) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1}, 0x6e) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f00000001c0)={@null, 0x4, 'syzkaller1\x00'}) 1.957643731s ago: executing program 0 (id=3889): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = epoll_create1(0x0) pwritev2(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000580)="7bca3559bf8c7cea2db01f9f20447a78c6d8741a9016be9f94873478d1bd71d2fc2dd10027d23ff2259cc289d6311dd67aa1eb578ec638fb724b442c0464ca12a2744d417612479252480df93d347e4b", 0x50}], 0x1, 0x8, 0x9, 0x14) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000600)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', r6, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800a0f90d5cabac75936ee6d6627c66e032945cc109bb5b08b7f43cede331707ad1ed09f78d4f3bf9b31d586aa4f30212f7bc08d79babc7052fe260f5faabfdd5b187f86a172bdb995cc3f9c8f7d0a8b50195cb384fa182", @ANYRES64=r6, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC=r5], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ffffffff850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r8}, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x0, @rand_addr=0x64010101}, 0x2, 0x2, 0x0, 0x4}}, 0x26) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00'}) 1.188386302s ago: executing program 6 (id=3907): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x84, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x50, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) 1.137186303s ago: executing program 4 (id=3909): pipe2(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00001ee636931f85600000000008004500001c0000000000119078000000000000000000004e2000089078"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000003c0)=0xb, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffd6d, 0x0, 0x0, &(0x7f0000001040)=""/29, 0x1d}, 0x9}], 0x1, 0x40002121, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) r3 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES8=r4, @ANYBLOB='\x00'/19, @ANYRESHEX=r3, @ANYRES32, @ANYRES32], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 1.137005833s ago: executing program 3 (id=3910): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) 1.126038463s ago: executing program 6 (id=3911): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0xee01, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r4, 0x0, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r3}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r5, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x0) 1.082300364s ago: executing program 0 (id=3913): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r0, 0x8926, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x7ff, 0xfe, "5dee0000005940000000000f00"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x7, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000008000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef978617503a6707bb5cb8ffbb640d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749da00000097f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a74e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff472558014391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f048ef6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d74e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c92209283829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00000000000000000000000000c8b8b5b137dcb7a7949e12307d1fce56fe5b76d2f3f5a7692379542e3fd9a5a7dc57e1dec0bdce65b5db59a0733c9b9da612adb91948ecbfaff8fc206b8350fe268b98aaa2e288be77aedddcc7fb7d631e69b176e2e6678fe1237cb20000"], &(0x7f0000000340)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000010180)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000010200), &(0x7f0000010240)=r3}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0x447}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r9, @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r11 = dup3(r3, 0xffffffffffffffff, 0x80000) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000140)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x1000a) r13 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r13, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x1}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}]}, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', r9, 0x25, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[r12, r14, r1, r1, r1]}, 0x94) 1.081115944s ago: executing program 3 (id=3914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0xf) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 1.045295304s ago: executing program 3 (id=3915): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x3, &(0x7f00000001c0)=[{0x7, 0x26, 0x3f, 0x8}, {0xf20f, 0x4, 0x5, 0x9}, {0x5, 0xfc, 0x9, 0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) write$nci(r1, &(0x7f00000002c0)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0x8, "578ee0d19d5cfdd3559e"}, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="020000000100000000000000040004000000000008000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="087dee486077472a354d7c7e000200", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0, @ANYBLOB="10000000000000002000010000000000", @ANYRESHEX=r0], 0x44, 0x3) 1.031020845s ago: executing program 4 (id=3916): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$9p_unix(0x0, &(0x7f0000000580)='./file1\x00', 0x0, 0x2, &(0x7f0000000780)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1.000007965s ago: executing program 3 (id=3917): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00\x00'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_clone(0x20000000, &(0x7f0000001040)="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", 0x400, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) 944.867286ms ago: executing program 0 (id=3920): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 923.550766ms ago: executing program 6 (id=3922): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 902.995596ms ago: executing program 0 (id=3923): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) unshare(0x2040400) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./bus\x00', 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_socket_connect_nvme_tcp() getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@private2}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x8}}, './bus\x00'}) fcntl$setlease(r4, 0x400, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r9, @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 897.081936ms ago: executing program 6 (id=3925): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0xf) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 895.714996ms ago: executing program 4 (id=3926): pipe2(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00001ee636931f85600000000008004500001c0000000000119078000000000000000000004e2000089078"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000003c0)=0xb, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffd6d, 0x0, 0x0, &(0x7f0000001040)=""/29, 0x1d}, 0x9}], 0x1, 0x40002121, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) r3 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES8=r4, @ANYBLOB='\x00'/19, @ANYRESHEX=r3, @ANYRES32, @ANYRES32], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 854.824807ms ago: executing program 0 (id=3927): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) 809.871558ms ago: executing program 6 (id=3928): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x9, 0xc) splice(r2, 0x0, r5, 0x0, 0x80, 0x7) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) 795.602518ms ago: executing program 0 (id=3929): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000980)="84cbb7ec1bad3d555a5044c7bda445d0e57ffa0c8fd767c1d573f7263d0e504f125ab24edf74e675b889f39d74d6ddbd0c859e5887d7674b7d467599dd772b3100079369a1c2b2dc53e960c6b7618beebfdb5d2915dbec601e3e659f4e442172e1cd5f49f7f5839bb037dadf99748eaa257a818be6a2f838a7249828873468d5a9c850476a00182246e02de05d0c519778fe2fe91213899fe3a9cdf7b1df0a5d4a308b146629e60c89e0fd45146a42532cb400326f784ead6bc0041953ba00d25be39f0ec3bb5320e3af371775d4d1209710aea8cc85d7283ea35043ea9a15a088deb7dc6ec719e6f81f9c3009cdc1fdc1d06d594237810db63f388bbfbb99f5f981579b62a1851e3d660cadda81d7d435ba38bc5d0d02ab8d58f55354e22b732ba78a97ea772ad803559be8733a48fce550c0ecbe56d2f5b3794bd2d1b82c7322615d0785a465101bbdf3713e2a56fcfc76a0979d0f472b58a3a6c34b1884c7d7e4ca244177fc4a7cc5aea15f3b95740de53ebf6e65d6c756e900da03e0dc36b5955d4ef65da9382e0ef670376466b66a66603a020ae1a8e36b549585f8ec1e12fc35d0eb625853e80f15d8abfe4858c61eda3d4b6bbdffa6a250314c1195686a31e3e04135d2300088881b6c2c65913adfa709a632a0cb621cd100e6b207367c24a3046ac1f3d5398e3802ac47e158e9c87a2df9b6278449aa8fba8373f6b0ea55691d33a3ff42e1527a45804756ab8456f50c6c4ddc63d4f9613e83e0d16d7bd05b0abb270392c9efb3c458e0acfa39f6a9ad9d47d669a996ed08755e114dc0eff274f64d30de6ea3a24f8d0d0a86fa6c23e61010271f585cb9d5b369e9dbc7b362bb44da65a27b9c6b636891e96a46d1f159fba939d1bd74ececafb08aa7cec0331e3455db8f514a8674b1e19ee9bb53eee5265da9267fa3a8d4e8629666befed001fcb5e6349143310cf710e7acfa6f264bacd8c276924dae641ccc712a262567d232cf066e378182eaa5dabbbae3ebbdca833a6e7a5598b00f50d5010e598b26110abf55e7ab8ffc2f0c38497f35ac0eb518f461d67f0686e9e1b6a52b8875dde157e0c2b16447f0a324c5c72265ea88d89682506b03e56cce00811ab28e2364b9c7bf6ebf130b10d6125500687e2978288f925042361a329e5e6d8034d8f0d31874b72ecf8945c6f7d5365bd31d2e4934ac785ae71da72e610a2602030752088687962e6585650a93568a3e1f95ff70c0c94786f2fb71f0c04694041511d069dbd025813d27585c5f26f8ad70f88eacf275064a8e099c1d582cde54c04a195b73898c6dc4e47215e7ff3e5f93dd5e966d1143e03ed838077d257cd7bf90c49368c2a8223f3c41ee0e9fb1417f0f65e4d63809965d57375c85cb82107050413ab3272c739c884b09e874b68b6c75bac5291beb67385300258227f9565c7c6a7cfa17704849e594de32e72a0f6b4a63b2294c15e06854b4783cb4ba2d315448cbca0d68b250f48b01d9fa65125492352d0beb688ad0dbe50bf789198c7d8d212ee3ea836889d06e1cdee640c56afd531eccce9c3b787a1800496bcbe64528874b7dd7acba3c3a98ecafa960d18759fd5e74d464f9025fe7a48e7327f8baeff10a2be8ccda4fe2ae3548a0f28e3d0bbb7e0723a78f2ad31560d1be37456e60ea03a340a5e4b932abecaa6536644f2d6eff6b83b1abc6219e48c850e91926463f1ada4876e65cdb439b700e0ee61e91811e8f11fb79e0b3292d9ebf2a590f3f4384182b1398e7a8deac0d66696bccc43f266011d053f2403020f14b0b1d496a45bcc1df0220f97c840c1c920fa551cca2b528d2dae7da9694f9fbff58543691b235e5f8538317e9d69f1d167075111d12134e057ce307e9a49b51aefb746ce0b94738cb40503660d814182fd399c1299bd646d74b5ae7905757fd958b6b4ddfda3476ad914e9fbf6abc240e32ee4c30b15fe2ff2817bd21a766ed30c41360abbeb6263443240d0e6fbeb6e3749076e3681999be380f1069144d94b52127662edfd4f3be51761870990c36081a0a639ca91faf1b9b8d0260600df6d1683a6ca135f58702b217302c2b319f538f08af26b6ffe322ce69e1cdcb03e2041224f8eefa5deeb49238a1390f8954966d9a519eeb35f91f76a2a284c537d8ecbb29b5e51fb2afec7e9538655517202faa9efaa800b2cd05bf41f8318401329969ce3516600a77d1f519231b85a398ad40d8649b76886dee8fb0db4f455c6a9f27e1c55257c63b7b78186b53f38d10083a67e926a6e263243379a337865a3c12862f162ba595eeb62094407c6e893f28a5f6b6b09203818b8df9a25437a671df3c644294fb7c6d4bb2790b49228060524218a595d9caa18fbf14fff2196647d06ff11d98124b031d26c1df7e86f333d47b8b25ba4daca28ff9c9f03170e37702ee6033eae827f75cd5d7c79a4c10b757a3f0946900aac9ebfcb57617d0baa5c74b49f8a030e2e8b0fc1d4b900313a3d4925030b36d01809644bd0bb69ae0478cdcdbfa3ca18f769f042fd44d70709d0f500a5624e58b36619745b7d7ad1d680949d1e43ac2dbfa44eb1b1c3ccdf41041808760b734ef1c734ad5cd4c492363c3065017a71f8eb481877758b9fb53c3d30af3a60478b8d70ccf6b589c74e4d81b2584d22fe368c165442cf62744a3ed4bb7d7fbb8e0ce67c99dfa2bd4756a88987cdb8868e677fcd40ea5e379f354bde2544d8254a84a82e92eb963b0e4742f5cc7aff95edd1195e2dff574d80632951a6a311ab86e58234f770d5137d68489bf3fc96bffeec35933de98885bee95f2a9f03b90e54aca261f7392f86e0139407b6a039b531f27de0c0f09c3e5d6879e1957c22d60bacaa020bf0c8760dd97c9c5fcf97f0f8760bfd20c5c2da5c2d0e861973f77a45c51aa112c078f355b6741054abdac8c196c8de978c871e3094d71f812f8f89b39a5fdc9adcde9e83faff9226578765a1423a4aeabec0edcd69dbad05d58ee03dd19ae2a2329fb1ef1d43f7efdc0d9c5b728a456a108d0adb4951482b9202cd3e2b16d81a63c5e7a29763c561aedee5bc3589f5ce2c116b0780e17c970e077fef053668b85eaf429d55ef4e4c419a0d91ae3c6fa02990d563df47c69c4b1d59f414035c85c822dfa3343441c4a805cc04d5d0f43e4b789c0c115ac2eb6f67afe03704fe62d81ecc0015f742f0e33cf8c62b715d9997edc1bef628c83941099741dc1b79e200ffbdd4c1d570e0a755a3fabbee7c6e29f8a0d53116b455021b3ccbb2aefb89cfd8e9d8839d3d7c1cb2a60cc53ad7fe8f4a2dc4512bee5f5de26ac37e257899eeee0419dae14bc410a98297e2156fae6f95decfce3848b73962be45c95b9e86bb7a2a8bd1d2996ab5895909253b8b35af8776c8e8ee4908954e4be51ed893c9b58df7ecb1d9e5d549e5aefafddf5599dc3792b6f39b7bcde7aa4224bdfcbea32af0e5fd4dbd11e198788978da5d4ed02dea4f07d9832fed86a1e1891f2ef96665a35813a1510a2ee96e0b90703a67af552aa719d208ffcf345393c8eb526ad3e0f8cfe2b4aae290a3e5e607600455e8c11fae014be42c87c908878d7e4a14392fc2fc08f1fbe54328d6f7686b3a3969495e70210e237c23f252dc998cf0d5fd433d66192dcd0ab0fbc21a290145ece5125587c337be3c41252b0742bf3732112e163a316868d29e9913245d416ef679262d4b6c83cc86b7e6e6a53f31f4215066e593a83c6a88085f2a5b3441c67c645995d6479a57fc0d623fdf1e23c64e4baea2ed2d4d0932e4d35e1fd2bded702040c3be8cb3c15b1564c3a9494ada6a32686abb8da685c1d3455d5b946ef8e77d6408ce4fd8eab2e77078b65b03bd0f717fefc95c5bd1730bfb130d6413648919e3708ea164f98cac21a6ac26a75844db753ccd4e8da77a9eae1a1fc952e12096e55bf040c43131e09813c4fb3dc8bca48803bd03f09a306e21c6aa35b9ddfa3dda0536cb50c898305082db0b7bc7c0019c1901b4654fe81429be57b26a813f1165ef497763e0b87a189bb2513dffb8c4f3ee55adba7aaf2f7e2de132b40cc0ca0eefc5205a309213a830650078bb410768e3f20d3204ad2e1d8ae1611dbe624b4917cac4cef0bf9a139bf61dd34d503c4d337e59e4c7d418b0083c94590bb4dd85cc773e493b6890d74e218e0836875f0e44ed997dff956bbee75b9b6eba78c9c8373a79c5ef4d0b36039314e00d7f92e78e94902262557870d981db868ef2bf08e6b8b23a94ea084a47082c4cb72e3ea7eb5d407b5acec691d09199f60ce2110307f3c0ea09655248f04ecdc601844b87db593e0de612ca69218c9f487c98ea8ec71b86971087b710035fc954b3345fe13218e82c6af771ae5c134b45d367152c4332d3bd551f2c77bd873314d555100a25c1fe1246715c5ffea3125583d879d491ffa181e702682805ab5f7cd845f09cfaf8c72c4f83bafaaf98c03aa2248a55e914f020be289f70ea246e51e3aba588bf20e891c9a1ab6c3dc50763c0226291d4f6a61821090943c75aebcb8b1ce2e3c00ddfa72bd9f1b3fb9b62ed0eafad7c59a17155f4b78c5254169d8f800adfbf5bef76e45df7ac259137e4db6c71d938bdd62ef81e7fc7a85fe7a591d4da9151e603f5bb7d79cd665a29c609bcd77f0256681111c660239a3b19ec64504f5a8bce95aa46bbdcbabf9484bdc6ad7ef854561b2228c0dd93431f7c905c57fe18da581367680a2c72da2d67732dedcd27c06fd38dd1a90729284a82ca938aaedc51f981c08b27e3bd469786da24456c4a6c0a76963f5437196024e9d0db1228608d9195e03bc255243ed23b653d77061ff5d3b6599fb48fd43dc5bb1497fab3b0a3579d7a4018d2525dd8ac8eef80f51184c23694d94a33ba471e8ef2f72c851650e772b120b740873724fa1ef88c551bd2b8e06810393f722218fc042e2e0618917e66e385f322d51743c5244be1db53f77a20ae6793f80b382baf1b223b98bf0ca717caf6dc372fdfe4e430a156a2606dc9245d21241e410b87e821fc810be5c3ffffe610a7321f1ae5d68896dd2a0791b6485b8993b702be52b964bb46406686e8e63d948e394e6cc4eaf32f4f0706ff830a5dfc421266b9e249a43a5c1c65032db04ee8a07f98f9c9e478d785abb1e445ba7bc9e08a2cad85654ceba890f415b538847c421e903afcc4325d740cb727a9183d00b37965279e9b901861c6e7521ebbd2b487262e305110f0f7ff1fdff3d63b5acf5f355a0fe50bb16444a10f4756c058eb4a9693b8ea20d476df9669b840890498232f788cd28476e73e8cf216cb801cb793f43a11cae936b642b86bf1a66e8791be92a3bf3bb22717f78754031862c278194f5438fd2312eb549e2a84034d2febffd57ae72ac0bfcbce4996206ba8cb78fb15c24ca6fac530ac3e884f756145dad823947331735618a1bcd963713d2cb9813fdc93f63794d12d1f79246d17de5c0445e19e546a8cc7f9e058fd0388c5db760f78c0d3a8535111db2ecb7b3ec21548d409d413b648d916e0278079e00127969b39c122332bfa5aa0e54a20d7614549e561bfa78d208a5b8cd70f4b0070372d3653929f11c97dd589975725ac8d8bbba05e78b31bb47ba6db61c98596b672b30c7be196cf2006c08f1d09bdfcffad126406b892cb0bf6af3023fb5e30c4c6fd476e4ac847c1eded5e72c5cd151fc1377831ffccdf71216a035bb39f20bea06400f07c6bcaa1b80d191c2649ad3c0cbbd38672c7f02a3f707aef1206b46de72c870cafe13", &(0x7f00000000c0)="0da1c4f10c3c904b87d47eb38bb18f336b4dff6a658e7490dad3ad83865cf37e3f5a453942f94c0a19c67f8431169c069dc1c103c280eaa932415c682951be37a6a4e222150a9e9e9c70b00a90594e46cf79f1ebb514f795767eeefaa9c5d25f32e71edc8d57994dea9598c8a96fe724ab127de306e7bef8e985226aaaaac6f81528c5a19a90cc25993e035ec434c259a3a9cc50774852dfb549a185d3be33a1758bfa783f160a70cefaa0156e3aad897c494c242327941cbb2af038cd5187ff35"}}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x9, 0xc) splice(r2, 0x0, r4, 0x0, 0x80, 0x7) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) 778.598609ms ago: executing program 4 (id=3931): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/crash_elfcorehdr_size', 0x80800, 0x2c) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000)) 725.358049ms ago: executing program 4 (id=3933): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0xee01, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r4, 0x0, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r3}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r5, r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x0) 641.86954ms ago: executing program 1 (id=3937): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$9p_unix(0x0, &(0x7f0000000580)='./file1\x00', 0x0, 0x2, &(0x7f0000000780)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000014c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 625.30246ms ago: executing program 1 (id=3938): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) unshare(0x2040400) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat(r0, &(0x7f0000000280)='./bus\x00', 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_socket_connect_nvme_tcp() getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@private2}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_io_uring_complete(0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x8}}, './bus\x00'}) fcntl$setlease(r4, 0x400, 0x0) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r9, @ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 596.818921ms ago: executing program 1 (id=3939): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0xf) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1e8, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) 576.309021ms ago: executing program 1 (id=3940): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) 560.936081ms ago: executing program 4 (id=3941): r0 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d1f000000000000006923c63a4541062101b60a2156566de77062086575a59ea9cb", 0x2b, r1) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000cc5d000000000018100000", @ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000000085100000050000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x20) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000240)={0x2}) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x1, 0x0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r9}, 0x10) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000003c0)=0x1) capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) 533.297882ms ago: executing program 1 (id=3942): pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa00001ee636931f85600000000008004500001c0000000000119078000000000000000000004e2000089078"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000003c0)=0xb, 0x4) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0xfffffffffffffd6d, 0x0, 0x0, &(0x7f0000001040)=""/29, 0x1d}, 0x9}], 0x1, 0x40002121, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000012c0)=""/191, 0x4}], 0x3) r3 = syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES8=r4, @ANYBLOB='\x00'/19, @ANYRESHEX=r3, @ANYRES32, @ANYRES32], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 468.424443ms ago: executing program 1 (id=3943): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x7, 0x10, 0x95, 0x8, 0x0, 0xc304, 0x1031, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7ff, 0x2, @perf_config_ext={0x9, 0xb06}, 0x80, 0x2, 0x1c, 0x5, 0x9, 0xd0d, 0x2, 0x0, 0x0, 0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socket$inet6(0xa, 0x3, 0xff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) unshare(0x22020400) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0), 0x4) readv(r3, &(0x7f0000001340)=[{&(0x7f0000000440)=""/166, 0xa6}], 0x1) readv(r3, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 135.294258ms ago: executing program 3 (id=3944): r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xe000001a}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000000)) 69.810519ms ago: executing program 3 (id=3945): r0 = syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f14a18f6", 0x4) open(&(0x7f0000000340)='./bus\x00', 0x40000, 0x48) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)='\\\\@[*#)\x00', 0xfffffffffffffffe) r7 = accept4$phonet_pipe(r2, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x80000) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e22, @remote}, 0x3, 0x2, 0x1, 0x2}}, 0x2e) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000280)) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x1ff, 0x8005, 0x1, 0x80, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xe4bf, 0x7, 0x2, 0x10001, 0x3}, 0x14) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000040)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @remote}, 0x10) setsockopt$packet_buf(r9, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r8, @in={{0x2, 0x4e21, @empty}}, 0x3, 0x8}, 0x90) truncate(&(0x7f0000000000)='./bus\x00', 0x6) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) 0s ago: executing program 6 (id=3946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) get_robust_list(0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000640)) r3 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001000000018000180140002007665746f30000000000000000000000005000b0000000000"], 0x34}}, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x12, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd4d, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0xe}, @ldst={0x0, 0x1, 0x4, 0x5, 0xa, 0x40, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000240)='syzkaller\x00', 0x1b85, 0x1c, &(0x7f0000000280)=""/28, 0x41000, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x2, 0x10000, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x9}, 0x94) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x22110, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x800010000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x8, 0x20004, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) exit(0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10) sendmsg$rds(r10, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa0100ff}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x401}, &(0x7f0000000000)=0x1ff, 0x0, 0x5, 0x3, 0x3, 0x3, 0x50, 0x3}}], 0x58, 0x800}, 0x0) kernel console output (not intermixed with test programs): XT4-fs: Ignoring removed oldalloc option [ 200.980871][T12735] EXT4-fs: inline encryption not supported [ 200.986872][T12735] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.993358][T12735] EXT4-fs: Ignoring removed i_version option [ 201.001224][T12724] EXT4-fs (loop3): 1 truncate cleaned up [ 201.007292][T12724] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 201.011794][T12739] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 201.031007][T12735] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.040896][T11729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.070010][T12739] pim6reg: entered allmulticast mode [ 201.070532][T12745] loop4: detected capacity change from 0 to 512 [ 201.077451][T12739] pim6reg: left allmulticast mode [ 201.082362][T12745] EXT4-fs: Ignoring removed oldalloc option [ 201.089393][T12735] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3233: bg 0: block 64: padding at end of block bitmap is not set [ 201.092728][T12745] EXT4-fs: inline encryption not supported [ 201.108218][T12735] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3233: Failed to acquire dquot type 0 [ 201.112839][T12745] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.130660][T12745] EXT4-fs: Ignoring removed i_version option [ 201.137152][T12735] EXT4-fs (loop1): 1 truncate cleaned up [ 201.144450][T12735] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.157222][T12745] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 201.175149][T12745] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3236: bg 0: block 64: padding at end of block bitmap is not set [ 201.208094][T12745] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3236: Failed to acquire dquot type 0 [ 201.221560][T12745] EXT4-fs (loop4): 1 truncate cleaned up [ 201.228398][T12745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.236292][T12090] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.288740][T11897] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.363193][T12769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3244'. [ 201.374869][T12776] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 201.422872][T12782] FAULT_INJECTION: forcing a failure. [ 201.422872][T12782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.436056][T12782] CPU: 1 UID: 0 PID: 12782 Comm: syz.0.3250 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 201.436088][T12782] Tainted: [W]=WARN [ 201.436094][T12782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.436124][T12782] Call Trace: [ 201.436130][T12782] [ 201.436137][T12782] __dump_stack+0x1d/0x30 [ 201.436160][T12782] dump_stack_lvl+0xe8/0x140 [ 201.436178][T12782] dump_stack+0x15/0x1b [ 201.436195][T12782] should_fail_ex+0x265/0x280 [ 201.436223][T12782] should_fail+0xb/0x20 [ 201.436392][T12782] should_fail_usercopy+0x1a/0x20 [ 201.436421][T12782] _copy_from_user+0x1c/0xb0 [ 201.436487][T12782] ___sys_sendmsg+0xc1/0x1d0 [ 201.436514][T12782] __x64_sys_sendmsg+0xd4/0x160 [ 201.436533][T12782] x64_sys_call+0x2999/0x2fb0 [ 201.436553][T12782] do_syscall_64+0xd2/0x200 [ 201.436629][T12782] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 201.436660][T12782] ? clear_bhb_loop+0x40/0x90 [ 201.436682][T12782] ? clear_bhb_loop+0x40/0x90 [ 201.436704][T12782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.436724][T12782] RIP: 0033:0x7fe9771fe9a9 [ 201.436748][T12782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.436766][T12782] RSP: 002b:00007fe975867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.436784][T12782] RAX: ffffffffffffffda RBX: 00007fe977425fa0 RCX: 00007fe9771fe9a9 [ 201.436795][T12782] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 201.436807][T12782] RBP: 00007fe975867090 R08: 0000000000000000 R09: 0000000000000000 [ 201.436820][T12782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.436902][T12782] R13: 0000000000000000 R14: 00007fe977425fa0 R15: 00007ffe14772138 [ 201.436920][T12782] [ 201.840988][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 201.841003][ T29] audit: type=1326 audit(1753465633.316:13657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.1.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b856e9a9 code=0x7ffc0000 [ 201.870902][ T29] audit: type=1326 audit(1753465633.316:13658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.1.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b856e9a9 code=0x7ffc0000 [ 201.955270][T12795] netlink: 'syz.4.3254': attribute type 1 has an invalid length. [ 201.985813][ T29] audit: type=1326 audit(1753465633.616:13659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.1.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b856e9a9 code=0x7ffc0000 [ 202.009575][ T29] audit: type=1326 audit(1753465633.616:13660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12779 comm="syz.1.3249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42b856e9a9 code=0x7ffc0000 [ 202.078458][ T29] audit: type=1400 audit(1753465633.706:13661): avc: denied { setopt } for pid=12800 comm="syz.5.3257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 202.108664][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3260'. [ 202.182811][T12818] netlink: 'syz.5.3264': attribute type 4 has an invalid length. [ 202.193276][T12818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12818 comm=syz.5.3264 [ 202.243553][ T29] audit: type=1326 audit(1753465633.876:13662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12824 comm="syz.5.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823c8de9a9 code=0x7ffc0000 [ 202.267237][ T29] audit: type=1326 audit(1753465633.876:13663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12824 comm="syz.5.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823c8de9a9 code=0x7ffc0000 [ 202.291242][T12821] atomic_op ffff88811a0de528 conn xmit_atomic 0000000000000000 [ 202.295303][ T29] audit: type=1326 audit(1753465633.926:13664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12824 comm="syz.5.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823c8de9a9 code=0x7ffc0000 [ 202.322547][ T29] audit: type=1326 audit(1753465633.926:13665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12824 comm="syz.5.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f823c8de9a9 code=0x7ffc0000 [ 202.346067][ T29] audit: type=1326 audit(1753465633.926:13666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12824 comm="syz.5.3267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f823c8de9a9 code=0x7ffc0000 [ 202.444236][T12840] loop3: detected capacity change from 0 to 512 [ 202.463565][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3273'. [ 202.467911][T12847] loop4: detected capacity change from 0 to 512 [ 202.475207][T12840] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3272: corrupted inode contents [ 202.493803][T12840] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.3272: mark_inode_dirty error [ 202.505544][T12840] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3272: corrupted inode contents [ 202.518355][T12840] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.3272: mark_inode_dirty error [ 202.529820][T12847] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 202.538083][T12840] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3272: corrupted inode contents [ 202.559218][T12847] EXT4-fs (loop4): orphan cleanup on readonly fs [ 202.570126][T12847] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 202.587164][T12840] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 202.596470][T12840] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.3272: corrupted inode contents [ 202.608543][T12847] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 202.618377][T12840] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.3272: mark_inode_dirty error [ 202.619713][T12847] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3275: bg 0: block 40: padding at end of block bitmap is not set [ 202.633671][T12852] atomic_op ffff88811a0efd28 conn xmit_atomic 0000000000000000 [ 202.650095][T12840] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 202.660496][T12847] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 202.670424][T12840] EXT4-fs (loop3): 1 truncate cleaned up [ 202.676601][T12840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.689324][ T4866] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:24: Failed to release dquot type 1 [ 202.689338][T12847] EXT4-fs (loop4): 1 truncate cleaned up [ 202.689770][T12847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.719227][T12840] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.738632][T12860] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3279'. [ 202.744342][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3272'. [ 202.756690][T12840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3272'. [ 202.775020][T11897] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.797732][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.805238][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.812807][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.820432][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.827883][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.835316][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.842840][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.850249][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.857726][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.865188][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.872928][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.875644][T12873] loop5: detected capacity change from 0 to 512 [ 202.880630][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.894235][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.901637][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.902670][T12873] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.909014][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.922378][T12873] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.928826][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.946761][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.954311][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.961745][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.969174][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.976609][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.984020][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.991439][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 202.998890][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.006366][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.013763][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.021221][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.028658][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.036185][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.043591][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.051030][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.054985][T11729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.058730][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.058754][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.082739][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.090154][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.097677][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.105075][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.112513][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.119890][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.127324][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.134819][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.142290][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.149765][ T10] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 203.157952][ T10] hid-generic 0000:0000:0000.0016: hidraw0: HID v10.00 Device [syz0] on syz1 [ 203.162757][ T7741] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.199131][T12879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3286'. [ 203.294763][T12900] xt_TPROXY: Can be used only with -p tcp or -p udp [ 203.312917][T12900] loop4: detected capacity change from 0 to 1024 [ 203.320500][T12900] EXT4-fs: Ignoring removed orlov option [ 203.330020][T12900] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 203.355046][T12900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.378326][T12914] loop3: detected capacity change from 0 to 512 [ 203.387026][T11897] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.398196][T12914] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 203.406418][T12914] EXT4-fs (loop3): orphan cleanup on readonly fs [ 203.416234][T12914] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 203.432917][T12914] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 203.440008][T12914] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3303: bg 0: block 40: padding at end of block bitmap is not set [ 203.457733][T12914] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 203.468757][T12914] EXT4-fs (loop3): 1 truncate cleaned up [ 203.476815][T12914] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 203.501961][T11729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.528324][T12932] loop4: detected capacity change from 0 to 512 [ 203.572138][T12894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.580821][T12894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.581316][T12943] FAULT_INJECTION: forcing a failure. [ 203.581316][T12943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.602127][T12943] CPU: 0 UID: 0 PID: 12943 Comm: syz.3.3313 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 203.602161][T12943] Tainted: [W]=WARN [ 203.602167][T12943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.602198][T12943] Call Trace: [ 203.602203][T12943] [ 203.602208][T12943] __dump_stack+0x1d/0x30 [ 203.602228][T12943] dump_stack_lvl+0xe8/0x140 [ 203.602245][T12943] dump_stack+0x15/0x1b [ 203.602260][T12943] should_fail_ex+0x265/0x280 [ 203.602349][T12943] should_fail+0xb/0x20 [ 203.602374][T12943] should_fail_usercopy+0x1a/0x20 [ 203.602407][T12943] strncpy_from_user+0x25/0x230 [ 203.602472][T12943] ? kmem_cache_alloc_noprof+0x186/0x310 [ 203.602501][T12943] ? getname_flags+0x80/0x3b0 [ 203.602570][T12943] getname_flags+0xae/0x3b0 [ 203.602593][T12943] do_readlinkat+0x64/0x320 [ 203.602624][T12943] __x64_sys_readlinkat+0x51/0x60 [ 203.602651][T12943] x64_sys_call+0x2768/0x2fb0 [ 203.602675][T12943] do_syscall_64+0xd2/0x200 [ 203.602699][T12943] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 203.602753][T12943] ? clear_bhb_loop+0x40/0x90 [ 203.602777][T12943] ? clear_bhb_loop+0x40/0x90 [ 203.602801][T12943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.602909][T12943] RIP: 0033:0x7f2ad203e9a9 [ 203.602926][T12943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.603007][T12943] RSP: 002b:00007f2ad069f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 203.603028][T12943] RAX: ffffffffffffffda RBX: 00007f2ad2265fa0 RCX: 00007f2ad203e9a9 [ 203.603042][T12943] RDX: 0000200000000780 RSI: 00002000000001c0 RDI: 0000000000000006 [ 203.603055][T12943] RBP: 00007f2ad069f090 R08: 0000000000000000 R09: 0000000000000000 [ 203.603069][T12943] R10: 00000000000000c6 R11: 0000000000000246 R12: 0000000000000001 [ 203.603082][T12943] R13: 0000000000000000 R14: 00007f2ad2265fa0 R15: 00007ffe8b61bac8 [ 203.603102][T12943] [ 203.861334][T12949] Falling back ldisc for ttyS3. [ 203.945154][T12965] binfmt_misc: register: failed to install interpreter file ./file2 [ 203.983830][T12972] atomic_op ffff88811a0ec128 conn xmit_atomic 0000000000000000 [ 203.993283][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3326'. [ 204.004156][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3326'. [ 204.087832][T12984] netlink: 'syz.3.3331': attribute type 10 has an invalid length. [ 204.098805][T12984] team0: Device hsr_slave_0 failed to register rx_handler [ 204.179853][T12994] loop3: detected capacity change from 0 to 512 [ 204.225231][T13001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3338'. [ 204.245958][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 204.247004][T12986] netlink: 'syz.0.3332': attribute type 10 has an invalid length. [ 204.269856][T12986] geneve1: entered promiscuous mode [ 204.279159][T12986] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 204.326813][T13010] hub 6-0:1.0: USB hub found [ 204.332061][T13010] hub 6-0:1.0: 8 ports detected [ 204.344434][T13008] veth1_macvtap: left promiscuous mode [ 204.497535][T13031] program syz.3.3350 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.603307][T13035] usb usb7: usbfs: process 13035 (syz.1.3352) did not claim interface 0 before use [ 204.708133][T13038] Invalid ELF header magic: != ELF [ 204.862535][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 204.870114][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 204.948885][T13052] syzkaller1: entered promiscuous mode [ 204.954462][T13052] syzkaller1: entered allmulticast mode [ 204.966725][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 204.974230][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 204.978254][T13054] loop3: detected capacity change from 0 to 164 [ 204.981717][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 204.995485][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.002925][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.006103][T13054] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 205.010322][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.025274][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.032706][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.040172][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.047644][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.055251][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.062690][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.070135][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.077634][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.085132][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.092711][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.100213][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.107826][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.115336][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.122804][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.130193][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.137706][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.145196][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.152623][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.160000][ T3407] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 205.171571][ T3407] hid-generic 0000:0000:0000.0017: hidraw0: HID v10.00 Device [syz0] on syz1 [ 205.231850][T13066] hub 6-0:1.0: USB hub found [ 205.250852][T13066] hub 6-0:1.0: 8 ports detected [ 205.279621][T13072] atomic_op ffff88811eee6128 conn xmit_atomic 0000000000000000 [ 205.345071][T13077] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3371'. [ 205.399322][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.406860][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.422281][T13092] syzkaller1: entered promiscuous mode [ 205.424340][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.427855][T13092] syzkaller1: entered allmulticast mode [ 205.435346][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.448352][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.455811][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.463267][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.470660][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.478104][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.485703][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.493145][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.500532][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.508295][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.515871][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.523417][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.524684][T13092] hub 6-0:1.0: USB hub found [ 205.530799][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.530825][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.544314][T13092] hub 6-0:1.0: 8 ports detected [ 205.550606][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.550632][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.570392][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.577826][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.585396][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.592817][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.600297][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.607861][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.615367][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.622864][ T3407] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 205.642443][ T3407] hid-generic 0000:0000:0000.0018: hidraw0: HID v10.00 Device [syz0] on syz1 [ 205.674921][T13106] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3385'. [ 205.701407][T13108] sd 0:0:1:0: device reset [ 205.715882][T13108] loop5: detected capacity change from 0 to 1024 [ 205.742079][T13108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.196558][T13125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3392'. [ 206.257296][T13108] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.3386: Allocating blocks 497-513 which overlap fs metadata [ 206.278702][T13108] EXT4-fs (loop5): pa ffff888107606690: logic 256, phys. 385, len 8 [ 206.286793][T13108] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 206.288529][T13136] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3396'. [ 206.329356][T13139] syzkaller1: entered promiscuous mode [ 206.335030][T13139] syzkaller1: entered allmulticast mode [ 206.370594][T13141] loop4: detected capacity change from 0 to 1024 [ 206.377372][T13141] ext4: Unknown parameter 'func' [ 206.380427][T13139] hub 6-0:1.0: USB hub found [ 206.427365][T13139] hub 6-0:1.0: 8 ports detected [ 206.525729][T13151] atomic_op ffff88811eee6d28 conn xmit_atomic 0000000000000000 [ 206.631506][T13130] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 18: block 81:freeing already freed block (bit 5); block bitmap corrupt. [ 206.675579][ T4856] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.688379][T13130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.723681][ T4856] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.784563][ T4856] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.833062][T13180] syzkaller1: entered promiscuous mode [ 206.838581][T13180] syzkaller1: entered allmulticast mode [ 206.846976][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 206.846991][ T29] audit: type=1326 audit(1753465638.476:14200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.0.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 206.877436][ T29] audit: type=1326 audit(1753465638.506:14201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.0.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 206.901113][ T29] audit: type=1326 audit(1753465638.506:14202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.0.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 206.914819][T13180] hub 6-0:1.0: USB hub found [ 206.924641][ T29] audit: type=1326 audit(1753465638.506:14203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.0.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 206.929412][T13180] hub 6-0:1.0: 8 ports detected [ 206.952877][ T29] audit: type=1326 audit(1753465638.506:14204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.0.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 206.952920][ T29] audit: type=1326 audit(1753465638.516:14205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.0.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 207.004954][ T29] audit: type=1326 audit(1753465638.516:14206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.0.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 207.028671][ T29] audit: type=1326 audit(1753465638.516:14207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.0.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 207.052532][ T29] audit: type=1326 audit(1753465638.516:14208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.0.3413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 207.076115][ T29] audit: type=1326 audit(1753465638.516:14209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 207.100274][ T4856] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.116994][T13170] chnl_net:caif_netlink_parms(): no params data found [ 207.149090][T13170] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.156255][T13170] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.163412][T13170] bridge_slave_0: entered allmulticast mode [ 207.169678][T13170] bridge_slave_0: entered promiscuous mode [ 207.176301][T13170] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.183401][T13170] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.190550][T13170] bridge_slave_1: entered allmulticast mode [ 207.197311][T13170] bridge_slave_1: entered promiscuous mode [ 207.219495][T13170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.239411][T13170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.253692][ T4856] bridge_slave_1: left allmulticast mode [ 207.259390][ T4856] bridge_slave_1: left promiscuous mode [ 207.265195][ T4856] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.312708][ T4856] bridge_slave_0: left allmulticast mode [ 207.318393][ T4856] bridge_slave_0: left promiscuous mode [ 207.324209][ T4856] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.372262][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.379706][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.387131][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.394576][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.402007][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.409384][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.416773][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.424234][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.431645][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.439049][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.446511][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.454033][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.461573][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.468964][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.476490][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.483884][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.491277][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.498760][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.506192][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.513719][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.521188][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.528638][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.536053][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.543459][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.550910][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.558328][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.565721][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.573179][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.580554][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.588032][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.595478][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.602885][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.610261][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.617754][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.625162][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.632612][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.640037][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.647447][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.654905][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.662356][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.669833][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.677295][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.685110][ T23] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 207.694044][ T23] hid-generic 0000:0000:0000.0019: hidraw0: HID v10.00 Device [syz0] on syz1 [ 207.733322][ T4856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.743441][ T4856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.753381][ T4856] bond0 (unregistering): Released all slaves [ 207.786447][T13170] team0: Port device team_slave_0 added [ 207.793355][T13170] team0: Port device team_slave_1 added [ 207.809802][T13213] syzkaller1: entered promiscuous mode [ 207.815356][T13213] syzkaller1: entered allmulticast mode [ 207.830718][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3427'. [ 207.846638][T13170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.853636][T13170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.879713][T13170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.892811][T13212] hub 6-0:1.0: USB hub found [ 207.898344][T13212] hub 6-0:1.0: 8 ports detected [ 207.919610][ T4856] hsr_slave_0: left promiscuous mode [ 207.926978][ T4856] hsr_slave_1: left promiscuous mode [ 207.938408][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.945890][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.955113][ T4856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.962580][ T4856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.979310][ T4856] veth0_macvtap: left promiscuous mode [ 207.985011][ T4856] veth1_vlan: left promiscuous mode [ 207.990304][ T4856] veth0_vlan: left promiscuous mode [ 208.030660][T13232] atomic_op ffff88811ae54128 conn xmit_atomic 0000000000000000 [ 208.058114][ T4856] team0 (unregistering): Port device team_slave_1 removed [ 208.061340][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.072987][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.080588][ T4856] team0 (unregistering): Port device team_slave_0 removed [ 208.080949][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.095253][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.102690][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.110098][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.117565][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.125085][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.132579][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.139982][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.147481][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.154979][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.162541][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.169942][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.170502][T13170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.177338][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.184299][T13170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.191763][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.191830][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.217756][T13170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.225068][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.250545][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.257957][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.265391][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.272811][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.280238][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.287647][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.295074][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.302564][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.310047][ T3407] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 208.317927][ T3407] hid-generic 0000:0000:0000.001A: hidraw0: HID v10.00 Device [syz0] on syz1 [ 208.329480][T13238] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 208.342010][T13238] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 208.403894][T13170] hsr_slave_0: entered promiscuous mode [ 208.412416][T13170] hsr_slave_1: entered promiscuous mode [ 208.420831][T13170] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.429107][T13170] Cannot create hsr debugfs directory [ 208.476748][T13253] binfmt_misc: register: failed to install interpreter file ./file2 [ 208.540002][T13170] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 208.548839][T13170] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 208.559114][T13170] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 208.584924][T13170] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 208.611499][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.618962][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.642728][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.650224][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.657695][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.665211][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.672625][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.680099][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.687558][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.695058][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.702469][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.709904][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.714092][T13271] syzkaller1: entered promiscuous mode [ 208.717649][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.722940][T13271] syzkaller1: entered allmulticast mode [ 208.730353][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.743623][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.751298][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.757408][ T4856] ------------[ cut here ]------------ [ 208.758749][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.764136][ T4856] WARNING: CPU: 0 PID: 4856 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0 [ 208.771605][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.781119][ T4856] Modules linked in: [ 208.781136][ T4856] CPU: 0 UID: 0 PID: 4856 Comm: kworker/u8:14 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 208.788505][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.792404][ T4856] Tainted: [W]=WARN [ 208.792411][ T4856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.792424][ T4856] Workqueue: netns cleanup_net [ 208.792450][ T4856] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 208.792479][ T4856] Code: 48 8d bb 70 0e 00 00 e8 02 5f c1 fc 48 8b bb 70 0e 00 00 e8 a6 c3 cd fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 75 4f a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 67 4f a7 fc 90 0f 0b 90 4c 89 f7 e8 cb [ 208.806705][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.814066][ T4856] RSP: 0018:ffffc9000fba7c60 EFLAGS: 00010293 [ 208.817853][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.827881][ T4856] [ 208.827885][ T4856] RAX: ffffffff84b054ab RBX: ffff888106fa2800 RCX: ffff88811b53e180 [ 208.827898][ T4856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888106fa3640 [ 208.827910][ T4856] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000 [ 208.832672][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.838166][ T4856] R10: ffffc9000fba7be8 R11: 0001c9000fba7be8 R12: ffffffff86c82480 [ 208.857788][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.865206][ T4856] R13: ffff888106fa2828 R14: ffff888106fa3640 R15: ffff888106fa2800 [ 208.871248][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.878581][ T4856] FS: 0000000000000000(0000) GS:ffff8882aee2d000(0000) knlGS:0000000000000000 [ 208.880907][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.888864][ T4856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.888880][ T4856] CR2: 00007f2ad067df98 CR3: 000000012474e000 CR4: 00000000003506f0 [ 208.888896][ T4856] Call Trace: [ 208.888902][ T4856] [ 208.888910][ T4856] xfrm_net_exit+0x2d/0x60 [ 208.896884][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.904832][ T4856] ops_undo_list+0x27b/0x410 [ 208.912203][ T3387] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 208.920135][ T4856] cleanup_net+0x2de/0x4d0 [ 208.935867][ T3387] hid-generic 0000:0000:0000.001B: hidraw0: HID v10.00 Device [syz0] on syz1 [ 208.942879][ T4856] process_scheduled_works+0x4cb/0x9d0 [ 209.023813][T13271] hub 6-0:1.0: USB hub found [ 209.024348][ T4856] worker_thread+0x582/0x770 [ 209.028973][T13271] hub 6-0:1.0: 8 ports detected [ 209.033408][ T4856] kthread+0x486/0x510 [ 209.042796][ T4856] ? finish_task_switch+0xad/0x2b0 [ 209.047920][ T4856] ? __pfx_worker_thread+0x10/0x10 [ 209.053085][ T4856] ? __pfx_kthread+0x10/0x10 [ 209.057733][ T4856] ret_from_fork+0xda/0x150 [ 209.062387][ T4856] ? __pfx_kthread+0x10/0x10 [ 209.067054][ T4856] ret_from_fork_asm+0x1a/0x30 [ 209.071901][ T4856] [ 209.075041][ T4856] ---[ end trace 0000000000000000 ]--- [ 209.081282][ T4856] ------------[ cut here ]------------ [ 209.086767][ T4856] WARNING: CPU: 0 PID: 4856 at net/xfrm/xfrm_state.c:3291 xfrm_state_fini+0x1bc/0x1f0 [ 209.096390][ T4856] Modules linked in: [ 209.100299][ T4856] CPU: 0 UID: 0 PID: 4856 Comm: kworker/u8:14 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 209.114620][ T4856] Tainted: [W]=WARN [ 209.118468][ T4856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.128659][ T4856] Workqueue: netns cleanup_net [ 209.133505][ T4856] RIP: 0010:xfrm_state_fini+0x1bc/0x1f0 [ 209.139132][ T4856] Code: 5e c1 fc 4d 8b 3e e9 06 ff ff ff e8 4e 4f a7 fc 90 0f 0b 90 4c 89 f7 e8 b2 5e c1 fc 4d 8b 3e e9 24 ff ff ff e8 35 4f a7 fc 90 <0f> 0b 90 4c 89 f7 e8 99 5e c1 fc 4d 8b 3e e9 42 ff ff ff e8 1c 4f [ 209.156062][T13278] loop0: detected capacity change from 0 to 128 [ 209.158773][ T4856] RSP: 0018:ffffc9000fba7c60 EFLAGS: 00010293 [ 209.171164][ T4856] RAX: ffffffff84b054eb RBX: ffff888106fa2800 RCX: ffff88811b53e180 [ 209.179364][ T4856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888104f6e380 [ 209.187440][ T4856] RBP: 0000000000000080 R08: 0001888106fa365f R09: 0000000000000000 [ 209.195457][ T4856] R10: ffff888104f6e880 R11: 0001888104f6e27f R12: ffffffff86c82480 [ 209.203596][ T4856] R13: ffff888106fa2828 R14: ffff888106fa3658 R15: ffff888104f6e380 [ 209.211605][ T4856] FS: 0000000000000000(0000) GS:ffff8882aee2d000(0000) knlGS:0000000000000000 [ 209.220563][ T4856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.227168][ T4856] CR2: 00007f2ad067df98 CR3: 000000012474e000 CR4: 00000000003506f0 [ 209.235258][ T4856] Call Trace: [ 209.238534][ T4856] [ 209.241486][ T4856] xfrm_net_exit+0x2d/0x60 [ 209.245992][ T4856] ops_undo_list+0x27b/0x410 [ 209.250698][ T4856] cleanup_net+0x2de/0x4d0 [ 209.255205][ T4856] process_scheduled_works+0x4cb/0x9d0 [ 209.260706][ T4856] worker_thread+0x582/0x770 [ 209.265636][ T4856] kthread+0x486/0x510 [ 209.269707][ T4856] ? finish_task_switch+0xad/0x2b0 [ 209.274832][ T4856] ? __pfx_worker_thread+0x10/0x10 [ 209.279965][ T4856] ? __pfx_kthread+0x10/0x10 [ 209.284619][ T4856] ret_from_fork+0xda/0x150 [ 209.289137][ T4856] ? __pfx_kthread+0x10/0x10 [ 209.293772][ T4856] ret_from_fork_asm+0x1a/0x30 [ 209.298588][ T4856] [ 209.301618][ T4856] ---[ end trace 0000000000000000 ]--- [ 209.307590][ T4856] ------------[ cut here ]------------ [ 209.313124][ T4856] WARNING: CPU: 0 PID: 4856 at net/xfrm/xfrm_state.c:3293 xfrm_state_fini+0x1d5/0x1f0 [ 209.322740][ T4856] Modules linked in: [ 209.326634][ T4856] CPU: 0 UID: 0 PID: 4856 Comm: kworker/u8:14 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 209.340990][ T4856] Tainted: [W]=WARN [ 209.344863][ T4856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.354976][ T4856] Workqueue: netns cleanup_net [ 209.359812][ T4856] RIP: 0010:xfrm_state_fini+0x1d5/0x1f0 [ 209.365419][ T4856] Code: 5e c1 fc 4d 8b 3e e9 24 ff ff ff e8 35 4f a7 fc 90 0f 0b 90 4c 89 f7 e8 99 5e c1 fc 4d 8b 3e e9 42 ff ff ff e8 1c 4f a7 fc 90 <0f> 0b 90 4c 89 f7 e8 80 5e c1 fc 4d 8b 3e e9 60 ff ff ff 0f 1f 84 [ 209.385161][ T4856] RSP: 0018:ffffc9000fba7c60 EFLAGS: 00010293 [ 209.391425][ T4856] RAX: ffffffff84b05504 RBX: ffff888106fa2800 RCX: ffff88811b53e180 [ 209.399499][ T4856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888104f6ec00 [ 209.407505][ T4856] RBP: 0000000000000080 R08: 0001888106fa3657 R09: 0000000000000000 [ 209.415486][ T4856] R10: ffff888104f6e200 R11: 0001888104f6e3ff R12: ffffffff86c82480 [ 209.423572][ T4856] R13: ffff888106fa2828 R14: ffff888106fa3650 R15: ffff888104f6ec00 [ 209.431626][ T4856] FS: 0000000000000000(0000) GS:ffff8882aee2d000(0000) knlGS:0000000000000000 [ 209.440594][ T4856] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.447199][ T4856] CR2: 00007f2ad067df98 CR3: 000000012474e000 CR4: 00000000003506f0 [ 209.455284][ T4856] Call Trace: [ 209.458557][ T4856] [ 209.461579][ T4856] xfrm_net_exit+0x2d/0x60 [ 209.466079][ T4856] ops_undo_list+0x27b/0x410 [ 209.470655][ T4856] cleanup_net+0x2de/0x4d0 [ 209.475108][ T4856] process_scheduled_works+0x4cb/0x9d0 [ 209.480675][ T4856] worker_thread+0x582/0x770 [ 209.485363][ T4856] kthread+0x486/0x510 [ 209.489426][ T4856] ? finish_task_switch+0xad/0x2b0 [ 209.494624][ T4856] ? __pfx_worker_thread+0x10/0x10 [ 209.499766][ T4856] ? __pfx_kthread+0x10/0x10 [ 209.504363][ T4856] ret_from_fork+0xda/0x150 [ 209.508888][ T4856] ? __pfx_kthread+0x10/0x10 [ 209.513524][ T4856] ret_from_fork_asm+0x1a/0x30 [ 209.518299][ T4856] [ 209.521361][ T4856] ---[ end trace 0000000000000000 ]--- [ 209.567206][T13170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.580780][T13170] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.605533][ T4880] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.612637][ T4880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.632000][ T4856] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.639119][ T4856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.649491][T13285] loop4: detected capacity change from 0 to 512 [ 209.727682][T13170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.750215][T13302] atomic_op ffff888104bff128 conn xmit_atomic 0000000000000000 [ 209.763069][T13301] xt_TPROXY: Can be used only with -p tcp or -p udp [ 209.901506][T13326] syzkaller1: entered promiscuous mode [ 209.907039][T13326] syzkaller1: entered allmulticast mode [ 209.933080][T13170] veth0_vlan: entered promiscuous mode [ 209.941898][T13326] hub 6-0:1.0: USB hub found [ 209.946059][T13170] veth1_vlan: entered promiscuous mode [ 209.946661][T13326] hub 6-0:1.0: 8 ports detected [ 209.966600][T13170] veth0_macvtap: entered promiscuous mode [ 209.978951][T13170] veth1_macvtap: entered promiscuous mode [ 209.998301][T13170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.007417][T13170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.015703][T13170] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.024540][T13170] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.033278][T13170] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.041978][T13170] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.436125][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.443630][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.451523][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.458953][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.466485][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.473932][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.481367][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.488840][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.496351][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.503769][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.511179][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.518843][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.526477][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.533961][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.541414][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.548899][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.556358][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.564067][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.571497][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.578933][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.586456][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.593881][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.601319][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.608794][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.616231][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.623734][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.631162][ T3387] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 210.640286][ T3387] hid-generic 0000:0000:0000.001C: hidraw0: HID v10.00 Device [syz0] on syz1 [ 210.718215][T13376] loop0: detected capacity change from 0 to 128 [ 210.729759][T13376] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 210.743236][T13376] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 210.771136][T11185] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.867652][T13388] veth1_macvtap: left promiscuous mode [ 210.943803][T13398] loop6: detected capacity change from 0 to 512 [ 210.958866][T13398] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.728013][T13425] SELinux: ebitmap: truncated map [ 211.733835][T13425] SELinux: failed to load policy [ 211.952302][T13440] __nla_validate_parse: 1 callbacks suppressed [ 211.952319][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3501'. [ 211.982278][T13170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.991410][T13442] loop1: detected capacity change from 0 to 512 [ 212.005543][T13442] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.118076][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 212.118090][ T29] audit: type=1326 audit(1753465643.746:14407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.4.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8bace9a9 code=0x7ffc0000 [ 212.161536][ T29] audit: type=1326 audit(1753465643.786:14408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.4.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7faa8bace9a9 code=0x7ffc0000 [ 212.185518][ T29] audit: type=1326 audit(1753465643.786:14409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.4.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8bace9a9 code=0x7ffc0000 [ 212.209149][ T29] audit: type=1326 audit(1753465643.786:14410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.4.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa8bace9a9 code=0x7ffc0000 [ 212.232759][ T29] audit: type=1326 audit(1753465643.786:14411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.4.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8bace9a9 code=0x7ffc0000 [ 212.256427][ T29] audit: type=1326 audit(1753465643.786:14412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.4.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa8bace9a9 code=0x7ffc0000 [ 212.280070][ T29] audit: type=1326 audit(1753465643.786:14413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.4.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8bace9a9 code=0x7ffc0000 [ 212.303711][ T29] audit: type=1326 audit(1753465643.786:14414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.4.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa8bace9a9 code=0x7ffc0000 [ 212.327387][ T29] audit: type=1326 audit(1753465643.786:14415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.4.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa8bace9a9 code=0x7ffc0000 [ 212.350978][ T29] audit: type=1326 audit(1753465643.786:14416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13450 comm="syz.4.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa8bace9a9 code=0x7ffc0000 [ 212.493903][T13457] @ÿ: renamed from bond_slave_0 (while UP) [ 212.766320][T13478] xt_TPROXY: Can be used only with -p tcp or -p udp [ 212.975330][T12090] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.053281][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.060812][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.069915][T13504] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.094146][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.101759][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.109170][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.116616][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.124066][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.131492][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.138873][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.146300][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.153744][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.161181][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.169031][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.176461][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.183862][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.191259][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.198646][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.206082][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.213493][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.220881][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.228316][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.235756][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.243225][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.250897][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.258338][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.265876][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.273348][ T3380] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 213.343103][ T3380] hid-generic 0000:0000:0000.001D: hidraw0: HID v10.00 Device [syz0] on syz1 [ 213.443637][T13515] loop0: detected capacity change from 0 to 128 [ 213.453167][T13515] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 213.480811][T13535] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.532798][T13539] FAULT_INJECTION: forcing a failure. [ 213.532798][T13539] name failslab, interval 1, probability 0, space 0, times 0 [ 213.545491][T13539] CPU: 0 UID: 0 PID: 13539 Comm: syz.4.3540 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 213.545596][T13539] Tainted: [W]=WARN [ 213.545603][T13539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 213.545615][T13539] Call Trace: [ 213.545620][T13539] [ 213.545627][T13539] __dump_stack+0x1d/0x30 [ 213.545648][T13539] dump_stack_lvl+0xe8/0x140 [ 213.545705][T13539] dump_stack+0x15/0x1b [ 213.545740][T13539] should_fail_ex+0x265/0x280 [ 213.545773][T13539] ? audit_log_d_path+0x8d/0x150 [ 213.545895][T13539] should_failslab+0x8c/0xb0 [ 213.545918][T13539] __kmalloc_cache_noprof+0x4c/0x320 [ 213.545950][T13539] audit_log_d_path+0x8d/0x150 [ 213.545983][T13539] audit_log_d_path_exe+0x42/0x70 [ 213.546034][T13539] audit_log_task+0x1e9/0x250 [ 213.546130][T13539] audit_seccomp+0x61/0x100 [ 213.546192][T13539] ? __seccomp_filter+0x68c/0x10d0 [ 213.546244][T13539] __seccomp_filter+0x69d/0x10d0 [ 213.546267][T13539] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 213.546304][T13539] ? vfs_write+0x75e/0x8e0 [ 213.546362][T13539] ? __rcu_read_unlock+0x4f/0x70 [ 213.546381][T13539] ? __fget_files+0x184/0x1c0 [ 213.546399][T13539] __secure_computing+0x82/0x150 [ 213.546418][T13539] syscall_trace_enter+0xcf/0x1e0 [ 213.546473][T13539] do_syscall_64+0xac/0x200 [ 213.546493][T13539] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.546517][T13539] ? clear_bhb_loop+0x40/0x90 [ 213.546536][T13539] ? clear_bhb_loop+0x40/0x90 [ 213.546602][T13539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.546625][T13539] RIP: 0033:0x7faa8bace9a9 [ 213.546640][T13539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.546658][T13539] RSP: 002b:00007faa8a12f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 213.546675][T13539] RAX: ffffffffffffffda RBX: 00007faa8bcf5fa0 RCX: 00007faa8bace9a9 [ 213.546688][T13539] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 213.546702][T13539] RBP: 00007faa8a12f090 R08: 0000000000000000 R09: 0000000000000000 [ 213.546714][T13539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.546732][T13539] R13: 0000000000000000 R14: 00007faa8bcf5fa0 R15: 00007fff3c7002b8 [ 213.546751][T13539] [ 213.897574][T13549] veth1_macvtap: left promiscuous mode [ 214.019555][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.027312][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.034888][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.042438][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.049922][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.057411][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.064968][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.072416][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.079872][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.087626][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.095385][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.102830][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.110345][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.117888][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.125388][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.132848][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.140286][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.147761][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.155178][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.162751][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.170240][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.177668][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.185305][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.192710][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.200186][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.207610][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.215020][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.222429][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.229839][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.237272][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.244844][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.252243][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.259686][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.267102][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.274509][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.282135][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.289857][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.297335][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.304742][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.312305][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.319703][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.327113][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.334517][ T3400] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 214.343025][ T3400] hid-generic 0000:0000:0000.001E: hidraw0: HID v10.00 Device [syz0] on syz1 [ 214.353222][T13568] lo speed is unknown, defaulting to 1000 [ 214.358743][T13571] loop3: detected capacity change from 0 to 512 [ 214.367426][T13569] loop1: detected capacity change from 0 to 256 [ 214.372754][T13568] lo speed is unknown, defaulting to 1000 [ 214.380312][T13568] lo speed is unknown, defaulting to 1000 [ 214.387208][T13568] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 214.396719][T13568] lo speed is unknown, defaulting to 1000 [ 214.404897][T13568] lo speed is unknown, defaulting to 1000 [ 214.419227][T13571] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.425692][T13568] lo speed is unknown, defaulting to 1000 [ 214.434997][T13571] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 214.441021][T13568] lo speed is unknown, defaulting to 1000 [ 214.465271][T13571] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3552: bg 0: block 217: padding at end of block bitmap is not set [ 214.466497][T13568] lo speed is unknown, defaulting to 1000 [ 214.486318][T13569] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.553529][T13592] lo speed is unknown, defaulting to 1000 [ 214.576824][T13593] loop4: detected capacity change from 0 to 512 [ 214.609144][T13593] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 214.700644][T13593] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 214.798091][T13593] EXT4-fs (loop4): 1 truncate cleaned up [ 214.811468][T13593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.858706][T13612] loop1: detected capacity change from 0 to 512 [ 214.939376][T11729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.958874][T13621] lo speed is unknown, defaulting to 1000 [ 215.030518][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.038001][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.045530][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.053039][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.060429][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.067941][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.075386][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.082932][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.090446][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.097931][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.105446][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.112935][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.120347][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.127926][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.135392][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.142892][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.150280][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.157821][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.165393][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.173040][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.180620][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.188218][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.195793][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.203212][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.210664][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.218107][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.223660][T13626] lo speed is unknown, defaulting to 1000 [ 215.225508][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.238620][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.246185][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.253600][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.261087][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.268568][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.276082][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.283515][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.290908][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.298355][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.305770][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.313198][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.320618][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.328075][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.335525][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.342978][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.350594][ T9] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 215.364570][ T9] hid-generic 0000:0000:0000.001F: hidraw0: HID v10.00 Device [syz0] on syz1 [ 215.471992][T13647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3581'. [ 215.496787][T13647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3581'. [ 215.542644][T13655] syzkaller1: entered promiscuous mode [ 215.548293][T13655] syzkaller1: entered allmulticast mode [ 215.603622][T13655] hub 6-0:1.0: USB hub found [ 215.609123][T13655] hub 6-0:1.0: 8 ports detected [ 215.688077][T13668] loop0: detected capacity change from 0 to 2048 [ 215.767113][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.774742][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.782221][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.789696][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.797217][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.804707][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.812116][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.819491][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.826941][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.834397][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.841834][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.849407][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.856845][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.864293][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.871762][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.879224][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.886645][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.894049][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.901720][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.909266][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.916779][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.924291][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.931800][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.939224][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.946706][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.954122][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.961537][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.969154][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.976568][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.984010][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.991451][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 215.998852][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 216.006949][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 216.014407][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 216.021835][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 216.029443][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 216.036954][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 216.044459][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 216.051896][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 216.059348][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 216.059705][T13678] loop3: detected capacity change from 0 to 8192 [ 216.066750][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 216.066777][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 216.066829][ T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 216.096458][ T9] hid-generic 0000:0000:0000.0020: hidraw0: HID v10.00 Device [syz0] on syz1 [ 216.200372][T13688] xt_TPROXY: Can be used only with -p tcp or -p udp [ 216.248670][T13702] atomic_op ffff888122a5bd28 conn xmit_atomic 0000000000000000 [ 216.264181][T13701] syzkaller1: entered promiscuous mode [ 216.269694][T13701] syzkaller1: entered allmulticast mode [ 216.295444][T13708] lo speed is unknown, defaulting to 1000 [ 216.316885][T13701] hub 6-0:1.0: USB hub found [ 216.321948][T13701] hub 6-0:1.0: 8 ports detected [ 216.360805][T13714] FAULT_INJECTION: forcing a failure. [ 216.360805][T13714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.374104][T13714] CPU: 1 UID: 0 PID: 13714 Comm: syz.4.3611 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 216.374199][T13714] Tainted: [W]=WARN [ 216.374205][T13714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 216.374217][T13714] Call Trace: [ 216.374222][T13714] [ 216.374294][T13714] __dump_stack+0x1d/0x30 [ 216.374316][T13714] dump_stack_lvl+0xe8/0x140 [ 216.374449][T13714] dump_stack+0x15/0x1b [ 216.374521][T13714] should_fail_ex+0x265/0x280 [ 216.374590][T13714] should_fail+0xb/0x20 [ 216.374616][T13714] should_fail_usercopy+0x1a/0x20 [ 216.374646][T13714] _copy_from_user+0x1c/0xb0 [ 216.374666][T13714] memdup_user+0x5e/0xd0 [ 216.374753][T13714] security_setselfattr+0x8d/0x260 [ 216.374784][T13714] __x64_sys_lsm_set_self_attr+0x51/0x60 [ 216.374902][T13714] x64_sys_call+0x2b0f/0x2fb0 [ 216.374922][T13714] do_syscall_64+0xd2/0x200 [ 216.374943][T13714] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 216.374969][T13714] ? clear_bhb_loop+0x40/0x90 [ 216.375065][T13714] ? clear_bhb_loop+0x40/0x90 [ 216.375093][T13714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.375113][T13714] RIP: 0033:0x7faa8bace9a9 [ 216.375127][T13714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.375152][T13714] RSP: 002b:00007faa8a12f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cc [ 216.375172][T13714] RAX: ffffffffffffffda RBX: 00007faa8bcf5fa0 RCX: 00007faa8bace9a9 [ 216.375186][T13714] RDX: 00000000000000a3 RSI: 0000000000000000 RDI: 0000000000000066 [ 216.375236][T13714] RBP: 00007faa8a12f090 R08: 0000000000000000 R09: 0000000000000000 [ 216.375266][T13714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.375358][T13714] R13: 0000000000000000 R14: 00007faa8bcf5fa0 R15: 00007fff3c7002b8 [ 216.375378][T13714] [ 216.376085][T13714] netlink: 'syz.4.3611': attribute type 27 has an invalid length. [ 216.427488][T13717] syz_tun: entered allmulticast mode [ 216.584748][T13714] 0ªî{X¹¦: left allmulticast mode [ 216.603646][T13714] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.610818][T13714] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.646126][T13714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.655634][T13714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.679685][T13714] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.688715][T13714] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.697845][T13714] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.706796][T13714] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.720130][T13713] syz_tun: left allmulticast mode [ 216.763037][T13730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3615'. [ 216.800678][T13738] loop4: detected capacity change from 0 to 512 [ 216.812560][T13738] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.825211][T13738] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3618: bg 0: block 217: padding at end of block bitmap is not set [ 216.987632][T13747] netlink: 'syz.6.3622': attribute type 27 has an invalid length. [ 217.022281][T13747] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.029542][T13747] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.072682][T13747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.082414][T13747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.112001][T13747] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.121010][T13747] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.130002][T13747] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.138990][T13747] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.142750][ T29] kauditd_printk_skb: 724 callbacks suppressed [ 217.142775][ T29] audit: type=1326 audit(1753465648.756:15141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42b8565967 code=0x7ffc0000 [ 217.178100][ T29] audit: type=1326 audit(1753465648.756:15142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42b850ab89 code=0x7ffc0000 [ 217.201957][ T29] audit: type=1326 audit(1753465648.756:15143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f42b856e9a9 code=0x7ffc0000 [ 217.225624][ T29] audit: type=1326 audit(1753465648.776:15144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42b8565967 code=0x7ffc0000 [ 217.249319][ T29] audit: type=1326 audit(1753465648.776:15145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42b850ab89 code=0x7ffc0000 [ 217.272981][ T29] audit: type=1326 audit(1753465648.776:15146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f42b856e9a9 code=0x7ffc0000 [ 217.296551][ T29] audit: type=1326 audit(1753465648.776:15147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f42b8565967 code=0x7ffc0000 [ 217.320106][ T29] audit: type=1326 audit(1753465648.776:15148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42b850ab89 code=0x7ffc0000 [ 217.343632][ T29] audit: type=1326 audit(1753465648.776:15149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13709 comm="syz.1.3610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f42b856e9a9 code=0x7ffc0000 [ 217.386074][T13759] syz_tun: entered allmulticast mode [ 217.407283][T13761] bridge_slave_0: left allmulticast mode [ 217.413000][T13761] bridge_slave_0: left promiscuous mode [ 217.418821][T13761] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.429701][T13761] bridge_slave_1: left allmulticast mode [ 217.435552][T13761] bridge_slave_1: left promiscuous mode [ 217.441510][T13761] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.451009][T13761] bond0: (slave bond_slave_0): Releasing backup interface [ 217.460562][T13761] bond0: (slave bond_slave_1): Releasing backup interface [ 217.471624][T13761] team0: Port device team_slave_0 removed [ 217.479507][T13761] team0: Port device team_slave_1 removed [ 217.486320][T13761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.493758][T13761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.502357][T13761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.509803][T13761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.525792][T13761] bond0: (slave geneve1): Releasing backup interface [ 217.536215][T13749] lo speed is unknown, defaulting to 1000 [ 217.536249][T13746] syz_tun: left allmulticast mode [ 217.616312][T13783] loop6: detected capacity change from 0 to 512 [ 217.633125][T13783] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 217.646046][T13783] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3632: bg 0: block 217: padding at end of block bitmap is not set [ 218.244153][T13806] loop3: detected capacity change from 0 to 4096 [ 218.368842][T13808] netlink: 'syz.3.3640': attribute type 10 has an invalid length. [ 218.418572][T13808] team0: Port device dummy0 added [ 218.518601][T13815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14608 sclass=netlink_route_socket pid=13815 comm=syz.3.3640 [ 218.553942][T13814] lo speed is unknown, defaulting to 1000 [ 218.588914][ T29] audit: type=1400 audit(1753465650.216:15150): avc: denied { setattr } for pid=13811 comm="syz.0.3642" name="" dev="pipefs" ino=43055 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 218.879708][T13830] loop4: detected capacity change from 0 to 2048 [ 218.899811][T11729] EXT4-fs unmount: 8 callbacks suppressed [ 218.899843][T11729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.933255][T13830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.976924][T11897] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.012892][T13842] loop4: detected capacity change from 0 to 128 [ 219.030449][T13842] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.062765][T13842] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.077774][T13847] loop6: detected capacity change from 0 to 512 [ 219.086152][T13847] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.427143][T13891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3660'. [ 220.042711][T13170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.174654][T13999] atomic_op ffff888123adc528 conn xmit_atomic 0000000000000000 [ 220.221150][T14007] loop3: detected capacity change from 0 to 512 [ 220.222000][T14006] syzkaller1: entered promiscuous mode [ 220.233020][T14006] syzkaller1: entered allmulticast mode [ 220.243544][T14007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.256360][T14007] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.270128][T14007] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3666: bg 0: block 217: padding at end of block bitmap is not set [ 220.275326][T14006] hub 6-0:1.0: USB hub found [ 220.289248][T14006] hub 6-0:1.0: 8 ports detected [ 220.464947][T11729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.501537][T14020] loop3: detected capacity change from 0 to 2048 [ 220.512747][T14020] Alternate GPT is invalid, using primary GPT. [ 220.519346][T14020] loop3: p1 p2 p3 [ 220.726588][T11897] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 220.787781][T14037] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3677'. [ 220.848630][T14037] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.857489][T14037] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.866229][T14037] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.874976][T14037] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.027124][T14037] vxlan0: entered promiscuous mode [ 221.053844][T14047] loop6: detected capacity change from 0 to 512 [ 221.103659][T14047] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.157411][T14047] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.207732][T14047] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3681: bg 0: block 217: padding at end of block bitmap is not set [ 221.258801][T14053] lo speed is unknown, defaulting to 1000 [ 221.695894][T13170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.788333][T14075] loop6: detected capacity change from 0 to 4096 [ 221.796809][T14075] EXT4-fs: inline encryption not supported [ 221.814000][T14075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.837413][T14075] EXT4-fs error (device loop6): ext4_get_first_dir_block:3545: inode #12: block 80: comm syz.6.3689: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 221.859546][T14075] EXT4-fs (loop6): Remounting filesystem read-only [ 221.868883][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3689'. [ 221.947664][T14082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3693'. [ 221.956728][T14082] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3693'. [ 222.029549][T14092] SELinux: syz.4.3698 (14092) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 222.036216][T14094] syzkaller1: entered promiscuous mode [ 222.048943][T14094] syzkaller1: entered allmulticast mode [ 222.106638][T14094] hub 6-0:1.0: USB hub found [ 222.111519][T14094] hub 6-0:1.0: 8 ports detected [ 222.142372][ T29] kauditd_printk_skb: 855 callbacks suppressed [ 222.142459][ T29] audit: type=1326 audit(1753465653.776:16006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.3.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ad2035967 code=0x7ffc0000 [ 222.172576][ T29] audit: type=1326 audit(1753465653.776:16007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.3.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad1fdab89 code=0x7ffc0000 [ 222.196120][ T29] audit: type=1326 audit(1753465653.776:16008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.3.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f2ad203e9a9 code=0x7ffc0000 [ 222.219837][ T29] audit: type=1326 audit(1753465653.806:16009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.3.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ad2035967 code=0x7ffc0000 [ 222.243824][ T29] audit: type=1326 audit(1753465653.806:16010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.3.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad1fdab89 code=0x7ffc0000 [ 222.267381][ T29] audit: type=1326 audit(1753465653.806:16011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.3.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f2ad203e9a9 code=0x7ffc0000 [ 222.291804][ T29] audit: type=1326 audit(1753465653.836:16012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.3.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ad2035967 code=0x7ffc0000 [ 222.315457][ T29] audit: type=1326 audit(1753465653.836:16013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.3.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ad1fdab89 code=0x7ffc0000 [ 222.339016][ T29] audit: type=1326 audit(1753465653.836:16014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.3.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f2ad203e9a9 code=0x7ffc0000 [ 222.362832][ T29] audit: type=1326 audit(1753465653.836:16015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14061 comm="syz.3.3686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2ad2035967 code=0x7ffc0000 [ 222.400687][T14107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3703'. [ 222.573211][T13170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.646376][T14117] loop0: detected capacity change from 0 to 512 [ 222.656157][T14116] lo speed is unknown, defaulting to 1000 [ 222.947856][T14122] lo speed is unknown, defaulting to 1000 [ 222.976458][T14125] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3707'. [ 222.985884][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3707'. [ 223.542726][T14117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.555409][T14117] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.568484][T14117] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.588506][T14145] loop3: detected capacity change from 0 to 512 [ 223.599729][T14145] EXT4-fs: quotafile must be on filesystem root [ 223.788966][T14152] loop6: detected capacity change from 0 to 2048 [ 223.903667][T14152] Alternate GPT is invalid, using primary GPT. [ 223.910004][T14152] loop6: p1 p2 p3 [ 224.218909][T14186] loop6: detected capacity change from 0 to 2048 [ 224.228391][T14185] lo speed is unknown, defaulting to 1000 [ 224.334735][T14186] Alternate GPT is invalid, using primary GPT. [ 224.341188][T14186] loop6: p1 p2 p3 [ 224.579431][T14213] syzkaller1: entered promiscuous mode [ 224.584999][T14213] syzkaller1: entered allmulticast mode [ 224.634963][T14213] hub 6-0:1.0: USB hub found [ 224.640836][T14213] hub 6-0:1.0: 8 ports detected [ 224.687293][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3736'. [ 224.780592][T14246] loop3: detected capacity change from 0 to 2048 [ 224.802709][T14250] loop0: detected capacity change from 0 to 2048 [ 224.818714][T14250] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.844890][T14246] Alternate GPT is invalid, using primary GPT. [ 224.851388][T14246] loop3: p1 p2 p3 [ 224.867080][T14250] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.100917][T14297] loop0: detected capacity change from 0 to 512 [ 225.208152][T14297] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.220827][T14297] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.232833][T14297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.314410][T14306] lo speed is unknown, defaulting to 1000 [ 225.726333][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3756'. [ 226.045086][T14335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3763'. [ 226.054053][T14335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3763'. [ 226.134736][T14338] loop6: detected capacity change from 0 to 512 [ 226.156422][T14338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.170216][T14338] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.189929][T14338] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3764: bg 0: block 217: padding at end of block bitmap is not set [ 226.326486][T14348] atomic_op ffff88811efdf528 conn xmit_atomic 0000000000000000 [ 226.455966][T13170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.504865][T14353] lo speed is unknown, defaulting to 1000 [ 226.903076][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 226.910680][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 226.918520][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 226.926048][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 226.933740][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 226.941236][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 226.948627][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 226.956204][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 226.963743][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 226.971293][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 226.978684][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 226.986115][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.017783][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.025224][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.032676][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.040128][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.047824][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.055254][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.062821][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.070401][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.077856][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.085444][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.092898][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.100422][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.108016][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.115427][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.122844][ T3408] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 227.274032][T14388] loop4: detected capacity change from 0 to 2048 [ 227.362729][T14388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.410873][T14388] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.586741][T14404] loop3: detected capacity change from 0 to 512 [ 227.617200][T14404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.085025][ T3408] hid-generic 0000:0000:0000.0021: hidraw0: HID v10.00 Device [syz0] on syz1 [ 229.128768][T14412] loop4: detected capacity change from 0 to 512 [ 229.217038][T14412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.229635][T14412] ext4 filesystem being mounted at /146/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.241747][T14412] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.473511][T14421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3789'. [ 229.560905][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 229.560918][ T29] audit: type=1326 audit(1753465661.186:16157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14425 comm="syz.0.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 229.599247][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3791'. [ 229.608246][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3791'. [ 229.647874][ T29] audit: type=1326 audit(1753465661.226:16158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14425 comm="syz.0.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 229.671644][ T29] audit: type=1326 audit(1753465661.226:16159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14425 comm="syz.0.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 229.695266][ T29] audit: type=1326 audit(1753465661.226:16160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14425 comm="syz.0.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 229.718961][ T29] audit: type=1326 audit(1753465661.226:16161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14425 comm="syz.0.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 229.742538][ T29] audit: type=1326 audit(1753465661.226:16162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14425 comm="syz.0.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 229.766317][ T29] audit: type=1326 audit(1753465661.226:16163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14425 comm="syz.0.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 229.790046][ T29] audit: type=1326 audit(1753465661.226:16164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14425 comm="syz.0.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 229.813773][ T29] audit: type=1326 audit(1753465661.226:16165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14425 comm="syz.0.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 229.837440][ T29] audit: type=1326 audit(1753465661.226:16166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14425 comm="syz.0.3791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9771fe9a9 code=0x7ffc0000 [ 229.891042][T11729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.927314][T14426] SELinux: ebitmap: high bit 2148008064 is not equal to the expected value 384 [ 229.944631][T14426] SELinux: failed to load policy [ 230.016095][T14431] netlink: '+}[@': attribute type 10 has an invalid length. [ 230.023452][T14431] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 230.049712][T14431] geneve1: left promiscuous mode [ 230.058162][T14431] team0: Port device geneve1 added [ 230.128974][T14437] lo speed is unknown, defaulting to 1000 [ 230.297541][T14443] loop3: detected capacity change from 0 to 2048 [ 230.373423][T14443] Alternate GPT is invalid, using primary GPT. [ 230.379785][T14443] loop3: p1 p2 p3 [ 230.647148][T14450] lo speed is unknown, defaulting to 1000 [ 231.165586][T14458] loop4: detected capacity change from 0 to 512 [ 231.178366][T14461] syzkaller1: entered promiscuous mode [ 231.184057][T14461] syzkaller1: entered allmulticast mode [ 231.286745][T14461] hub 6-0:1.0: USB hub found [ 231.308904][T14461] hub 6-0:1.0: 8 ports detected [ 231.388430][T14458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.402279][T14458] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.416886][T14458] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3805: bg 0: block 217: padding at end of block bitmap is not set [ 231.431449][T14482] loop3: detected capacity change from 0 to 2048 [ 231.462499][T14482] Alternate GPT is invalid, using primary GPT. [ 231.469016][T14482] loop3: p1 p2 p3 [ 231.557330][T14487] lo speed is unknown, defaulting to 1000 [ 231.634632][T11897] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.673197][T14494] lo speed is unknown, defaulting to 1000 [ 231.759671][T14502] FAULT_INJECTION: forcing a failure. [ 231.759671][T14502] name failslab, interval 1, probability 0, space 0, times 0 [ 231.772474][T14502] CPU: 0 UID: 0 PID: 14502 Comm: syz.1.3817 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 231.772506][T14502] Tainted: [W]=WARN [ 231.772513][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.772601][T14502] Call Trace: [ 231.772607][T14502] [ 231.772615][T14502] __dump_stack+0x1d/0x30 [ 231.772638][T14502] dump_stack_lvl+0xe8/0x140 [ 231.772668][T14502] dump_stack+0x15/0x1b [ 231.772687][T14502] should_fail_ex+0x265/0x280 [ 231.772801][T14502] should_failslab+0x8c/0xb0 [ 231.772823][T14502] kmem_cache_alloc_node_noprof+0x57/0x320 [ 231.772856][T14502] ? __alloc_skb+0x101/0x320 [ 231.772888][T14502] __alloc_skb+0x101/0x320 [ 231.772913][T14502] ? audit_log_start+0x365/0x6c0 [ 231.773038][T14502] audit_log_start+0x380/0x6c0 [ 231.773073][T14502] audit_seccomp+0x48/0x100 [ 231.773099][T14502] ? __seccomp_filter+0x68c/0x10d0 [ 231.773120][T14502] __seccomp_filter+0x69d/0x10d0 [ 231.773214][T14502] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 231.773263][T14502] ? vfs_write+0x75e/0x8e0 [ 231.773377][T14502] __secure_computing+0x82/0x150 [ 231.773399][T14502] syscall_trace_enter+0xcf/0x1e0 [ 231.773422][T14502] do_syscall_64+0xac/0x200 [ 231.773441][T14502] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 231.773517][T14502] ? clear_bhb_loop+0x40/0x90 [ 231.773596][T14502] ? clear_bhb_loop+0x40/0x90 [ 231.773620][T14502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.773692][T14502] RIP: 0033:0x7f42b856e9a9 [ 231.773708][T14502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.773728][T14502] RSP: 002b:00007f42b6bd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 231.773747][T14502] RAX: ffffffffffffffda RBX: 00007f42b8795fa0 RCX: 00007f42b856e9a9 [ 231.773764][T14502] RDX: 0000200000000000 RSI: 0000000000000025 RDI: 0000000000000006 [ 231.773776][T14502] RBP: 00007f42b6bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 231.773788][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.773837][T14502] R13: 0000000000000000 R14: 00007f42b8795fa0 R15: 00007ffd30dea9b8 [ 231.773856][T14502] [ 231.802642][T14508] syzkaller1: entered promiscuous mode [ 231.816890][T14506] atomic_op ffff88811e8fa528 conn xmit_atomic 0000000000000000 [ 231.819607][T14508] syzkaller1: entered allmulticast mode [ 231.884546][T14508] hub 6-0:1.0: USB hub found [ 232.023518][T14508] hub 6-0:1.0: 8 ports detected [ 232.071943][T14518] loop4: detected capacity change from 0 to 2048 [ 232.112679][T14518] Alternate GPT is invalid, using primary GPT. [ 232.119066][T14518] loop4: p1 p2 p3 [ 232.262936][T14527] lo speed is unknown, defaulting to 1000 [ 232.389688][T14538] lo speed is unknown, defaulting to 1000 [ 232.579569][T14549] lo speed is unknown, defaulting to 1000 [ 232.773153][T14550] lo speed is unknown, defaulting to 1000 [ 233.056103][T14566] loop0: detected capacity change from 0 to 512 [ 233.072973][T14566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.085635][T14566] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.098597][T14566] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.3841: bg 0: block 217: padding at end of block bitmap is not set [ 233.274304][T14572] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3843'. [ 233.286858][T11185] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.407329][T14582] lo speed is unknown, defaulting to 1000 [ 233.491525][T14589] loop4: detected capacity change from 0 to 2048 [ 233.543317][T14589] Alternate GPT is invalid, using primary GPT. [ 233.549772][T14589] loop4: p1 p2 p3 [ 233.595989][T14592] loop4: detected capacity change from 0 to 512 [ 233.604609][T14592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.671857][T14587] SELinux: ebitmap: truncated map [ 233.678020][T14587] SELinux: failed to load policy [ 233.720167][T14597] loop6: detected capacity change from 0 to 2048 [ 233.744330][T14597] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.791393][T14606] loop1: detected capacity change from 0 to 512 [ 233.797906][T14599] loop0: detected capacity change from 0 to 8192 [ 233.827780][T14606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.849879][T14606] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.879416][T14606] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3855: bg 0: block 217: padding at end of block bitmap is not set [ 233.933308][T13170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.064499][T14622] lo speed is unknown, defaulting to 1000 [ 234.148427][T14628] FAULT_INJECTION: forcing a failure. [ 234.148427][T14628] name failslab, interval 1, probability 0, space 0, times 0 [ 234.161224][T14628] CPU: 0 UID: 0 PID: 14628 Comm: syz.6.3863 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 234.161256][T14628] Tainted: [W]=WARN [ 234.161262][T14628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.161335][T14628] Call Trace: [ 234.161341][T14628] [ 234.161347][T14628] __dump_stack+0x1d/0x30 [ 234.161430][T14628] dump_stack_lvl+0xe8/0x140 [ 234.161452][T14628] dump_stack+0x15/0x1b [ 234.161471][T14628] should_fail_ex+0x265/0x280 [ 234.161542][T14628] should_failslab+0x8c/0xb0 [ 234.161624][T14628] __kmalloc_cache_node_noprof+0x54/0x320 [ 234.161657][T14628] ? __get_vm_area_node+0x106/0x1d0 [ 234.161687][T14628] __get_vm_area_node+0x106/0x1d0 [ 234.161713][T14628] __vmalloc_node_range_noprof+0x273/0xe00 [ 234.161812][T14628] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 234.161842][T14628] ? mntput_no_expire+0x6f/0x3c0 [ 234.161907][T14628] ? __rcu_read_unlock+0x4f/0x70 [ 234.161932][T14628] ? selinux_capable+0x1f9/0x270 [ 234.161964][T14628] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 234.161996][T14628] __vmalloc_noprof+0x83/0xc0 [ 234.162071][T14628] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 234.162130][T14628] bpf_prog_alloc_no_stats+0x47/0x390 [ 234.162158][T14628] ? bpf_prog_alloc+0x2a/0x150 [ 234.162190][T14628] bpf_prog_alloc+0x3c/0x150 [ 234.162277][T14628] bpf_prog_load+0x514/0x1070 [ 234.162314][T14628] ? security_bpf+0x2b/0x90 [ 234.162334][T14628] __sys_bpf+0x51d/0x790 [ 234.162392][T14628] __x64_sys_bpf+0x41/0x50 [ 234.162418][T14628] x64_sys_call+0x2478/0x2fb0 [ 234.162514][T14628] do_syscall_64+0xd2/0x200 [ 234.162532][T14628] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.162560][T14628] ? clear_bhb_loop+0x40/0x90 [ 234.162583][T14628] ? clear_bhb_loop+0x40/0x90 [ 234.162612][T14628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.162635][T14628] RIP: 0033:0x7fd97609e9a9 [ 234.162672][T14628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.162691][T14628] RSP: 002b:00007fd9746ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.162709][T14628] RAX: ffffffffffffffda RBX: 00007fd9762c5fa0 RCX: 00007fd97609e9a9 [ 234.162721][T14628] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 234.162732][T14628] RBP: 00007fd9746ff090 R08: 0000000000000000 R09: 0000000000000000 [ 234.162812][T14628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.162825][T14628] R13: 0000000000000001 R14: 00007fd9762c5fa0 R15: 00007ffd3df6b9d8 [ 234.162842][T14628] [ 234.162849][T14628] syz.6.3863: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 234.433902][T14628] CPU: 0 UID: 0 PID: 14628 Comm: syz.6.3863 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 234.433935][T14628] Tainted: [W]=WARN [ 234.433941][T14628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.433976][T14628] Call Trace: [ 234.433982][T14628] [ 234.433987][T14628] __dump_stack+0x1d/0x30 [ 234.434087][T14628] dump_stack_lvl+0xe8/0x140 [ 234.434161][T14628] dump_stack+0x15/0x1b [ 234.434179][T14628] warn_alloc+0x12b/0x1a0 [ 234.434217][T14628] __vmalloc_node_range_noprof+0x297/0xe00 [ 234.434333][T14628] ? mntput_no_expire+0x6f/0x3c0 [ 234.434358][T14628] ? __rcu_read_unlock+0x4f/0x70 [ 234.434382][T14628] ? selinux_capable+0x1f9/0x270 [ 234.434442][T14628] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 234.434534][T14628] __vmalloc_noprof+0x83/0xc0 [ 234.434634][T14628] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 234.434661][T14628] bpf_prog_alloc_no_stats+0x47/0x390 [ 234.434726][T14628] ? bpf_prog_alloc+0x2a/0x150 [ 234.434790][T14628] bpf_prog_alloc+0x3c/0x150 [ 234.434815][T14628] bpf_prog_load+0x514/0x1070 [ 234.434886][T14628] ? security_bpf+0x2b/0x90 [ 234.434903][T14628] __sys_bpf+0x51d/0x790 [ 234.434948][T14628] __x64_sys_bpf+0x41/0x50 [ 234.435026][T14628] x64_sys_call+0x2478/0x2fb0 [ 234.435045][T14628] do_syscall_64+0xd2/0x200 [ 234.435062][T14628] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 234.435119][T14628] ? clear_bhb_loop+0x40/0x90 [ 234.435149][T14628] ? clear_bhb_loop+0x40/0x90 [ 234.435168][T14628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.435186][T14628] RIP: 0033:0x7fd97609e9a9 [ 234.435199][T14628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.435215][T14628] RSP: 002b:00007fd9746ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 234.435309][T14628] RAX: ffffffffffffffda RBX: 00007fd9762c5fa0 RCX: 00007fd97609e9a9 [ 234.435320][T14628] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 234.435331][T14628] RBP: 00007fd9746ff090 R08: 0000000000000000 R09: 0000000000000000 [ 234.435394][T14628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.435407][T14628] R13: 0000000000000001 R14: 00007fd9762c5fa0 R15: 00007ffd3df6b9d8 [ 234.435438][T14628] [ 234.435445][T14628] Mem-Info: [ 234.666292][T14628] active_anon:8671 inactive_anon:65 isolated_anon:0 [ 234.666292][T14628] active_file:16530 inactive_file:2628 isolated_file:0 [ 234.666292][T14628] unevictable:0 dirty:213 writeback:19 [ 234.666292][T14628] slab_reclaimable:3345 slab_unreclaimable:14938 [ 234.666292][T14628] mapped:32564 shmem:3323 pagetables:1195 [ 234.666292][T14628] sec_pagetables:0 bounce:0 [ 234.666292][T14628] kernel_misc_reclaimable:0 [ 234.666292][T14628] free:1874713 free_pcp:16004 free_cma:0 [ 234.711711][T14628] Node 0 active_anon:34684kB inactive_anon:260kB active_file:66120kB inactive_file:10512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130256kB dirty:852kB writeback:76kB shmem:13292kB writeback_tmp:0kB kernel_stack:4384kB pagetables:4780kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 234.741046][T14628] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.769707][T14628] lowmem_reserve[]: 0 2882 7860 7860 [ 234.775050][T14628] Node 0 DMA32 free:2947720kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951348kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 234.805543][T14628] lowmem_reserve[]: 0 0 4978 4978 [ 234.810624][T14628] Node 0 Normal free:4535772kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34684kB inactive_anon:260kB active_file:66120kB inactive_file:10512kB unevictable:0kB writepending:928kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:60384kB local_pcp:18404kB free_cma:0kB [ 234.842926][T14628] lowmem_reserve[]: 0 0 0 0 [ 234.847477][T14628] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 234.860408][T14628] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947720kB [ 234.876695][T14628] Node 0 Normal: 211*4kB (UE) 654*8kB (UE) 368*16kB (UE) 415*32kB (UME) 441*64kB (UME) 166*128kB (UME) 116*256kB (UM) 71*512kB (UME) 32*1024kB (UME) 54*2048kB (UM) 1038*4096kB (UM) = 4535772kB [ 234.895960][T14628] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 234.905296][T14628] 22537 total pagecache pages [ 234.909982][T14628] 89 pages in swap cache [ 234.914313][T14628] Free swap = 122952kB [ 234.918477][T14628] Total swap = 124996kB [ 234.922658][T14628] 2097051 pages RAM [ 234.926470][T14628] 0 pages HighMem/MovableOnly [ 234.931230][T14628] 80814 pages reserved [ 235.153943][T11897] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.238050][T12090] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.360556][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 235.360569][ T29] audit: type=1326 audit(1753465666.986:16587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14642 comm="syz.3.3871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad203e9a9 code=0x7ffc0000 [ 235.424125][T14647] can0: slcan on ttyS3. [ 235.443421][T14649] lo speed is unknown, defaulting to 1000 [ 235.482874][T14649] loop3: detected capacity change from 0 to 128 [ 235.489491][T14649] vfat: Unknown parameter '0xffffffffffffffff' [ 235.499214][ T29] audit: type=1400 audit(1753465667.126:16588): avc: denied { ioctl } for pid=14648 comm="syz.3.3873" path="socket:[45268]" dev="sockfs" ino=45268 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 235.533069][T14647] can0 (unregistered): slcan off ttyS3. [ 235.555850][ T29] audit: type=1326 audit(1753465667.186:16589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad203e9a9 code=0x7ffc0000 [ 235.579496][ T29] audit: type=1326 audit(1753465667.186:16590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad203e9a9 code=0x7ffc0000 [ 235.627317][T14656] netlink: 'syz.4.3865': attribute type 1 has an invalid length. [ 235.630670][ T29] audit: type=1400 audit(1753465667.216:16591): avc: denied { kexec_image_load } for pid=14646 comm="syz.6.3872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 235.655358][ T29] audit: type=1326 audit(1753465667.246:16592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2ad203e9a9 code=0x7ffc0000 [ 235.679179][ T29] audit: type=1326 audit(1753465667.246:16593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ad203e9a9 code=0x7ffc0000 [ 235.703028][ T29] audit: type=1326 audit(1753465667.246:16594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f2ad203e9a9 code=0x7ffc0000 [ 235.726861][ T29] audit: type=1326 audit(1753465667.246:16595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ad203e9e3 code=0x7ffc0000 [ 235.750529][ T29] audit: type=1326 audit(1753465667.246:16596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14648 comm="syz.3.3873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2ad203e9e3 code=0x7ffc0000 [ 235.835698][T14671] loop6: detected capacity change from 0 to 512 [ 235.857315][T14675] loop4: detected capacity change from 0 to 512 [ 235.869385][T14671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.883460][T14671] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.886386][T14675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.897205][T14671] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3878: bg 0: block 217: padding at end of block bitmap is not set [ 235.907306][T14675] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.104252][T14675] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3880: bg 0: block 217: padding at end of block bitmap is not set [ 236.123656][T13170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.137379][T14701] loop3: detected capacity change from 0 to 8192 [ 236.154801][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 236.163807][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 236.174005][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 236.190431][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 236.199423][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 236.218679][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 236.226724][T14711] loop6: detected capacity change from 0 to 512 [ 236.252855][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 236.261827][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 236.270919][T14701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3887'. [ 236.281801][T14711] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.297073][T14711] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.312790][T14711] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3891: bg 0: block 217: padding at end of block bitmap is not set [ 236.409226][T14725] syzkaller1: entered promiscuous mode [ 236.414864][T14725] syzkaller1: entered allmulticast mode [ 236.474464][T14725] hub 6-0:1.0: USB hub found [ 236.479273][T14725] hub 6-0:1.0: 8 ports detected [ 236.498135][T11897] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.572921][T13170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.602989][T14731] lo speed is unknown, defaulting to 1000 [ 236.663470][T14741] loop6: detected capacity change from 0 to 512 [ 236.682907][T14743] loop3: detected capacity change from 0 to 2048 [ 236.683549][T14741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.702171][T14741] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.716640][T14741] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3899: bg 0: block 217: padding at end of block bitmap is not set [ 236.738439][T14743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.863922][T11729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.915342][T13170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.945696][T14762] lo speed is unknown, defaulting to 1000 [ 237.012617][T14774] loop1: detected capacity change from 0 to 512 [ 237.025776][T14774] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 237.034581][T14774] FAT-fs (loop1): Filesystem has been set read-only [ 237.062531][T14774] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 237.073936][T14774] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 548) [ 237.075521][T14781] lo speed is unknown, defaulting to 1000 [ 237.094177][T14774] netlink: 'syz.1.3912': attribute type 4 has an invalid length. [ 237.101992][T14774] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3912'. [ 237.239227][T14806] lo speed is unknown, defaulting to 1000 [ 237.247447][T14811] lo speed is unknown, defaulting to 1000 [ 237.584993][T14855] lo speed is unknown, defaulting to 1000 [ 237.995122][T14864] loop3: detected capacity change from 0 to 512 [ 238.003534][T14864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.188446][T14864] ================================================================== [ 238.196589][T14864] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 238.204678][T14864] [ 238.207015][T14864] write to 0xffff88811a8545f8 of 4 bytes by task 14868 on cpu 1: [ 238.214733][T14864] writeback_single_inode+0x14a/0x3e0 [ 238.220124][T14864] sync_inode_metadata+0x5b/0x90 [ 238.225073][T14864] generic_buffers_fsync_noflush+0xd9/0x120 [ 238.230985][T14864] ext4_sync_file+0x1ab/0x690 [ 238.235675][T14864] vfs_fsync_range+0x10a/0x130 [ 238.240451][T14864] ext4_buffered_write_iter+0x34f/0x3c0 [ 238.246092][T14864] ext4_file_write_iter+0x383/0xf00 [ 238.251293][T14864] iter_file_splice_write+0x5ef/0x970 [ 238.256690][T14864] direct_splice_actor+0x153/0x2a0 [ 238.261818][T14864] splice_direct_to_actor+0x30f/0x680 [ 238.267464][T14864] do_splice_direct+0xda/0x150 [ 238.272244][T14864] do_sendfile+0x380/0x650 [ 238.276671][T14864] __x64_sys_sendfile64+0x105/0x150 [ 238.281876][T14864] x64_sys_call+0xb39/0x2fb0 [ 238.286470][T14864] do_syscall_64+0xd2/0x200 [ 238.290975][T14864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.296885][T14864] [ 238.299209][T14864] read to 0xffff88811a8545f8 of 4 bytes by task 14864 on cpu 0: [ 238.306840][T14864] vfs_fsync_range+0x9b/0x130 [ 238.311540][T14864] ext4_buffered_write_iter+0x34f/0x3c0 [ 238.317107][T14864] ext4_file_write_iter+0x383/0xf00 [ 238.322304][T14864] iter_file_splice_write+0x5ef/0x970 [ 238.327695][T14864] direct_splice_actor+0x153/0x2a0 [ 238.332814][T14864] splice_direct_to_actor+0x30f/0x680 [ 238.338211][T14864] do_splice_direct+0xda/0x150 [ 238.343080][T14864] do_sendfile+0x380/0x650 [ 238.347508][T14864] __x64_sys_sendfile64+0x105/0x150 [ 238.352706][T14864] x64_sys_call+0xb39/0x2fb0 [ 238.357302][T14864] do_syscall_64+0xd2/0x200 [ 238.361806][T14864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.367880][T14864] [ 238.370209][T14864] value changed: 0x00000020 -> 0x00000002 [ 238.375929][T14864] [ 238.378245][T14864] Reported by Kernel Concurrency Sanitizer on: [ 238.384499][T14864] CPU: 0 UID: 0 PID: 14864 Comm: syz.3.3945 Tainted: G W 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(voluntary) [ 238.398580][T14864] Tainted: [W]=WARN [ 238.402417][T14864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 238.412484][T14864] ================================================================== [ 238.423584][T14872] atomic_op ffff888106c3c128 conn xmit_atomic 0000000000000000 [ 238.908906][T11729] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.