last executing test programs: 1m32.661336867s ago: executing program 1 (id=1352): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x9, 0x62, {0x62, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0xfffffecc) splice(r6, 0x0, r8, 0x0, 0x7fff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000c40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r9 = accept4$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote}, &(0x7f0000000100)=0x12, 0x80000) connect$x25(r9, &(0x7f0000000140), 0x12) 1m31.22729425s ago: executing program 1 (id=1367): r0 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) bind$can_j1939(r3, &(0x7f0000000200)={0x1d, r2, 0x3, {0x3, 0xf0, 0x4}, 0x1}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', r2, 0x29, 0x1, 0xfa, 0x1, 0x40, @rand_addr=' \x01\x00', @loopback, 0x7800}}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r2, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 1m31.037164318s ago: executing program 1 (id=1368): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4e0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)=[0x9], 0xfffffffffffffffe, 0x39, 0x1, 0x1}}, 0x40) socket(0x10, 0x2, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) rename(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031423002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x0, &(0x7f00000003c0)}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r3 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x3, &(0x7f0000000000)='source', &(0x7f0000000080)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91e[\xea\x11\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={0x0, 0xb}, 0x10800e, 0x0, 0xfffffffc, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000340)='cachefiles_ondemand_close\x00', r4}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1m30.822553498s ago: executing program 1 (id=1373): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x8084) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x40b, 0x70bd2a, 0x500, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000000020000db21000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000f00000000000000000218120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r10 = dup2(r9, r9) sendmsg$nl_route(r9, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000680010002cbd7000ffdbdf25000004002600000008000100020000000600030001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) write$rfkill(r8, &(0x7f0000000640)={0xfff, 0x8, 0x2}, 0x8) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r10, 0x1276, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r11 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r11, 0x0, 0x0, 0x0, 0x0) close(r11) 1m30.790167309s ago: executing program 1 (id=1374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) 1m30.736819501s ago: executing program 1 (id=1376): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x9d2, 0x0, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000900)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@nomblk_io_submit}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}], [{@subj_user={'subj_user', 0x3d, '\\)!['}}]}, 0x64, 0x50b, &(0x7f0000000200)="$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") open_by_handle_at(r1, &(0x7f0000000780)=@ceph_nfs_snapfh={0x1c, 0x4e, {0xffff, 0x6, 0x6, 0x598}}, 0x10002) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c2) pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0xfffffffe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r6, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}]}}) r7 = socket(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r9, @ANYBLOB="010025bd7000fedbdf2507000000080005000200000028000180060002003500000008000b007369700008000900790000000c000700000000003d00000054000180060001000a0000000600010300fe8000000000000000000000000000aa0800050000000000060002002c000000060002001d00000008000800000003000c000700080000000800000008000400060000004000028006000b001d000000140001002001000000000d00000000000000000008000400d9b83c0208000800030000000800060001040000060002004e2300000800050000000000080004000600"/234], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x20044004) 1m15.716874856s ago: executing program 32 (id=1376): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x9d2, 0x0, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000900)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@nomblk_io_submit}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}], [{@subj_user={'subj_user', 0x3d, '\\)!['}}]}, 0x64, 0x50b, &(0x7f0000000200)="$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") open_by_handle_at(r1, &(0x7f0000000780)=@ceph_nfs_snapfh={0x1c, 0x4e, {0xffff, 0x6, 0x6, 0x598}}, 0x10002) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c2) pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) listen(r4, 0xfffffffe) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000680)='h', 0x1}], 0x1) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvfrom$unix(r6, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, 0xffffffffffffffff}}]}}) r7 = socket(0x10, 0x3, 0x6) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r9, @ANYBLOB="010025bd7000fedbdf2507000000080005000200000028000180060002003500000008000b007369700008000900790000000c000700000000003d00000054000180060001000a0000000600010300fe8000000000000000000000000000aa0800050000000000060002002c000000060002001d00000008000800000003000c000700080000000800000008000400060000004000028006000b001d000000140001002001000000000d00000000000000000008000400d9b83c0208000800030000000800060001040000060002004e2300000800050000000000080004000600"/234], 0xf0}, 0x1, 0x0, 0x0, 0x8000}, 0x20044004) 1m13.928612964s ago: executing program 2 (id=1594): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x1}}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x8084) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x40b, 0x70bd2a, 0x500, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="070000000400000000020000db21000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000f00000000000000000218120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r9 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r10 = dup2(r9, r9) sendmsg$nl_route(r9, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000680010002cbd7000ffdbdf25000004002600000008000100020000000600030001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) write$rfkill(r8, &(0x7f0000000640)={0xfff, 0x8, 0x2}, 0x8) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r10, 0x1276, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) r11 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r11, 0x0, 0x0, 0x0, 0x0) close(r11) 1m13.903858746s ago: executing program 2 (id=1595): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f0000000100)='./file1\x00', 0x1a2) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000280)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00!G', 0x3}], 0x1, 0x7, 0x100001) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x24000010, &(0x7f00000002c0)={0xa, 0x0, 0x5, @private2, 0xffff8000, 0x2}, 0x20) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) 1m13.776379491s ago: executing program 2 (id=1599): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m13.517101262s ago: executing program 2 (id=1603): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000002000000000fd9cffff18110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) request_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f0000000580)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\xb0\x8b\xfd\n\xd4\xd7p\x98\x8d\xc9\xb1\x86g\xf7\x83\x93\x9e\xa0R\x82\a\x1a\x7f\x7fvI\x96\x7f\xba e\xd4\xc0\x18r\xe0\x12\xf1p\xa1\xb0\xe2\x8d\xdbX\x98]>\xad\xa6\\\xa9\x9e\xa5\xaa\x9f\xbe\x80L\xc4\"1z\x92\x12\xd0S\x98\x9f\x81 A\xf3\x0f%\xeeAP\xfa\xc8\xf5\x02\xc56\xc5\xe7O\xd2\xcf\xc2i\xdc\xae+.\xb4\xedD\xa0)\xd0\xae\xc2\xf0\x81n\xa6\xca\xf7\xc1rc\xa7\x87\x97\xc9]\x7f\xacu\xb5\xfe\x0e5o\xd9\x9a:8\x9ep\xe0\x82d,N$\xcd\xe4%iE\x1a\xd1v\x17\xa3\x8a8[\xa1s\xd57^\xf1\xd3\xbf\x85\xde\xf7\xb0\xdf\xc0\b\x1c\x80\xbd\xca\x01\xba\xb5\x83\xd5\xd1>\x06\xe05eF\x9a8\xc5]^\x00'/212, 0x0) 1m13.470399105s ago: executing program 2 (id=1606): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000101c0)={0xffffffffffffffff, 0x20, &(0x7f0000010180)={&(0x7f0000010000)=""/245, 0xf5, 0x0, &(0x7f0000010100)=""/121, 0x79}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000010200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000010380)=ANY=[@ANYBLOB="1800b35d4f9401afdddb3f09d36b3900180100002020702500000000001920207b682b999543c69385b0c9671af8ff00000000bea1000000000046d500070100"/78], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f00000013c0)='./file0\x00', 0x0, 0x206002, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f0000010240)={0xa, 0x0, 0x0, @private0}, &(0x7f0000010280)=0x1c, 0x80000) accept4(r4, &(0x7f00000102c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000010340)=0x80, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$TUNATTACHFILTER(r5, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) 1m13.33783791s ago: executing program 2 (id=1612): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xfd09, 0x1000, 0x8000001, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000380)={0x8, 0x6e26, 0x3}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x12, 0x60d, 0x180, 0x202, 0x250, 0x2e8, 0x2e8, 0x250, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x1b}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'wlan1\x00', 'pim6reg1\x00', {}, {}, 0x3a, 0x9, 0x5}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0xff, 0x2, 0x1, [0xfff7, 0xfffe, 0xed, 0xff01, 0x4, 0x9, 0x5, 0x10, 0x3, 0x7, 0xffff, 0x9e, 0xfff, 0x3, 0x4, 0x5], 0x6}}, @common=@unspec=@limit={{0x48}, {0x5, 0x6, 0xfffffffffffffffd, 0x7be, 0xa674, 0x0, 0x6}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$sock(r3, &(0x7f0000000700)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000001500)="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", 0x1000}, {&(0x7f00000004c0)="162b5a6d259a88a70686437c490e4b5bcf550d0b06d811c5027b5f6bf24ebd6796f2951c97dbeab409c3", 0x14}, {&(0x7f0000000600)="264023909a178fd5218814ecc89349a90dbd579e74903c0744113e9453bbdc951608ad01c50459cd4550e488fdec57b85d06cf97f97eb00e90b7842c03f5ab49325f2a91c706528e81ef37b6e72e00b1a4af9ff612106dcb36a0529fa7ef29e27a6da632b615ddbf7e6a53bb71cee519487212530af722e1222fec744365816c1c604d1f8a15752060f71a05b7376aa1dee849c4339a0b260c013e76f5329385a0469e328c02e171b6c5abf45e0ac59f07f03805aa04e5a9c985fc371b358791115dff7c16f7f7e1470da2b77fdc459d52f9b19f0d5f2321b90c3cc197", 0xdd}], 0x3}, 0x80) r7 = getpgid(0xffffffffffffffff) sched_getattr(r7, &(0x7f0000000340)={0x38}, 0x38, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) ptrace$getregs(0xe, 0xffffffffffffffff, 0xfdc6, &(0x7f0000000740)=""/153) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x8000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x6}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xe1cd}]}, 0x60}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0xf7, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) 58.242159439s ago: executing program 33 (id=1612): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x5, 0x8, 0x3}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0xfd09, 0x1000, 0x8000001, 0x224}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x81, 0x8, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000380)={0x8, 0x6e26, 0x3}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x180, 0x12, 0x60d, 0x180, 0x202, 0x250, 0x2e8, 0x2e8, 0x250, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @dev={0xfe, 0x80, '\x00', 0x1b}, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'wlan1\x00', 'pim6reg1\x00', {}, {}, 0x3a, 0x9, 0x5}, 0x0, 0x138, 0x180, 0x0, {}, [@common=@hbh={{0x48}, {0xff, 0x2, 0x1, [0xfff7, 0xfffe, 0xed, 0xff01, 0x4, 0x9, 0x5, 0x10, 0x3, 0x7, 0xffff, 0x9e, 0xfff, 0x3, 0x4, 0x5], 0x6}}, @common=@unspec=@limit={{0x48}, {0x5, 0x6, 0xfffffffffffffffd, 0x7be, 0xa674, 0x0, 0x6}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x180}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$sock(r3, &(0x7f0000000700)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000001500)="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", 0x1000}, {&(0x7f00000004c0)="162b5a6d259a88a70686437c490e4b5bcf550d0b06d811c5027b5f6bf24ebd6796f2951c97dbeab409c3", 0x14}, {&(0x7f0000000600)="264023909a178fd5218814ecc89349a90dbd579e74903c0744113e9453bbdc951608ad01c50459cd4550e488fdec57b85d06cf97f97eb00e90b7842c03f5ab49325f2a91c706528e81ef37b6e72e00b1a4af9ff612106dcb36a0529fa7ef29e27a6da632b615ddbf7e6a53bb71cee519487212530af722e1222fec744365816c1c604d1f8a15752060f71a05b7376aa1dee849c4339a0b260c013e76f5329385a0469e328c02e171b6c5abf45e0ac59f07f03805aa04e5a9c985fc371b358791115dff7c16f7f7e1470da2b77fdc459d52f9b19f0d5f2321b90c3cc197", 0xdd}], 0x3}, 0x80) r7 = getpgid(0xffffffffffffffff) sched_getattr(r7, &(0x7f0000000340)={0x38}, 0x38, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) ptrace$getregs(0xe, 0xffffffffffffffff, 0xfdc6, &(0x7f0000000740)=""/153) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x1}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x4}, @ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x8000}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x6}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x8}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xe1cd}]}, 0x60}, 0x1, 0x0, 0x0, 0x48001}, 0x20000040) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a8", 0xe, 0x0, &(0x7f0000000000)={0x11, 0xf7, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.007296326s ago: executing program 0 (id=2918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffdf000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 951.069508ms ago: executing program 0 (id=2922): bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000340), &(0x7f0000000300)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x400) 892.421331ms ago: executing program 6 (id=2926): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = dup(r0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) socket$netlink(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="128db2cf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) socket$qrtr(0x2a, 0x2, 0x0) 782.443675ms ago: executing program 0 (id=2928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffdf0000000000000000850000004100000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 761.421117ms ago: executing program 0 (id=2929): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = dup(r0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r3, 0x407, 0x176) vmsplice(r4, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(r3, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@delpolicy={0x64, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x2b}, 0x6e6bb6, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @mark={0xc, 0x15, {0x35075d, 0xa659}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 758.331757ms ago: executing program 6 (id=2930): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0x7}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xe, 0x0, &(0x7f00000007c0)="e02742e8680d85ff9782762f0813", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x72bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1f, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x9, 0x20000000, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', 0xffffffffffffffff, 0x0, 0x2000000}, 0x18) io_setup(0x3, &(0x7f0000000340)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, 0x0, 0x6000c054) r10 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x0, 0x6) 669.5934ms ago: executing program 3 (id=2932): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffdf000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 668.99771ms ago: executing program 4 (id=2933): dup(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="128db2cf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) socket$qrtr(0x2a, 0x2, 0x0) 653.189171ms ago: executing program 0 (id=2934): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = dup(r0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r3, 0x407, 0x176) vmsplice(r4, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(r3, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@delpolicy={0x64, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x2b}, 0x6e6bb6, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @mark={0xc, 0x15, {0x35075d, 0xa659}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 606.568983ms ago: executing program 3 (id=2935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x34, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x804) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access4', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 565.451475ms ago: executing program 4 (id=2936): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (fail_nth: 6) 541.787686ms ago: executing program 3 (id=2937): openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 514.905217ms ago: executing program 0 (id=2938): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000001f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010000000000fddbdf2554"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fffffffffffffff, 0x1}, 0x240, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r2, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x20000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$kcm(0x2, 0x3, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getgroups(0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @loopback}}}], 0x20}, 0x4080800) r6 = socket(0x10, 0x3, 0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000080)={0xe000202b}) bind$rds(r6, &(0x7f0000000440)={0x2, 0x4e21, @broadcast}, 0x10) epoll_pwait(r8, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) dup3(r6, r8, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ff030000", @ANYRES16=r4, @ANYBLOB="00022bbd7000fddbdf2553000000"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x20020000) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000180)={0x2d8}, 0x10) write(r9, &(0x7f0000000000)="240000001a005f0400f9f407000904018033200000000000000000000800010000000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) fcntl$getownex(r4, 0x10, &(0x7f0000000000)) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a44000000000900030073797a300000000048000000060a010400000000000000000100000008000b4000000000200004801c00018009e955668e1c0559bb0000000c00028008000240000000010900010073797a3000000000140000000500010000000000000000000000000a"], 0xbc}}, 0x0) 477.934159ms ago: executing program 3 (id=2939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffdf0000000000000000850000004100000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 415.933122ms ago: executing program 3 (id=2940): bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000340), &(0x7f0000000300)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0), 0x400) 415.483911ms ago: executing program 3 (id=2941): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) bind$xdp(r4, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@dev}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(r2, 0x0, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x3ee53089, 0x10003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r10 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000080)='./file0\x00') setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000240)={@multicast1, @loopback, 0x0, 0x9, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @loopback, @multicast2, @private=0xa010102, @local, @local, @multicast1]}, 0x34) openat(r10, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f26) 336.343915ms ago: executing program 5 (id=2943): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[], 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', 0x0}) r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r6, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x6, 0x0, &(0x7f0000000400)=[0x6, 0xdaa3, 0x800000000009, 0x8, 0x100, 0x1a], 0x1ff}}, 0x30) r8 = socket(0x10, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x80, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xe}, {0xc, 0x6}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x1}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x200}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x1, "4098543b41e01652493c81cc4354a907"}}}, @TCA_RATE={0x6, 0x5, {0x5, 0x60}}, @TCA_STAB={0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xe}]}, 0x80}}, 0xbd2436d863b5a9da) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r7, r1, 0x4, r0}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x1072, &(0x7f0000005840)=ANY=[], 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff004a06bc5ee2000000bfa200000000000007070000f8ffffffb703000008000000b78c09fb8680373a9661ecd0382004000000000000859b81eee400000095acf3b7f056267538a137d2447507aed2306c93bbe06c60a0cf1b547a5da5f566ed1e3d46bdaa2548e14da0854fa2eb62bec11cdd95fb9c39e0bccbb6f0c2a2747cd490c45a01ddc77bebcf701b6666eb2286a7c2070000aaf3534ad9134144423c0a9692da0a7c6869b61efd1a6bb2dcb7956525cddcd8"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r10, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) 270.519688ms ago: executing program 4 (id=2944): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r1 = dup(r0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x100}, 0xc) socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r4, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) fcntl$setpipe(r3, 0x407, 0x176) vmsplice(r4, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(r3, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@delpolicy={0x64, 0x14, 0x1, 0x70bd2b, 0x25dfdbfd, {{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}, 0x4e20, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0xa0, 0x2b}, 0x6e6bb6, 0x2}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}, @mark={0xc, 0x15, {0x35075d, 0xa659}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 269.498098ms ago: executing program 5 (id=2945): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 237.492899ms ago: executing program 5 (id=2946): dup(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="128db2cf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) socket$qrtr(0x2a, 0x2, 0x0) 208.10144ms ago: executing program 5 (id=2947): openat$autofs(0xffffffffffffff9c, 0x0, 0xc2041, 0x0) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYBLOB="0949529140986a926d45", @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b742f12af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x699, &(0x7f0000000140)="$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") write$binfmt_script(r1, &(0x7f00000012c0)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0x4236}], 0x1, 0x0, 0x0, 0x0) 194.689811ms ago: executing program 4 (id=2948): iopl(0x3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x34e}, &(0x7f00000004c0), &(0x7f0000000480)) 166.459793ms ago: executing program 4 (id=2949): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)="d8", 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x148, 0x11, 0x148, 0x0, 0x0, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x8, 0x3, 0xac9b, {0x170f}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 163.112012ms ago: executing program 5 (id=2950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000fcffffdf0000000000000000850000004100000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 74.145396ms ago: executing program 5 (id=2951): socket(0x10, 0x802, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x480081, 0x100) r1 = gettid() r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0xfd, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}, 0x1, 0x200000000000000}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff000a}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x3}, 0x18) lsm_get_self_attr(0x66, &(0x7f0000000380)={0x0, 0x0, 0x6c, 0x4c, ""/76}, &(0x7f0000000400)=0x6c, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x4, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000020000000e000400280000000b000002", @ANYRES32=r8], 0x20, 0x2400e044}, 0x0) r9 = syz_io_uring_setup(0x12a, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x0, 0x43}, &(0x7f0000000140)=0x0, &(0x7f00000003c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r9, 0x1e76, 0xf728, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000600004014"], 0x50) unshare(0x22020400) 73.853876ms ago: executing program 4 (id=2952): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0x58}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) socket$packet(0x11, 0x3, 0x300) bind$xdp(r4, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@dev}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(r2, 0x0, 0x81) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) socket(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x3ee53089, 0x10003, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r5, &(0x7f0000003d40)=[{{0x0, 0x94, 0x0}, 0x5}], 0x1, 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 56.021767ms ago: executing program 6 (id=2953): socket$nl_route(0x10, 0x3, 0x0) iopl(0x3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x497, 0x0, &(0x7f00000004c0), &(0x7f0000000480)) 42.135708ms ago: executing program 6 (id=2954): openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 26.317958ms ago: executing program 6 (id=2955): iopl(0x3) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x34e}, &(0x7f00000004c0), &(0x7f0000000480)) 0s ago: executing program 6 (id=2956): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006800010003001000fdffff7fc131bd0331548600000000000000000c00020001000000150000000c000c80060001000000000006"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x48080) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) getdents64(0xffffffffffffffff, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r8, r8, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7fff}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001800000018fecc74f00cd36bcb00000000000008050000000000000000fb000d00000000002e615f00"], 0x0, 0x35, 0x0, 0x1}, 0x28) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='tlb_flush\x00', r9, 0x0, 0xb8}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="b8", 0x1}], 0x1}}], 0x2, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 0 (id=2957): dup(0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000000c0)='{', 0x1}], 0x1, 0xd) vmsplice(0xffffffffffffffff, &(0x7f0000002a80)=[{&(0x7f0000000340)="b9", 0x1}], 0x1, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="128db2cf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0}) socket$qrtr(0x2a, 0x2, 0x0) kernel console output (not intermixed with test programs): arch=c000003e syscall=321 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 126.319617][ T29] audit: type=1326 audit(1764976887.356:16521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 126.343176][ T29] audit: type=1326 audit(1764976887.356:16522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 126.366565][ T29] audit: type=1326 audit(1764976887.356:16523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9008 comm="syz.0.1669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 126.404506][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.491061][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.514382][ T3661] IPVS: starting estimator thread 0... [ 126.544360][ T9022] blktrace: Concurrent blktraces are not allowed on loop9 [ 126.658447][ T9016] IPVS: using max 2496 ests per chain, 124800 per kthread [ 126.686758][ T9026] hub 9-0:1.0: USB hub found [ 126.706949][ T9026] hub 9-0:1.0: 8 ports detected [ 127.016601][ T9032] netlink: 'syz.4.1676': attribute type 13 has an invalid length. [ 127.038572][ T9041] loop0: detected capacity change from 0 to 512 [ 127.070091][ T9041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.088338][ T9041] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.107985][ T9041] FAULT_INJECTION: forcing a failure. [ 127.107985][ T9041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.121104][ T9041] CPU: 1 UID: 0 PID: 9041 Comm: syz.0.1677 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.121128][ T9041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.121207][ T9041] Call Trace: [ 127.121214][ T9041] [ 127.121222][ T9041] __dump_stack+0x1d/0x30 [ 127.121248][ T9041] dump_stack_lvl+0xe8/0x140 [ 127.121311][ T9041] dump_stack+0x15/0x1b [ 127.121330][ T9041] should_fail_ex+0x265/0x280 [ 127.121365][ T9041] should_fail+0xb/0x20 [ 127.121392][ T9041] should_fail_usercopy+0x1a/0x20 [ 127.121460][ T9041] strncpy_from_user+0x27/0x260 [ 127.121487][ T9041] ? kmem_cache_alloc_noprof+0x23f/0x4a0 [ 127.121531][ T9041] getname_flags+0xae/0x3b0 [ 127.121585][ T9041] user_path_at+0x28/0x130 [ 127.121612][ T9041] do_fchownat+0xb0/0x210 [ 127.121638][ T9041] __x64_sys_chown+0x47/0x60 [ 127.121703][ T9041] x64_sys_call+0x2eb9/0x3000 [ 127.121725][ T9041] do_syscall_64+0xd8/0x2a0 [ 127.121776][ T9041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.121797][ T9041] RIP: 0033:0x7f563477f749 [ 127.121812][ T9041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.121828][ T9041] RSP: 002b:00007f56331e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 127.121850][ T9041] RAX: ffffffffffffffda RBX: 00007f56349d5fa0 RCX: 00007f563477f749 [ 127.121864][ T9041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 127.121878][ T9041] RBP: 00007f56331e7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.121950][ T9041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.121961][ T9041] R13: 00007f56349d6038 R14: 00007f56349d5fa0 R15: 00007ffdd50c6348 [ 127.121982][ T9041] [ 127.327170][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.338268][ T9051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.350815][ T9051] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.381588][ T9055] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 127.428744][ T9059] set_capacity_and_notify: 2 callbacks suppressed [ 127.428753][ T9059] loop3: detected capacity change from 0 to 512 [ 127.442186][ T9059] EXT4-fs: Ignoring removed bh option [ 127.448057][ T9055] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 127.448067][ T9059] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 127.448083][ T9059] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 127.475359][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.484790][ T9055] EXT4-fs (loop0): orphan cleanup on readonly fs [ 127.491625][ T9059] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 127.492094][ T9055] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 127.508443][ T9059] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 127.515374][ T9055] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 127.533609][ T9055] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.1679: Freeing blocks not in datazone - block = 0, count = 4096 [ 127.547740][ T9055] EXT4-fs (loop0): 1 orphan inode deleted [ 127.553861][ T9059] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.554132][ T9055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 127.580736][ T9063] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1682'. [ 127.595311][ T9063] IPVS: Error connecting to the multicast addr [ 127.618080][ T9065] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 127.634001][ T9065] loop4: detected capacity change from 0 to 2048 [ 127.651446][ T9065] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.663744][ T9065] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.675321][ T9065] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1683: bg 0: block 345: padding at end of block bitmap is not set [ 127.689948][ T9065] EXT4-fs (loop4): Remounting filesystem read-only [ 128.212039][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.247887][ T9072] lo speed is unknown, defaulting to 1000 [ 128.272040][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.298716][ T9075] blktrace: Concurrent blktraces are not allowed on loop7 [ 128.362025][ T9077] loop0: detected capacity change from 0 to 512 [ 128.390391][ T9077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.405072][ T9077] ext4 filesystem being mounted at /367/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.431568][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.458977][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.626028][ T9089] loop4: detected capacity change from 0 to 2048 [ 128.663849][ T9089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.791053][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.913285][ T9103] lo speed is unknown, defaulting to 1000 [ 129.348729][ T9118] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 129.365447][ T9118] loop3: detected capacity change from 0 to 2048 [ 129.384829][ T9118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.397021][ T9118] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.410192][ T9118] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1700: bg 0: block 345: padding at end of block bitmap is not set [ 129.424774][ T9118] EXT4-fs (loop3): Remounting filesystem read-only [ 129.926398][ T9138] siw: device registration error -23 [ 130.104509][ T9143] siw: device registration error -23 [ 130.189179][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.243234][ T9153] siw: device registration error -23 [ 130.428370][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 130.428384][ T29] audit: type=1400 audit(1764976891.616:16710): avc: denied { ioctl } for pid=9154 comm="syz.5.1713" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 130.614291][ T29] audit: type=1326 audit(1764976891.796:16711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 130.638359][ T29] audit: type=1326 audit(1764976891.796:16712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 130.661902][ T29] audit: type=1326 audit(1764976891.796:16713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 130.881635][ T9168] loop3: detected capacity change from 0 to 128 [ 130.920325][ T9168] FAT-fs (loop3): invalid media value (0x00) [ 130.926330][ T9168] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 130.927462][ T29] audit: type=1326 audit(1764976891.866:16714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 130.935674][ T9168] FAT-fs (loop3): Can't find a valid FAT filesystem [ 130.959180][ T29] audit: type=1326 audit(1764976891.866:16715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 130.989289][ T29] audit: type=1326 audit(1764976891.876:16716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 131.012734][ T29] audit: type=1326 audit(1764976891.876:16717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 131.036221][ T29] audit: type=1326 audit(1764976891.876:16718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 131.059592][ T29] audit: type=1326 audit(1764976891.876:16719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.3.1716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 131.181810][ T9168] loop3: detected capacity change from 0 to 1024 [ 131.208517][ T9168] EXT4-fs: Ignoring removed mblk_io_submit option [ 131.214987][ T9168] ext4: Unknown parameter 'noacl' [ 131.275218][ T9187] blktrace: Concurrent blktraces are not allowed on loop7 [ 131.620383][ T9203] loop3: detected capacity change from 0 to 2048 [ 131.627148][ T9203] EXT4-fs: Ignoring removed bh option [ 131.640015][ T9203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.713696][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.737700][ T9211] loop3: detected capacity change from 0 to 512 [ 131.744447][ T9211] EXT4-fs: Ignoring removed bh option [ 131.752858][ T9211] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.761986][ T9211] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 131.771712][ T9211] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 131.781172][ T9211] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 131.790327][ T9211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.209054][ T9220] hub 9-0:1.0: USB hub found [ 132.220738][ T9220] hub 9-0:1.0: 8 ports detected [ 132.441204][ T9227] siw: device registration error -23 [ 132.495266][ T9234] netlink: 'syz.0.1736': attribute type 13 has an invalid length. [ 132.581378][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.663639][ T9247] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 132.676049][ T9243] blktrace: Concurrent blktraces are not allowed on loop6 [ 132.714014][ T9249] blktrace: Concurrent blktraces are not allowed on loop9 [ 132.783523][ T9252] netlink: 'syz.0.1739': attribute type 13 has an invalid length. [ 132.802848][ T9267] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 132.836240][ T9267] loop3: detected capacity change from 0 to 2048 [ 132.863038][ T9267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.875326][ T9267] ext4 filesystem being mounted at /387/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.887198][ T9267] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1745: bg 0: block 345: padding at end of block bitmap is not set [ 132.901782][ T9267] EXT4-fs (loop3): Remounting filesystem read-only [ 132.905590][ T9277] hub 9-0:1.0: USB hub found [ 132.938584][ T9277] hub 9-0:1.0: 8 ports detected [ 133.439091][ T9300] netlink: 'syz.4.1749': attribute type 13 has an invalid length. [ 133.579649][ T9312] ªªªªªª: renamed from wg2 [ 133.651930][ T3329] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.723648][ T9319] netlink: 'syz.3.1753': attribute type 3 has an invalid length. [ 133.754143][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1753'. [ 133.805495][ T9325] lo speed is unknown, defaulting to 1000 [ 133.848243][ T9326] lo speed is unknown, defaulting to 1000 [ 134.214872][ T9351] siw: device registration error -23 [ 134.220564][ T9342] netlink: 'syz.0.1761': attribute type 13 has an invalid length. [ 134.391249][ T9363] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 134.551822][ T9373] loop3: detected capacity change from 0 to 164 [ 134.591455][ T9373] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.607892][ T9376] block device autoloading is deprecated and will be removed. [ 134.680335][ T9378] siw: device registration error -23 [ 134.734722][ T9380] lo speed is unknown, defaulting to 1000 [ 135.545600][ T9399] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 135.914845][ T9415] lo speed is unknown, defaulting to 1000 [ 136.254733][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 136.254745][ T29] audit: type=1400 audit(1764976897.436:16815): avc: denied { read write } for pid=9427 comm="syz.5.1785" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.284232][ T29] audit: type=1400 audit(1764976897.436:16816): avc: denied { open } for pid=9427 comm="syz.5.1785" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.493603][ T29] audit: type=1400 audit(1764976897.496:16817): avc: denied { ioctl } for pid=9427 comm="syz.5.1785" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 136.623033][ T9433] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 136.668456][ T9435] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 137.023446][ T9443] lo speed is unknown, defaulting to 1000 [ 137.031975][ T9456] siw: device registration error -23 [ 137.127558][ T2047] bridge_slave_1: left allmulticast mode [ 137.133302][ T2047] bridge_slave_1: left promiscuous mode [ 137.138982][ T2047] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.148336][ T2047] bridge_slave_0: left allmulticast mode [ 137.154012][ T2047] bridge_slave_0: left promiscuous mode [ 137.159873][ T2047] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.221526][ T2047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.238931][ T2047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.254214][ T2047] bond0 (unregistering): Released all slaves [ 137.280632][ T9443] chnl_net:caif_netlink_parms(): no params data found [ 137.356962][ T2047] hsr_slave_0: left promiscuous mode [ 137.362876][ T2047] hsr_slave_1: left promiscuous mode [ 137.372763][ T2047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.381448][ T2047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.421359][ T2047] team0 (unregistering): Port device team_slave_1 removed [ 137.431532][ T2047] team0 (unregistering): Port device team_slave_0 removed [ 137.480640][ T9471] netlink: 'syz.3.1796': attribute type 3 has an invalid length. [ 137.519683][ T9443] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.526801][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.536182][ T9443] bridge_slave_0: entered allmulticast mode [ 137.545178][ T9443] bridge_slave_0: entered promiscuous mode [ 137.566460][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1796'. [ 137.592673][ T9443] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.599967][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.607151][ T9443] bridge_slave_1: entered allmulticast mode [ 137.613909][ T9443] bridge_slave_1: entered promiscuous mode [ 137.645864][ T9443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.664859][ T9443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.715219][ T9443] team0: Port device team_slave_0 added [ 137.729912][ T9443] team0: Port device team_slave_1 added [ 137.753845][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.760886][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.786863][ T9443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.804190][ T29] audit: type=1400 audit(1764976898.986:16818): avc: denied { execute } for pid=9492 comm="syz.5.1803" name="file0" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.826565][ T29] audit: type=1400 audit(1764976898.986:16819): avc: denied { execute_no_trans } for pid=9492 comm="syz.5.1803" path="/49/file0" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.841904][ T9443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.856902][ T9443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.882902][ T9443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.941280][ T9499] lo speed is unknown, defaulting to 1000 [ 137.953628][ T9443] hsr_slave_0: entered promiscuous mode [ 137.975007][ T9443] hsr_slave_1: entered promiscuous mode [ 137.983567][ T29] audit: type=1326 audit(1764976899.156:16820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 138.007085][ T29] audit: type=1326 audit(1764976899.156:16821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 138.021351][ T9443] debugfs: 'hsr0' already exists in 'hsr' [ 138.030611][ T29] audit: type=1326 audit(1764976899.166:16822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 138.036268][ T9443] Cannot create hsr debugfs directory [ 138.036518][ T9499] lo speed is unknown, defaulting to 1000 [ 138.059714][ T29] audit: type=1326 audit(1764976899.166:16823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 138.081801][ T9503] netlink: 'syz.5.1808': attribute type 3 has an invalid length. [ 138.094218][ T29] audit: type=1326 audit(1764976899.166:16824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9506 comm="syz.0.1809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 138.126938][ T9499] lo speed is unknown, defaulting to 1000 [ 138.143231][ T9499] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 138.159863][ T9499] lo speed is unknown, defaulting to 1000 [ 138.200196][ T9503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1808'. [ 138.218757][ T9499] lo speed is unknown, defaulting to 1000 [ 138.249529][ T9443] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 138.273317][ T9443] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 138.294775][ T9499] lo speed is unknown, defaulting to 1000 [ 138.300735][ T9443] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 138.316861][ T9443] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 138.339028][ T9499] lo speed is unknown, defaulting to 1000 [ 138.366236][ T9499] lo speed is unknown, defaulting to 1000 [ 138.372741][ T9499] lo speed is unknown, defaulting to 1000 [ 138.380357][ T9499] lo speed is unknown, defaulting to 1000 [ 138.391747][ T9443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.406231][ T9499] lo speed is unknown, defaulting to 1000 [ 138.411623][ T9443] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.435730][ T1634] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.442796][ T1634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.474280][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.481363][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.595953][ T9443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.757849][ T9443] veth0_vlan: entered promiscuous mode [ 138.766194][ T9443] veth1_vlan: entered promiscuous mode [ 138.793758][ T9443] veth0_macvtap: entered promiscuous mode [ 138.801409][ T9443] veth1_macvtap: entered promiscuous mode [ 138.812303][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.830754][ T9443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.855168][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.869075][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.878372][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.887135][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.932167][ T9584] siw: device registration error -23 [ 139.313976][ T9618] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 139.449280][ T9637] netlink: 'syz.5.1841': attribute type 13 has an invalid length. [ 139.547609][ T9646] siw: device registration error -23 [ 139.693445][ T9651] veth0_to_team: entered promiscuous mode [ 140.041491][ T9663] hub 9-0:1.0: USB hub found [ 140.046362][ T9663] hub 9-0:1.0: 8 ports detected [ 140.303773][ T9671] hub 9-0:1.0: USB hub found [ 140.308533][ T9671] hub 9-0:1.0: 8 ports detected [ 140.337781][ T9675] netlink: 'syz.0.1855': attribute type 3 has an invalid length. [ 140.360917][ T9675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1855'. [ 140.521714][ T9692] bridge_slave_0: left allmulticast mode [ 140.527380][ T9692] bridge_slave_0: left promiscuous mode [ 140.533194][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.541228][ T9692] bridge_slave_1: left allmulticast mode [ 140.546867][ T9692] bridge_slave_1: left promiscuous mode [ 140.552562][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.561984][ T9692] bond0: (slave bond_slave_0): Releasing backup interface [ 140.570647][ T9692] bond0: (slave bond_slave_1): Releasing backup interface [ 140.579188][ T9692] team0: Port device team_slave_0 removed [ 140.585585][ T9692] team0: Port device team_slave_1 removed [ 140.591902][ T9693] FAULT_INJECTION: forcing a failure. [ 140.591902][ T9693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.605066][ T9693] CPU: 0 UID: 0 PID: 9693 Comm: syz.3.1861 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.605114][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.605126][ T9693] Call Trace: [ 140.605131][ T9693] [ 140.605138][ T9693] __dump_stack+0x1d/0x30 [ 140.605161][ T9693] dump_stack_lvl+0xe8/0x140 [ 140.605258][ T9693] dump_stack+0x15/0x1b [ 140.605335][ T9693] should_fail_ex+0x265/0x280 [ 140.605440][ T9693] should_fail+0xb/0x20 [ 140.605471][ T9693] should_fail_usercopy+0x1a/0x20 [ 140.605493][ T9693] _copy_from_user+0x1c/0xb0 [ 140.605516][ T9693] ___sys_sendmsg+0xc1/0x1d0 [ 140.605558][ T9693] __x64_sys_sendmsg+0xd4/0x160 [ 140.605585][ T9693] x64_sys_call+0x17ba/0x3000 [ 140.605609][ T9693] do_syscall_64+0xd8/0x2a0 [ 140.605637][ T9693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.605807][ T9693] RIP: 0033:0x7fe7cdaaf749 [ 140.605823][ T9693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.605841][ T9693] RSP: 002b:00007fe7cc4ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.605860][ T9693] RAX: ffffffffffffffda RBX: 00007fe7cdd06090 RCX: 00007fe7cdaaf749 [ 140.605873][ T9693] RDX: 00000000240000c0 RSI: 0000200000000140 RDI: 0000000000000004 [ 140.605887][ T9693] RBP: 00007fe7cc4ee090 R08: 0000000000000000 R09: 0000000000000000 [ 140.605901][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.605978][ T9693] R13: 00007fe7cdd06128 R14: 00007fe7cdd06090 R15: 00007ffe76581a08 [ 140.605999][ T9693] [ 140.606700][ T9692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.779554][ T9692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.787148][ T9692] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.932686][ T9706] hub 9-0:1.0: USB hub found [ 140.937439][ T9706] hub 9-0:1.0: 8 ports detected [ 141.187504][ T9727] netlink: 'syz.3.1870': attribute type 13 has an invalid length. [ 141.256395][ T9733] lo speed is unknown, defaulting to 1000 [ 141.311501][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 141.311516][ T29] audit: type=1326 audit(1764976902.496:17090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.4.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f476c682005 code=0x7ffc0000 [ 141.372527][ T29] audit: type=1326 audit(1764976902.556:17091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9735 comm="syz.4.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 141.417902][ T9761] netlink: 'syz.6.1876': attribute type 13 has an invalid length. [ 141.462751][ T29] audit: type=1326 audit(1764976902.646:17092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.4.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 141.465821][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.493390][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.533627][ T29] audit: type=1326 audit(1764976902.676:17093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.4.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 141.557157][ T29] audit: type=1326 audit(1764976902.676:17094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9732 comm="syz.4.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 141.632095][ T9761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.642644][ T9761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.693553][ T1634] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.702657][ T576] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.726536][ T576] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.736604][ T576] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.856190][ T29] audit: type=1326 audit(1764976903.036:17095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.3.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 141.880698][ T29] audit: type=1326 audit(1764976903.036:17096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.3.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 141.904267][ T29] audit: type=1326 audit(1764976903.036:17097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.3.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 141.928822][ T29] audit: type=1326 audit(1764976903.036:17098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.3.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 141.952351][ T29] audit: type=1326 audit(1764976903.036:17099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.3.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 142.266252][ T9828] netlink: 'syz.3.1899': attribute type 13 has an invalid length. [ 142.473867][ T9837] hub 9-0:1.0: USB hub found [ 142.479031][ T9837] hub 9-0:1.0: 8 ports detected [ 142.633453][ T9845] block device autoloading is deprecated and will be removed. [ 142.669976][ T9855] netlink: 'syz.3.1908': attribute type 20 has an invalid length. [ 143.196728][ T9889] siw: device registration error -23 [ 143.557633][ T9896] bond0: (slave bond_slave_0): Releasing backup interface [ 143.569521][ T9896] bond0: (slave bond_slave_1): Releasing backup interface [ 143.578356][ T9896] team0: Port device team_slave_0 removed [ 143.585007][ T9896] team0: Port device team_slave_1 removed [ 143.591147][ T9896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.598859][ T9896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.607778][ T9897] netlink: 'syz.4.1928': attribute type 10 has an invalid length. [ 143.615714][ T9897] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1928'. [ 143.627902][ T9896] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 143.630565][ T9899] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 143.651448][ T9897] veth1_vlan: left promiscuous mode [ 143.657371][ T9897] batman_adv: batadv0: Adding interface: veth1_vlan [ 143.664067][ T9897] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.706916][ T9897] batman_adv: batadv0: Interface activated: veth1_vlan [ 145.035280][ T9936] lo speed is unknown, defaulting to 1000 [ 145.272629][ T9948] hub 9-0:1.0: USB hub found [ 145.277389][ T9948] hub 9-0:1.0: 8 ports detected [ 145.325494][ T9954] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 145.332638][ T9950] netlink: 'syz.0.1948': attribute type 3 has an invalid length. [ 145.364307][ T9956] lo speed is unknown, defaulting to 1000 [ 145.424834][ T9962] lo speed is unknown, defaulting to 1000 [ 145.480031][ T9969] siw: device registration error -23 [ 145.622344][ T9975] lo speed is unknown, defaulting to 1000 [ 145.670975][ T9977] lo speed is unknown, defaulting to 1000 [ 145.779022][ T9987] lo speed is unknown, defaulting to 1000 [ 145.846405][ T9996] blktrace: Concurrent blktraces are not allowed on loop9 [ 145.990220][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1971'. [ 146.365170][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 146.365185][ T29] audit: type=1326 audit(1764976907.546:17706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10026 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 146.395749][ T29] audit: type=1326 audit(1764976907.576:17707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10026 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 146.419361][ T29] audit: type=1326 audit(1764976907.576:17708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10026 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 146.442916][ T29] audit: type=1326 audit(1764976907.576:17709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10026 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 146.467041][ T29] audit: type=1326 audit(1764976907.576:17710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10026 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 146.490710][ T29] audit: type=1326 audit(1764976907.576:17711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10026 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 146.493103][T10035] blktrace: Concurrent blktraces are not allowed on loop9 [ 146.514465][ T29] audit: type=1326 audit(1764976907.576:17712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10026 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 146.544954][ T29] audit: type=1326 audit(1764976907.576:17713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10026 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 146.568538][ T29] audit: type=1326 audit(1764976907.576:17714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10026 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f476c651667 code=0x7ffc0000 [ 146.592005][ T29] audit: type=1326 audit(1764976907.576:17715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10026 comm="syz.4.1977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 146.639895][T10037] block device autoloading is deprecated and will be removed. [ 146.695353][T10041] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1983'. [ 146.763503][T10054] lo speed is unknown, defaulting to 1000 [ 146.877187][T10063] lo speed is unknown, defaulting to 1000 [ 146.990933][T10073] block device autoloading is deprecated and will be removed. [ 147.023942][T10075] block device autoloading is deprecated and will be removed. [ 147.185549][T10078] hub 9-0:1.0: USB hub found [ 147.190808][T10078] hub 9-0:1.0: 8 ports detected [ 147.236857][T10085] siw: device registration error -23 [ 147.259606][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1997'. [ 147.380330][T10096] netlink: 'syz.5.2002': attribute type 3 has an invalid length. [ 147.470771][T10101] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 147.520226][T10103] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 147.728320][T10108] blktrace: Concurrent blktraces are not allowed on loop9 [ 147.856984][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2010'. [ 147.899314][T10114] netlink: 'syz.4.2009': attribute type 13 has an invalid length. [ 147.913502][T10114] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 147.936145][T10135] netlink: 'syz.3.2011': attribute type 3 has an invalid length. [ 148.095655][T10155] blktrace: Concurrent blktraces are not allowed on loop7 [ 148.158801][T10158] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 148.184280][T10156] hub 9-0:1.0: USB hub found [ 148.202406][T10156] hub 9-0:1.0: 8 ports detected [ 148.476245][T10185] blktrace: Concurrent blktraces are not allowed on loop13 [ 148.580413][T10197] siw: device registration error -23 [ 148.627982][T10199] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 148.802306][T10203] lo speed is unknown, defaulting to 1000 [ 149.010575][T10214] lo speed is unknown, defaulting to 1000 [ 149.011070][T10218] blktrace: Concurrent blktraces are not allowed on loop7 [ 149.108439][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 149.155892][T10227] block device autoloading is deprecated and will be removed. [ 149.563026][T10244] netlink: 'syz.5.2052': attribute type 3 has an invalid length. [ 149.603100][T10248] lo speed is unknown, defaulting to 1000 [ 149.673054][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2055'. [ 149.749659][T10269] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 149.763895][T10269] loop6: detected capacity change from 0 to 2048 [ 149.779985][T10269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.792129][T10269] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.804657][T10269] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2061: bg 0: block 345: padding at end of block bitmap is not set [ 149.819110][T10269] EXT4-fs (loop6): Remounting filesystem read-only [ 150.144081][T10287] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 150.192597][T10291] block device autoloading is deprecated and will be removed. [ 150.603197][ T9443] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.805183][T10318] lo speed is unknown, defaulting to 1000 [ 151.997986][T10354] block device autoloading is deprecated and will be removed. [ 152.394858][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 152.394952][ T29] audit: type=1326 audit(1764976913.576:17874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 152.424715][ T29] audit: type=1326 audit(1764976913.576:17875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 152.448308][ T29] audit: type=1326 audit(1764976913.576:17876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 152.481680][ T29] audit: type=1326 audit(1764976913.576:17877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 152.505187][ T29] audit: type=1326 audit(1764976913.576:17878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 152.507213][T10374] lo speed is unknown, defaulting to 1000 [ 152.528798][ T29] audit: type=1326 audit(1764976913.576:17879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff4d0632005 code=0x7ffc0000 [ 152.558080][ T29] audit: type=1326 audit(1764976913.576:17880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 152.581876][ T29] audit: type=1326 audit(1764976913.576:17881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 152.605458][ T29] audit: type=1326 audit(1764976913.576:17882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 152.629093][ T29] audit: type=1326 audit(1764976913.576:17883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10370 comm="syz.6.2100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 152.657063][T10383] siw: device registration error -23 [ 152.905998][T10391] loop0: detected capacity change from 0 to 512 [ 152.929573][T10391] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.958252][T10391] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.082353][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.117610][T10408] blktrace: Concurrent blktraces are not allowed on loop13 [ 153.173938][T10406] hub 9-0:1.0: USB hub found [ 153.179573][T10406] hub 9-0:1.0: 8 ports detected [ 153.225681][T10421] siw: device registration error -23 [ 153.527942][T10443] blktrace: Concurrent blktraces are not allowed on loop13 [ 154.263376][T10454] lo speed is unknown, defaulting to 1000 [ 154.361707][T10463] FAULT_INJECTION: forcing a failure. [ 154.361707][T10463] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.374774][T10463] CPU: 0 UID: 0 PID: 10463 Comm: syz.4.2133 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.374804][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.374896][T10463] Call Trace: [ 154.374902][T10463] [ 154.374909][T10463] __dump_stack+0x1d/0x30 [ 154.374934][T10463] dump_stack_lvl+0xe8/0x140 [ 154.374958][T10463] dump_stack+0x15/0x1b [ 154.374980][T10463] should_fail_ex+0x265/0x280 [ 154.375085][T10463] should_fail+0xb/0x20 [ 154.375118][T10463] should_fail_usercopy+0x1a/0x20 [ 154.375216][T10463] _copy_to_user+0x20/0xa0 [ 154.375242][T10463] simple_read_from_buffer+0xb5/0x130 [ 154.375309][T10463] proc_fail_nth_read+0x10e/0x150 [ 154.375337][T10463] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.375419][T10463] vfs_read+0x1a8/0x770 [ 154.375493][T10463] ? kmem_cache_free+0xe3/0x3a0 [ 154.375516][T10463] ? putname+0x90/0x100 [ 154.375555][T10463] ksys_read+0xda/0x1a0 [ 154.375586][T10463] __x64_sys_read+0x40/0x50 [ 154.375616][T10463] x64_sys_call+0x2889/0x3000 [ 154.375640][T10463] do_syscall_64+0xd8/0x2a0 [ 154.375680][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.375743][T10463] RIP: 0033:0x7f476c64e15c [ 154.375759][T10463] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 154.375776][T10463] RSP: 002b:00007f476b0b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.375795][T10463] RAX: ffffffffffffffda RBX: 00007f476c8a5fa0 RCX: 00007f476c64e15c [ 154.375809][T10463] RDX: 000000000000000f RSI: 00007f476b0b70a0 RDI: 0000000000000004 [ 154.375823][T10463] RBP: 00007f476b0b7090 R08: 0000000000000000 R09: 0000000000000000 [ 154.375841][T10463] R10: 0000000000005418 R11: 0000000000000246 R12: 0000000000000001 [ 154.375856][T10463] R13: 00007f476c8a6038 R14: 00007f476c8a5fa0 R15: 00007ffc0e3ad488 [ 154.375876][T10463] [ 154.623373][T10469] netlink: 'syz.6.2136': attribute type 3 has an invalid length. [ 154.641156][T10469] veth0_to_team: entered promiscuous mode [ 154.678499][T10475] blktrace: Concurrent blktraces are not allowed on loop9 [ 154.845603][T10482] lo speed is unknown, defaulting to 1000 [ 155.620535][T10511] lo speed is unknown, defaulting to 1000 [ 155.721153][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 155.730052][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 155.759623][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 155.776390][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 155.785396][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 155.794964][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 155.846093][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 155.855087][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 155.884745][T10517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2150'. [ 155.900242][T10532] block device autoloading is deprecated and will be removed. [ 155.968956][T10513] FAULT_INJECTION: forcing a failure. [ 155.968956][T10513] name failslab, interval 1, probability 0, space 0, times 0 [ 155.981595][T10513] CPU: 1 UID: 0 PID: 10513 Comm: syz.5.2151 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.981620][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 155.981633][T10513] Call Trace: [ 155.981639][T10513] [ 155.981646][T10513] __dump_stack+0x1d/0x30 [ 155.981669][T10513] dump_stack_lvl+0xe8/0x140 [ 155.981689][T10513] dump_stack+0x15/0x1b [ 155.981709][T10513] should_fail_ex+0x265/0x280 [ 155.981744][T10513] should_failslab+0x8c/0xb0 [ 155.981764][T10513] kmem_cache_alloc_noprof+0x50/0x4a0 [ 155.981801][T10513] ? vm_area_dup+0x33/0x2c0 [ 155.981823][T10513] vm_area_dup+0x33/0x2c0 [ 155.981846][T10513] __split_vma+0xe9/0x650 [ 155.981881][T10513] vma_modify+0x3f2/0xc80 [ 155.981909][T10513] ? __schedule+0x85f/0xcd0 [ 155.981939][T10513] vma_modify_flags+0x101/0x130 [ 155.981967][T10513] mprotect_fixup+0x2cc/0x570 [ 155.981995][T10513] do_mprotect_pkey+0x6d6/0x980 [ 155.982033][T10513] __x64_sys_mprotect+0x48/0x60 [ 155.982061][T10513] x64_sys_call+0x2c3b/0x3000 [ 155.982086][T10513] do_syscall_64+0xd8/0x2a0 [ 155.982115][T10513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.982136][T10513] RIP: 0033:0x7ff8a130f749 [ 155.982151][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.982166][T10513] RSP: 002b:00007ff89fd77038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 155.982183][T10513] RAX: ffffffffffffffda RBX: 00007ff8a1565fa0 RCX: 00007ff8a130f749 [ 155.982196][T10513] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000000000 [ 155.982209][T10513] RBP: 00007ff89fd77090 R08: 0000000000000000 R09: 0000000000000000 [ 155.982222][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.982236][T10513] R13: 00007ff8a1566038 R14: 00007ff8a1565fa0 R15: 00007ffc61bf1748 [ 155.982254][T10513] [ 156.178824][T10528] lo speed is unknown, defaulting to 1000 [ 156.245004][T10543] netlink: 'syz.5.2160': attribute type 4 has an invalid length. [ 156.269272][T10545] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 156.480610][T10555] FAULT_INJECTION: forcing a failure. [ 156.480610][T10555] name failslab, interval 1, probability 0, space 0, times 0 [ 156.493304][T10555] CPU: 0 UID: 0 PID: 10555 Comm: syz.3.2165 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.493366][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.493374][T10555] Call Trace: [ 156.493377][T10555] [ 156.493381][T10555] __dump_stack+0x1d/0x30 [ 156.493396][T10555] dump_stack_lvl+0xe8/0x140 [ 156.493454][T10555] dump_stack+0x15/0x1b [ 156.493501][T10555] should_fail_ex+0x265/0x280 [ 156.493520][T10555] should_failslab+0x8c/0xb0 [ 156.493533][T10555] kmem_cache_alloc_noprof+0x50/0x4a0 [ 156.493561][T10555] ? audit_log_start+0x342/0x720 [ 156.493574][T10555] audit_log_start+0x342/0x720 [ 156.493585][T10555] ? kstrtouint+0x76/0xc0 [ 156.493602][T10555] audit_seccomp+0x48/0x100 [ 156.493654][T10555] ? __seccomp_filter+0x832/0x1260 [ 156.493682][T10555] __seccomp_filter+0x843/0x1260 [ 156.493698][T10555] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 156.493712][T10555] ? vfs_write+0x7e8/0x960 [ 156.493783][T10555] ? __rcu_read_unlock+0x4f/0x70 [ 156.493796][T10555] ? __fget_files+0x184/0x1c0 [ 156.493808][T10555] __secure_computing+0x82/0x150 [ 156.493866][T10555] syscall_trace_enter+0xcf/0x1e0 [ 156.493880][T10555] do_syscall_64+0xb2/0x2a0 [ 156.493896][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.493909][T10555] RIP: 0033:0x7fe7cdaaf749 [ 156.493967][T10555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.493978][T10555] RSP: 002b:00007fe7cc50f038 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 156.493990][T10555] RAX: ffffffffffffffda RBX: 00007fe7cdd05fa0 RCX: 00007fe7cdaaf749 [ 156.493997][T10555] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000006 [ 156.494005][T10555] RBP: 00007fe7cc50f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.494012][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.494019][T10555] R13: 00007fe7cdd06038 R14: 00007fe7cdd05fa0 R15: 00007ffe76581a08 [ 156.494069][T10555] [ 156.776985][T10564] lo speed is unknown, defaulting to 1000 [ 156.937553][T10575] netlink: 'syz.6.2172': attribute type 3 has an invalid length. [ 156.958459][T10575] netlink: 'syz.6.2172': attribute type 3 has an invalid length. [ 157.302451][T10584] lo speed is unknown, defaulting to 1000 [ 157.418075][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 157.418089][ T29] audit: type=1326 audit(1764976918.596:18139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10585 comm="syz.0.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 157.533073][ T29] audit: type=1326 audit(1764976918.716:18140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10589 comm="syz.0.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 157.577938][ T29] audit: type=1326 audit(1764976918.746:18141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 157.601704][ T29] audit: type=1326 audit(1764976918.746:18142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.0.2175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f563477f749 code=0x7ffc0000 [ 157.751868][T10596] blktrace: Concurrent blktraces are not allowed on loop7 [ 157.832741][T10611] siw: device registration error -23 [ 157.854147][T10617] IPVS: Unknown mcast interface: vcan0 [ 157.859854][T10617] FAULT_INJECTION: forcing a failure. [ 157.859854][T10617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.872994][T10617] CPU: 0 UID: 0 PID: 10617 Comm: syz.5.2188 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.873024][T10617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.873037][T10617] Call Trace: [ 157.873042][T10617] [ 157.873049][T10617] __dump_stack+0x1d/0x30 [ 157.873071][T10617] dump_stack_lvl+0xe8/0x140 [ 157.873153][T10617] dump_stack+0x15/0x1b [ 157.873173][T10617] should_fail_ex+0x265/0x280 [ 157.873203][T10617] should_fail+0xb/0x20 [ 157.873231][T10617] should_fail_usercopy+0x1a/0x20 [ 157.873252][T10617] _copy_from_user+0x1c/0xb0 [ 157.873332][T10617] kstrtouint_from_user+0x69/0xf0 [ 157.873362][T10617] ? 0xffffffff81000000 [ 157.873377][T10617] ? selinux_file_permission+0x1e2/0x320 [ 157.873407][T10617] proc_fail_nth_write+0x50/0x160 [ 157.873502][T10617] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 157.873565][T10617] vfs_write+0x269/0x960 [ 157.873591][T10617] ? vfs_read+0x4e6/0x770 [ 157.873626][T10617] ? __rcu_read_unlock+0x4f/0x70 [ 157.873646][T10617] ? __fget_files+0x184/0x1c0 [ 157.873697][T10617] ? mutex_lock+0x58/0x90 [ 157.873720][T10617] ksys_write+0xda/0x1a0 [ 157.873748][T10617] __x64_sys_write+0x40/0x50 [ 157.873781][T10617] x64_sys_call+0x2847/0x3000 [ 157.873828][T10617] do_syscall_64+0xd8/0x2a0 [ 157.873881][T10617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.873952][T10617] RIP: 0033:0x7ff8a130e1ff [ 157.873968][T10617] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 157.874069][T10617] RSP: 002b:00007ff89fd77030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 157.874087][T10617] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff8a130e1ff [ 157.874099][T10617] RDX: 0000000000000001 RSI: 00007ff89fd770a0 RDI: 0000000000000004 [ 157.874110][T10617] RBP: 00007ff89fd77090 R08: 0000000000000000 R09: 0000000000000000 [ 157.874122][T10617] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 157.874138][T10617] R13: 00007ff8a1566038 R14: 00007ff8a1565fa0 R15: 00007ffc61bf1748 [ 157.874158][T10617] [ 158.083448][T10618] blktrace: Concurrent blktraces are not allowed on loop7 [ 158.210072][ T29] audit: type=1326 audit(1764976919.396:18143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10635 comm="syz.5.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a130f749 code=0x7ffc0000 [ 158.245421][ T29] audit: type=1326 audit(1764976919.396:18144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10635 comm="syz.5.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7ff8a130f749 code=0x7ffc0000 [ 158.269188][ T29] audit: type=1326 audit(1764976919.396:18145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10635 comm="syz.5.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a130f749 code=0x7ffc0000 [ 158.292755][ T29] audit: type=1326 audit(1764976919.396:18146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10635 comm="syz.5.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff8a130f749 code=0x7ffc0000 [ 158.316266][ T29] audit: type=1326 audit(1764976919.416:18147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10635 comm="syz.5.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a130f749 code=0x7ffc0000 [ 158.316359][ T29] audit: type=1326 audit(1764976919.426:18148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10635 comm="syz.5.2196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8a130f749 code=0x7ffc0000 [ 158.387110][T10646] block device autoloading is deprecated and will be removed. [ 158.413588][T10636] lo speed is unknown, defaulting to 1000 [ 158.441580][T10649] lo speed is unknown, defaulting to 1000 [ 158.753573][T10665] FAULT_INJECTION: forcing a failure. [ 158.753573][T10665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.766680][T10665] CPU: 1 UID: 0 PID: 10665 Comm: syz.5.2205 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.766708][T10665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.766721][T10665] Call Trace: [ 158.766728][T10665] [ 158.766735][T10665] __dump_stack+0x1d/0x30 [ 158.766771][T10665] dump_stack_lvl+0xe8/0x140 [ 158.766792][T10665] dump_stack+0x15/0x1b [ 158.766809][T10665] should_fail_ex+0x265/0x280 [ 158.766869][T10665] should_fail+0xb/0x20 [ 158.766896][T10665] should_fail_usercopy+0x1a/0x20 [ 158.766918][T10665] _copy_to_user+0x20/0xa0 [ 158.767000][T10665] simple_read_from_buffer+0xb5/0x130 [ 158.767031][T10665] proc_fail_nth_read+0x10e/0x150 [ 158.767067][T10665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.767115][T10665] vfs_read+0x1a8/0x770 [ 158.767142][T10665] ? __rcu_read_unlock+0x4f/0x70 [ 158.767161][T10665] ? __fget_files+0x184/0x1c0 [ 158.767179][T10665] ? mutex_lock+0x58/0x90 [ 158.767253][T10665] ksys_read+0xda/0x1a0 [ 158.767281][T10665] __x64_sys_read+0x40/0x50 [ 158.767311][T10665] x64_sys_call+0x2889/0x3000 [ 158.767396][T10665] do_syscall_64+0xd8/0x2a0 [ 158.767486][T10665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.767583][T10665] RIP: 0033:0x7ff8a130e15c [ 158.767599][T10665] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 158.767619][T10665] RSP: 002b:00007ff89fd77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.767639][T10665] RAX: ffffffffffffffda RBX: 00007ff8a1565fa0 RCX: 00007ff8a130e15c [ 158.767651][T10665] RDX: 000000000000000f RSI: 00007ff89fd770a0 RDI: 0000000000000006 [ 158.767673][T10665] RBP: 00007ff89fd77090 R08: 0000000000000000 R09: 0000000000000000 [ 158.767685][T10665] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 158.767697][T10665] R13: 00007ff8a1566038 R14: 00007ff8a1565fa0 R15: 00007ffc61bf1748 [ 158.767719][T10665] [ 159.107265][T10680] blktrace: Concurrent blktraces are not allowed on loop11 [ 159.204228][T10694] netlink: 'syz.3.2210': attribute type 13 has an invalid length. [ 159.347308][T10707] syz_tun: entered allmulticast mode [ 159.353763][T10707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=10707 comm=syz.0.2218 [ 159.366796][T10706] syz_tun: left allmulticast mode [ 159.403446][T10711] siw: device registration error -23 [ 159.566777][T10719] netlink: 'syz.0.2223': attribute type 3 has an invalid length. [ 159.591212][T10719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2223'. [ 159.698331][T10728] blktrace: Concurrent blktraces are not allowed on loop1 [ 159.722845][T10730] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 159.734891][T10731] hub 9-0:1.0: USB hub found [ 159.741460][T10731] hub 9-0:1.0: 8 ports detected [ 159.961877][T10739] siw: device registration error -23 [ 160.135959][T10751] siw: device registration error -23 [ 160.266993][T10763] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 160.448817][T10780] lo speed is unknown, defaulting to 1000 [ 160.681934][T10798] siw: device registration error -23 [ 160.742918][T10802] netlink: 'syz.4.2254': attribute type 3 has an invalid length. [ 160.751509][T10802] netlink: 'syz.4.2254': attribute type 3 has an invalid length. [ 160.775317][T10804] netlink: 'syz.4.2255': attribute type 3 has an invalid length. [ 160.783812][T10804] netlink: 'syz.4.2255': attribute type 3 has an invalid length. [ 160.947943][T10816] lo speed is unknown, defaulting to 1000 [ 161.177775][T10831] netlink: 'syz.3.2265': attribute type 1 has an invalid length. [ 161.185641][T10831] __nla_validate_parse: 2 callbacks suppressed [ 161.185655][T10831] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2265'. [ 161.228241][T10834] siw: device registration error -23 [ 161.305871][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2266'. [ 161.314902][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2266'. [ 161.346783][T10847] netlink: 'syz.5.2269': attribute type 13 has an invalid length. [ 161.492566][T10861] netlink: 'syz.4.2274': attribute type 13 has an invalid length. [ 161.868308][T10888] lo speed is unknown, defaulting to 1000 [ 162.142380][T10893] netlink: 'syz.0.2284': attribute type 3 has an invalid length. [ 162.150715][T10893] netlink: 'syz.0.2284': attribute type 3 has an invalid length. [ 162.333616][T10903] hub 9-0:1.0: USB hub found [ 162.379031][T10903] hub 9-0:1.0: 8 ports detected [ 162.637629][T10915] syz_tun: entered allmulticast mode [ 162.643992][T10913] syz_tun: left allmulticast mode [ 162.697894][T10921] netlink: 'syz.0.2294': attribute type 3 has an invalid length. [ 162.797028][T10929] hub 9-0:1.0: USB hub found [ 162.803908][T10929] hub 9-0:1.0: 8 ports detected [ 163.027128][T10937] hub 9-0:1.0: USB hub found [ 163.041060][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2300'. [ 163.047089][T10937] hub 9-0:1.0: 8 ports detected [ 163.050685][T10941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2300'. [ 163.113680][T10940] block device autoloading is deprecated and will be removed. [ 163.156146][T10947] block device autoloading is deprecated and will be removed. [ 163.212333][T10951] siw: device registration error -23 [ 163.251463][ T29] kauditd_printk_skb: 776 callbacks suppressed [ 163.251479][ T29] audit: type=1326 audit(1764976924.436:18925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10956 comm="syz.6.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 163.341832][ T29] audit: type=1326 audit(1764976924.436:18926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10956 comm="syz.6.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 163.365450][ T29] audit: type=1326 audit(1764976924.466:18927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10956 comm="syz.6.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 163.389011][ T29] audit: type=1326 audit(1764976924.466:18928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10956 comm="syz.6.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 163.412577][ T29] audit: type=1326 audit(1764976924.466:18929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10956 comm="syz.6.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 163.436155][ T29] audit: type=1326 audit(1764976924.466:18930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10956 comm="syz.6.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 163.459797][ T29] audit: type=1326 audit(1764976924.466:18931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10956 comm="syz.6.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 163.483367][ T29] audit: type=1326 audit(1764976924.466:18932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10956 comm="syz.6.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 163.506919][ T29] audit: type=1326 audit(1764976924.466:18933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10956 comm="syz.6.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 163.530399][ T29] audit: type=1326 audit(1764976924.466:18934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10956 comm="syz.6.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4d05ff749 code=0x7ffc0000 [ 163.981365][T10976] hub 9-0:1.0: USB hub found [ 163.988728][T10976] hub 9-0:1.0: 8 ports detected [ 164.283681][T10987] lo speed is unknown, defaulting to 1000 [ 164.313521][T10990] hub 9-0:1.0: USB hub found [ 164.318347][T10990] hub 9-0:1.0: 8 ports detected [ 164.637288][T11000] hub 9-0:1.0: USB hub found [ 164.647357][T11000] hub 9-0:1.0: 8 ports detected [ 164.872555][T11017] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 165.176100][T11028] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 165.444329][T11037] hub 9-0:1.0: USB hub found [ 165.455244][T11037] hub 9-0:1.0: 8 ports detected [ 165.612011][T11046] block device autoloading is deprecated and will be removed. [ 165.809178][T11075] siw: device registration error -23 [ 166.201634][T11101] validate_nla: 5 callbacks suppressed [ 166.201648][T11101] netlink: 'syz.4.2357': attribute type 3 has an invalid length. [ 166.225381][T11096] hub 9-0:1.0: USB hub found [ 166.242841][T11096] hub 9-0:1.0: 8 ports detected [ 166.446044][T11113] siw: device registration error -23 [ 166.457047][T11115] netlink: 'syz.4.2362': attribute type 4 has an invalid length. [ 166.589584][T11124] loop0: detected capacity change from 0 to 512 [ 166.599330][T11124] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 166.607438][T11124] System zones: 0-2, 18-18, 34-34 [ 166.615317][T11124] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 166.629658][T11124] EXT4-fs (loop0): Remounting filesystem read-only [ 166.636492][T11124] EXT4-fs (loop0): 1 truncate cleaned up [ 166.643589][T11124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.656158][T11124] ext4 filesystem being mounted at /497/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.656187][ T403] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 166.677127][ T403] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 166.700238][T11124] syz_tun: entered allmulticast mode [ 166.706154][T11123] syz_tun: left allmulticast mode [ 166.724438][ T403] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 166.737711][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.792522][T11139] loop0: detected capacity change from 0 to 164 [ 166.801788][T11139] syz.0.2370: attempt to access beyond end of device [ 166.801788][T11139] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 166.824999][T11139] syz.0.2370: attempt to access beyond end of device [ 166.824999][T11139] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 166.846688][T11139] netlink: 'syz.0.2370': attribute type 4 has an invalid length. [ 167.024833][T11145] lo speed is unknown, defaulting to 1000 [ 167.407492][T11166] loop0: detected capacity change from 0 to 512 [ 167.433810][T11166] EXT4-fs: Ignoring removed bh option [ 167.440805][T11166] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 167.450044][T11166] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 167.460088][T11166] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 167.493223][T11166] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 167.494464][T11171] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 167.523632][T11166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.570082][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.650007][T11175] lo speed is unknown, defaulting to 1000 [ 168.120305][T11195] lo speed is unknown, defaulting to 1000 [ 168.260604][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 168.260618][ T29] audit: type=1326 audit(1764976929.446:19681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f476c6465e7 code=0x7ffc0000 [ 168.293000][ T29] audit: type=1326 audit(1764976929.446:19682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f476c5eb829 code=0x7ffc0000 [ 168.316586][ T29] audit: type=1326 audit(1764976929.476:19683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f476c6465e7 code=0x7ffc0000 [ 168.340274][ T29] audit: type=1326 audit(1764976929.476:19684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f476c5eb829 code=0x7ffc0000 [ 168.363753][ T29] audit: type=1326 audit(1764976929.476:19685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 168.387375][ T29] audit: type=1326 audit(1764976929.496:19686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f476c6465e7 code=0x7ffc0000 [ 168.410988][ T29] audit: type=1326 audit(1764976929.496:19687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f476c5eb829 code=0x7ffc0000 [ 168.434643][ T29] audit: type=1326 audit(1764976929.496:19688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 168.458441][ T29] audit: type=1326 audit(1764976929.506:19689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f476c6465e7 code=0x7ffc0000 [ 168.482135][ T29] audit: type=1326 audit(1764976929.506:19690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11181 comm="syz.4.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f476c5eb829 code=0x7ffc0000 [ 168.510248][T11207] loop6: detected capacity change from 0 to 164 [ 168.529427][T11207] syz.6.2395: attempt to access beyond end of device [ 168.529427][T11207] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 168.543397][T11207] syz.6.2395: attempt to access beyond end of device [ 168.543397][T11207] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 168.566805][T11207] netlink: 'syz.6.2395': attribute type 4 has an invalid length. [ 168.575054][T11211] siw: device registration error -23 [ 168.676027][T11220] siw: device registration error -23 [ 168.921950][T11237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2407'. [ 168.930969][T11237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2407'. [ 168.990923][T11245] syz_tun: entered allmulticast mode [ 168.996965][T11244] syz_tun: left allmulticast mode [ 169.010483][T11246] hub 9-0:1.0: USB hub found [ 169.018398][T11246] hub 9-0:1.0: 8 ports detected [ 169.045729][T11251] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 169.426406][T11277] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2424'. [ 169.435387][T11277] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2424'. [ 169.899562][T11291] netlink: 'syz.3.2429': attribute type 4 has an invalid length. [ 169.941636][T11294] lo speed is unknown, defaulting to 1000 [ 170.059593][T11298] netlink: 'syz.5.2431': attribute type 4 has an invalid length. [ 170.086846][T11302] syz_tun: entered allmulticast mode [ 170.218044][T11303] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11303 comm=syz.3.2433 [ 170.352836][T11301] syz_tun: left allmulticast mode [ 170.465870][T11311] blktrace: Concurrent blktraces are not allowed on loop6 [ 170.625780][T11320] siw: device registration error -23 [ 170.873746][T11343] netlink: 'syz.6.2444': attribute type 13 has an invalid length. [ 170.911563][T11348] netlink: 'syz.5.2448': attribute type 4 has an invalid length. [ 170.976468][T11351] syz_tun: entered allmulticast mode [ 170.983425][T11351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11351 comm=syz.5.2449 [ 170.998758][T11349] syz_tun: left allmulticast mode [ 171.022392][T11358] lo speed is unknown, defaulting to 1000 [ 171.158824][T11372] siw: device registration error -23 [ 171.187258][T11374] loop6: detected capacity change from 0 to 164 [ 171.211718][T11374] syz.6.2459: attempt to access beyond end of device [ 171.211718][T11374] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 171.275400][T11374] syz.6.2459: attempt to access beyond end of device [ 171.275400][T11374] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 171.378619][T11381] netlink: 'syz.0.2460': attribute type 3 has an invalid length. [ 171.386669][T11381] netlink: 'syz.0.2460': attribute type 3 has an invalid length. [ 171.548651][T11400] netlink: 'syz.5.2463': attribute type 13 has an invalid length. [ 171.584515][T11404] netlink: 'syz.3.2466': attribute type 3 has an invalid length. [ 171.613433][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2466'. [ 171.638130][T11410] syz_tun: entered allmulticast mode [ 171.645219][T11410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11410 comm=syz.5.2467 [ 171.661353][T11409] syz_tun: left allmulticast mode [ 171.712732][T11416] siw: device registration error -23 [ 171.730340][T11415] lo speed is unknown, defaulting to 1000 [ 171.821631][T11422] netlink: 'syz.5.2472': attribute type 4 has an invalid length. [ 172.055570][T11433] netlink: 'syz.3.2476': attribute type 3 has an invalid length. [ 172.064636][T11433] netlink: 'syz.3.2476': attribute type 3 has an invalid length. [ 172.174361][T11442] netlink: 'syz.6.2477': attribute type 13 has an invalid length. [ 172.206705][T11445] netlink: 'syz.3.2478': attribute type 3 has an invalid length. [ 172.217651][T11445] netlink: 'syz.3.2478': attribute type 3 has an invalid length. [ 172.397809][T11465] lo speed is unknown, defaulting to 1000 [ 172.424936][T11467] lo speed is unknown, defaulting to 1000 [ 172.545383][T11480] siw: device registration error -23 [ 172.649334][T11490] block device autoloading is deprecated and will be removed. [ 172.717573][T11492] block device autoloading is deprecated and will be removed. [ 172.961360][T11528] lo speed is unknown, defaulting to 1000 [ 172.988808][T11526] lo speed is unknown, defaulting to 1000 [ 173.302449][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 173.302463][ T29] audit: type=1326 audit(1764976934.486:20039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 173.337656][ T29] audit: type=1326 audit(1764976934.496:20040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 173.361860][ T29] audit: type=1326 audit(1764976934.506:20041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 173.385470][ T29] audit: type=1326 audit(1764976934.506:20042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 173.409613][ T29] audit: type=1326 audit(1764976934.506:20043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 173.433071][ T29] audit: type=1326 audit(1764976934.516:20044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 173.457289][ T29] audit: type=1326 audit(1764976934.516:20045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11556 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe7cdae2005 code=0x7ffc0000 [ 173.481551][ T29] audit: type=1326 audit(1764976934.516:20046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 173.548762][ T29] audit: type=1326 audit(1764976934.556:20047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 173.570391][T11565] lo speed is unknown, defaulting to 1000 [ 173.572440][ T29] audit: type=1326 audit(1764976934.556:20048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11553 comm="syz.3.2514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 173.589230][T11555] lo speed is unknown, defaulting to 1000 [ 173.927837][T11579] siw: device registration error -23 [ 174.056990][T11581] lo speed is unknown, defaulting to 1000 [ 174.757243][T11606] lo speed is unknown, defaulting to 1000 [ 174.805471][T11615] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 174.918970][T11610] hub 9-0:1.0: USB hub found [ 174.930350][T11610] hub 9-0:1.0: 8 ports detected [ 175.197619][T11622] lo speed is unknown, defaulting to 1000 [ 175.447278][T11647] lo speed is unknown, defaulting to 1000 [ 175.706340][T11665] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 175.822577][T11670] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.203179][T11684] syz_tun: entered allmulticast mode [ 176.219298][T11683] syz_tun: left allmulticast mode [ 176.265170][T11690] lo speed is unknown, defaulting to 1000 [ 176.265620][T11688] syz_tun: entered allmulticast mode [ 176.296040][T11687] syz_tun: left allmulticast mode [ 176.404669][T11705] validate_nla: 14 callbacks suppressed [ 176.404719][T11705] netlink: 'syz.3.2571': attribute type 4 has an invalid length. [ 176.419801][T11704] syz_tun: entered allmulticast mode [ 176.440213][T11702] syz_tun: left allmulticast mode [ 176.462663][T11701] netlink: 'syz.0.2569': attribute type 3 has an invalid length. [ 176.515129][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2569'. [ 176.560003][T11721] netlink: 'syz.4.2576': attribute type 4 has an invalid length. [ 176.571486][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2575'. [ 176.580491][T11719] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2575'. [ 176.618044][T11726] block device autoloading is deprecated and will be removed. [ 176.678039][T11728] lo speed is unknown, defaulting to 1000 [ 177.255265][T11735] lo speed is unknown, defaulting to 1000 [ 177.419612][T11741] lo speed is unknown, defaulting to 1000 [ 177.426811][T11743] blktrace: Concurrent blktraces are not allowed on loop9 [ 177.541264][T11750] syz_tun: entered allmulticast mode [ 177.557215][T11748] syz_tun: left allmulticast mode [ 177.673317][T11760] netlink: 'syz.6.2591': attribute type 3 has an invalid length. [ 177.719848][T11762] siw: device registration error -23 [ 177.759601][T11760] netlink: 'syz.6.2591': attribute type 3 has an invalid length. [ 178.013032][T11779] block device autoloading is deprecated and will be removed. [ 178.055812][T11781] netlink: 'syz.4.2599': attribute type 13 has an invalid length. [ 178.310329][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 178.310344][ T29] audit: type=1326 audit(1764976939.496:20907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7cdaa65e7 code=0x7ffc0000 [ 178.343922][ T29] audit: type=1326 audit(1764976939.526:20908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7cda4b829 code=0x7ffc0000 [ 178.367474][ T29] audit: type=1326 audit(1764976939.526:20909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7cdaa65e7 code=0x7ffc0000 [ 178.392258][ T29] audit: type=1326 audit(1764976939.526:20910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7cda4b829 code=0x7ffc0000 [ 178.415734][ T29] audit: type=1326 audit(1764976939.526:20911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 178.440556][ T29] audit: type=1326 audit(1764976939.596:20912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7cdaa65e7 code=0x7ffc0000 [ 178.464095][ T29] audit: type=1326 audit(1764976939.596:20913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7cda4b829 code=0x7ffc0000 [ 178.488864][ T29] audit: type=1326 audit(1764976939.596:20914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe7cdaa65e7 code=0x7ffc0000 [ 178.512443][ T29] audit: type=1326 audit(1764976939.596:20915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe7cda4b829 code=0x7ffc0000 [ 178.537201][ T29] audit: type=1326 audit(1764976939.596:20916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11756 comm="syz.3.2590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7cdaaf749 code=0x7ffc0000 [ 178.577135][T11797] netlink: 'syz.3.2604': attribute type 3 has an invalid length. [ 178.585895][T11797] netlink: 'syz.3.2604': attribute type 3 has an invalid length. [ 178.703079][T11804] netlink: 'syz.5.2607': attribute type 3 has an invalid length. [ 178.711927][T11804] netlink: 'syz.5.2607': attribute type 3 has an invalid length. [ 178.729587][T11806] FAULT_INJECTION: forcing a failure. [ 178.729587][T11806] name failslab, interval 1, probability 0, space 0, times 0 [ 178.743079][T11806] CPU: 1 UID: 0 PID: 11806 Comm: syz.6.2608 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.743176][T11806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 178.743250][T11806] Call Trace: [ 178.743286][T11806] [ 178.743291][T11806] __dump_stack+0x1d/0x30 [ 178.743306][T11806] dump_stack_lvl+0xe8/0x140 [ 178.743381][T11806] dump_stack+0x15/0x1b [ 178.743392][T11806] should_fail_ex+0x265/0x280 [ 178.743412][T11806] should_failslab+0x8c/0xb0 [ 178.743424][T11806] kmem_cache_alloc_noprof+0x50/0x4a0 [ 178.743488][T11806] ? alloc_empty_file+0x76/0x200 [ 178.743502][T11806] alloc_empty_file+0x76/0x200 [ 178.743530][T11806] path_openat+0x63/0x23b0 [ 178.743615][T11806] ? _parse_integer_limit+0x170/0x190 [ 178.743650][T11806] ? _parse_integer+0x27/0x40 [ 178.743783][T11806] ? kstrtoull+0x111/0x140 [ 178.743813][T11806] ? kstrtouint+0x76/0xc0 [ 178.743892][T11806] do_filp_open+0x109/0x230 [ 178.743974][T11806] do_sys_openat2+0xa6/0x150 [ 178.743998][T11806] __x64_sys_openat+0xf2/0x120 [ 178.744023][T11806] x64_sys_call+0x2b07/0x3000 [ 178.744043][T11806] do_syscall_64+0xd8/0x2a0 [ 178.744128][T11806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.744223][T11806] RIP: 0033:0x7ff4d05ff749 [ 178.744238][T11806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.744253][T11806] RSP: 002b:00007ff4cf067038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 178.744271][T11806] RAX: ffffffffffffffda RBX: 00007ff4d0855fa0 RCX: 00007ff4d05ff749 [ 178.744282][T11806] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 178.744293][T11806] RBP: 00007ff4cf067090 R08: 0000000000000000 R09: 0000000000000000 [ 178.744330][T11806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.744340][T11806] R13: 00007ff4d0856038 R14: 00007ff4d0855fa0 R15: 00007ffd558da438 [ 178.744356][T11806] [ 178.984324][T11811] blktrace: Concurrent blktraces are not allowed on loop13 [ 179.133794][T11819] lo speed is unknown, defaulting to 1000 [ 179.223035][T11838] syz_tun: entered allmulticast mode [ 179.231996][T11837] syz_tun: left allmulticast mode [ 179.261067][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2622'. [ 179.270825][T11840] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2622'. [ 179.571296][T11860] block device autoloading is deprecated and will be removed. [ 179.856484][T11873] lo speed is unknown, defaulting to 1000 [ 180.280232][T11880] loop6: detected capacity change from 0 to 1024 [ 180.421743][T11878] block device autoloading is deprecated and will be removed. [ 180.783938][T11914] program syz.6.2649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.798905][T11914] loop6: detected capacity change from 0 to 512 [ 180.995630][T11930] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2656'. [ 181.004612][T11930] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2656'. [ 181.054301][T11938] siw: device registration error -23 [ 181.418310][T11968] lo speed is unknown, defaulting to 1000 [ 181.631552][T11987] validate_nla: 12 callbacks suppressed [ 181.631592][T11987] netlink: 'syz.3.2680': attribute type 4 has an invalid length. [ 181.696555][T11995] lo speed is unknown, defaulting to 1000 [ 181.734424][T11993] netlink: 'syz.5.2683': attribute type 13 has an invalid length. [ 181.812641][T12006] netlink: 'syz.4.2687': attribute type 3 has an invalid length. [ 181.820804][T12006] netlink: 'syz.4.2687': attribute type 3 has an invalid length. [ 181.950073][T12017] netlink: 'syz.4.2693': attribute type 4 has an invalid length. [ 182.007668][T12023] lo speed is unknown, defaulting to 1000 [ 182.186388][T12045] siw: device registration error -23 [ 182.460755][T12067] loop6: detected capacity change from 0 to 512 [ 182.468120][T12067] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 182.481197][T12067] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.2715: inode has both inline data and extents flags [ 182.496027][T12067] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2715: couldn't read orphan inode 15 (err -117) [ 182.510845][T12067] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.533376][ T9443] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.552085][T12072] loop6: detected capacity change from 0 to 512 [ 182.570987][T12072] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.584725][T12072] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.597275][T12072] FAULT_INJECTION: forcing a failure. [ 182.597275][T12072] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.611568][T12072] CPU: 0 UID: 0 PID: 12072 Comm: syz.6.2716 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.611593][T12072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 182.611610][T12072] Call Trace: [ 182.611618][T12072] [ 182.611624][T12072] __dump_stack+0x1d/0x30 [ 182.611646][T12072] dump_stack_lvl+0xe8/0x140 [ 182.611698][T12072] dump_stack+0x15/0x1b [ 182.611718][T12072] should_fail_ex+0x265/0x280 [ 182.611789][T12072] should_fail+0xb/0x20 [ 182.611820][T12072] should_fail_usercopy+0x1a/0x20 [ 182.611844][T12072] strncpy_from_user+0x27/0x260 [ 182.611885][T12072] ? kmem_cache_alloc_noprof+0x23f/0x4a0 [ 182.611906][T12072] getname_flags+0xae/0x3b0 [ 182.611919][T12072] user_path_at+0x28/0x130 [ 182.611934][T12072] do_fchownat+0xb0/0x210 [ 182.612019][T12072] __x64_sys_chown+0x47/0x60 [ 182.612041][T12072] x64_sys_call+0x2eb9/0x3000 [ 182.612065][T12072] do_syscall_64+0xd8/0x2a0 [ 182.612127][T12072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.612140][T12072] RIP: 0033:0x7ff4d05ff749 [ 182.612150][T12072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.612161][T12072] RSP: 002b:00007ff4cf067038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 182.612173][T12072] RAX: ffffffffffffffda RBX: 00007ff4d0855fa0 RCX: 00007ff4d05ff749 [ 182.612180][T12072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 182.612207][T12072] RBP: 00007ff4cf067090 R08: 0000000000000000 R09: 0000000000000000 [ 182.612215][T12072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.612222][T12072] R13: 00007ff4d0856038 R14: 00007ff4d0855fa0 R15: 00007ffd558da438 [ 182.612233][T12072] [ 182.800344][ T9443] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.883801][T12084] netlink: 'syz.3.2720': attribute type 4 has an invalid length. [ 182.927625][T12086] lo speed is unknown, defaulting to 1000 [ 183.134746][T12100] netlink: 'syz.4.2724': attribute type 1 has an invalid length. [ 183.143894][T12100] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2724'. [ 183.252426][T12092] lo speed is unknown, defaulting to 1000 [ 183.334979][T12092] chnl_net:caif_netlink_parms(): no params data found [ 183.368699][T12118] block device autoloading is deprecated and will be removed. [ 183.385185][T12092] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.390971][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 183.390984][ T29] audit: type=1326 audit(1764976944.566:21347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 183.392323][T12092] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.423188][ T29] audit: type=1326 audit(1764976944.606:21348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 183.424968][ T29] audit: type=1326 audit(1764976944.606:21349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 183.430516][T12092] bridge_slave_0: entered allmulticast mode [ 183.431088][T12092] bridge_slave_0: entered promiscuous mode [ 183.432488][T12092] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.455233][ T29] audit: type=1326 audit(1764976944.606:21350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 183.455296][ T29] audit: type=1326 audit(1764976944.606:21351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 183.455428][ T29] audit: type=1326 audit(1764976944.606:21352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 183.455462][ T29] audit: type=1326 audit(1764976944.606:21353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 183.455495][ T29] audit: type=1326 audit(1764976944.606:21354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 183.457985][ T29] audit: type=1326 audit(1764976944.636:21355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 183.481607][T12092] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.487378][ T29] audit: type=1326 audit(1764976944.636:21356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12099 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f476c64f749 code=0x7ffc0000 [ 183.493390][T12092] bridge_slave_1: entered allmulticast mode [ 183.686690][T12092] bridge_slave_1: entered promiscuous mode [ 183.708901][T12092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.720159][T12092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.745043][T12092] team0: Port device team_slave_0 added [ 183.752470][T12092] team0: Port device team_slave_1 added [ 183.772583][T12092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.779597][T12092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.806703][T12092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.818964][T12092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.825906][T12092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.853168][T12092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.890830][T12092] hsr_slave_0: entered promiscuous mode [ 183.897115][T12092] hsr_slave_1: entered promiscuous mode [ 183.903221][T12092] debugfs: 'hsr0' already exists in 'hsr' [ 183.908985][T12092] Cannot create hsr debugfs directory [ 184.135899][T12129] loop6: detected capacity change from 0 to 164 [ 184.144345][T12129] syz.6.2731: attempt to access beyond end of device [ 184.144345][T12129] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 184.159770][T12129] syz.6.2731: attempt to access beyond end of device [ 184.159770][T12129] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 184.201494][T12136] siw: device registration error -23 [ 184.372161][T12092] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.390030][T12092] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.402186][T12092] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.421158][T12092] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.444863][T12156] loop0: detected capacity change from 0 to 512 [ 184.451754][T12156] EXT4-fs: Ignoring removed oldalloc option [ 184.462402][T12160] loop6: detected capacity change from 0 to 164 [ 184.464131][T12156] EXT4-fs (loop0): 1 truncate cleaned up [ 184.480071][T12148] hub 9-0:1.0: USB hub found [ 184.480233][T12160] syz.6.2744: attempt to access beyond end of device [ 184.480233][T12160] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 184.489761][T12148] hub 9-0:1.0: 8 ports detected [ 184.521182][T12156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.542977][T12160] syz.6.2744: attempt to access beyond end of device [ 184.542977][T12160] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 184.557915][T12156] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.2743: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 184.560989][T12092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.589732][T12092] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.599935][ T1864] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.606975][ T1864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.619141][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.626198][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.690878][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.761016][T12092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.864404][T12092] veth0_vlan: entered promiscuous mode [ 184.882914][T12092] veth1_vlan: entered promiscuous mode [ 184.911758][T12092] veth0_macvtap: entered promiscuous mode [ 184.937391][T12092] veth1_macvtap: entered promiscuous mode [ 184.949893][T12092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.960885][T12092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.985934][T12201] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 184.994142][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.005266][T12199] hub 9-0:1.0: USB hub found [ 185.015120][T12199] hub 9-0:1.0: 8 ports detected [ 185.027738][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.028527][T12201] loop0: detected capacity change from 0 to 2048 [ 185.053327][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.073028][T12201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.085469][T12201] ext4 filesystem being mounted at /585/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.096201][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.105348][T12201] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2754: bg 0: block 345: padding at end of block bitmap is not set [ 185.121567][T12201] EXT4-fs (loop0): Remounting filesystem read-only [ 185.130613][T12206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2723'. [ 185.139720][T12206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2723'. [ 185.254770][T12216] siw: device registration error -23 [ 185.477547][T12231] lo speed is unknown, defaulting to 1000 [ 185.512164][T12227] netlink: 'syz.6.2763': attribute type 13 has an invalid length. [ 185.561689][T12236] hub 9-0:1.0: USB hub found [ 185.574488][T12236] hub 9-0:1.0: 8 ports detected [ 185.623004][T12238] syz_tun: entered allmulticast mode [ 185.628125][T12242] loop6: detected capacity change from 0 to 164 [ 185.636349][T12242] syz.6.2768: attempt to access beyond end of device [ 185.636349][T12242] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 185.656448][T12242] syz.6.2768: attempt to access beyond end of device [ 185.656448][T12242] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 185.671504][T12237] syz_tun: left allmulticast mode [ 185.679926][T12242] netlink: 'syz.6.2768': attribute type 4 has an invalid length. [ 185.824722][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.008853][T12269] lo speed is unknown, defaulting to 1000 [ 186.081396][T12274] loop0: detected capacity change from 0 to 512 [ 186.102156][T12274] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 186.111554][T12274] System zones: 0-2, 18-18, 34-34 [ 186.117823][T12274] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 186.132428][T12274] EXT4-fs (loop0): Remounting filesystem read-only [ 186.140607][T12274] EXT4-fs (loop0): 1 truncate cleaned up [ 186.147032][T12274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.159643][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 186.171498][ T12] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 186.179632][T12274] ext4 filesystem being mounted at /589/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.182077][ T12] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 186.205918][T12274] syz_tun: entered allmulticast mode [ 186.213568][T12273] syz_tun: left allmulticast mode [ 186.264134][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.344603][T12281] loop0: detected capacity change from 0 to 8192 [ 186.355297][T12281] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.429526][T12289] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 186.472393][T12289] loop0: detected capacity change from 0 to 2048 [ 186.501445][T12289] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.517794][T12289] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.531303][T12289] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2785: bg 0: block 345: padding at end of block bitmap is not set [ 186.545911][T12289] EXT4-fs (loop0): Remounting filesystem read-only [ 186.644206][T12303] hub 9-0:1.0: USB hub found [ 186.665004][T12303] hub 9-0:1.0: 8 ports detected [ 186.749584][T12309] syz_tun: entered allmulticast mode [ 186.755474][T12308] syz_tun: left allmulticast mode [ 186.776979][ T10] IPVS: starting estimator thread 0... [ 186.958188][T12314] IPVS: using max 3168 ests per chain, 158400 per kthread [ 186.974870][T12315] hub 9-0:1.0: USB hub found [ 186.981018][T12315] hub 9-0:1.0: 8 ports detected [ 187.114798][T12323] netlink: 'syz.3.2796': attribute type 4 has an invalid length. [ 187.178304][T12327] FAULT_INJECTION: forcing a failure. [ 187.178304][T12327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.191533][T12327] CPU: 0 UID: 0 PID: 12327 Comm: syz.3.2798 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.191551][T12327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.191558][T12327] Call Trace: [ 187.191562][T12327] [ 187.191566][T12327] __dump_stack+0x1d/0x30 [ 187.191581][T12327] dump_stack_lvl+0xe8/0x140 [ 187.191594][T12327] dump_stack+0x15/0x1b [ 187.191664][T12327] should_fail_ex+0x265/0x280 [ 187.191684][T12327] should_fail+0xb/0x20 [ 187.191703][T12327] should_fail_usercopy+0x1a/0x20 [ 187.191725][T12327] _copy_from_user+0x1c/0xb0 [ 187.191747][T12327] bpf_obj_get_info_by_fd+0x7ea/0x1ff0 [ 187.191761][T12327] ? _parse_integer+0x27/0x40 [ 187.191817][T12327] ? kstrtoull+0x111/0x140 [ 187.191834][T12327] ? kstrtouint_from_user+0x9f/0xf0 [ 187.191851][T12327] ? 0xffffffff81000000 [ 187.191859][T12327] ? __seccomp_filter+0x69d/0x1260 [ 187.191935][T12327] ? selinux_bpf+0xaa/0xc0 [ 187.191948][T12327] __sys_bpf+0x50f/0x7c0 [ 187.191963][T12327] __x64_sys_bpf+0x41/0x50 [ 187.192015][T12327] x64_sys_call+0x28e1/0x3000 [ 187.192028][T12327] do_syscall_64+0xd8/0x2a0 [ 187.192044][T12327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.192082][T12327] RIP: 0033:0x7fbf9713f749 [ 187.192091][T12327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.192102][T12327] RSP: 002b:00007fbf95ba7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.192114][T12327] RAX: ffffffffffffffda RBX: 00007fbf97395fa0 RCX: 00007fbf9713f749 [ 187.192121][T12327] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000f [ 187.192128][T12327] RBP: 00007fbf95ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 187.192183][T12327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.192211][T12327] R13: 00007fbf97396038 R14: 00007fbf97395fa0 R15: 00007ffdb2ab8a08 [ 187.192222][T12327] [ 187.397569][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.454299][T12335] lo speed is unknown, defaulting to 1000 [ 187.546729][T12343] lo speed is unknown, defaulting to 1000 [ 187.629699][T12346] loop6: detected capacity change from 0 to 164 [ 187.645862][T12346] syz.6.2806: attempt to access beyond end of device [ 187.645862][T12346] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 187.661411][T12346] syz.6.2806: attempt to access beyond end of device [ 187.661411][T12346] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 187.677217][T12346] netlink: 'syz.6.2806': attribute type 4 has an invalid length. [ 187.745639][T12348] netlink: 'syz.5.2807': attribute type 13 has an invalid length. [ 187.774593][T12352] netlink: 'syz.3.2809': attribute type 4 has an invalid length. [ 187.852993][T12360] netlink: 'syz.4.2813': attribute type 3 has an invalid length. [ 187.861010][T12360] netlink: 'syz.4.2813': attribute type 3 has an invalid length. [ 187.869203][T12358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2812'. [ 187.879501][T12358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2812'. [ 187.973644][T12366] siw: device registration error -23 [ 188.270286][T12378] netlink: 'syz.3.2820': attribute type 13 has an invalid length. [ 188.347668][T12378] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.354907][T12378] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.423584][T12384] loop0: detected capacity change from 0 to 164 [ 188.433661][T12384] syz.0.2822: attempt to access beyond end of device [ 188.433661][T12384] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 188.447882][T12384] syz.0.2822: attempt to access beyond end of device [ 188.447882][T12384] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 188.452635][T12378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.472146][T12378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.586772][T12384] netlink: 'syz.0.2822': attribute type 4 has an invalid length. [ 188.627311][ T2047] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.672790][T12393] Illegal XDP return value 12393 on prog (id 2213) dev N/A, expect packet loss! [ 188.672927][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.694418][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2824'. [ 188.698567][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2825'. [ 188.703902][T12393] netlink: 324 bytes leftover after parsing attributes in process `syz.6.2824'. [ 188.713537][T12392] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2825'. [ 188.751608][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.760823][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.884994][T12402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2829'. [ 188.894681][T12402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2829'. [ 189.381048][T12414] lo speed is unknown, defaulting to 1000 [ 189.515939][T12414] chnl_net:caif_netlink_parms(): no params data found [ 189.545596][T12430] netlink: 'syz.6.2836': attribute type 13 has an invalid length. [ 189.602670][T12414] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.609826][T12414] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.617243][T12414] bridge_slave_0: entered allmulticast mode [ 189.625353][T12414] bridge_slave_0: entered promiscuous mode [ 189.642066][ T12] bridge_slave_1: left allmulticast mode [ 189.647712][ T12] bridge_slave_1: left promiscuous mode [ 189.653472][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.685678][ T12] bridge_slave_0: left allmulticast mode [ 189.692053][ T12] bridge_slave_0: left promiscuous mode [ 189.697688][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.780126][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.803676][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.813073][ T12] bond0 (unregistering): Released all slaves [ 189.821924][T12414] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.830230][T12414] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.837413][T12414] bridge_slave_1: entered allmulticast mode [ 189.843984][T12414] bridge_slave_1: entered promiscuous mode [ 189.850789][T12441] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2840'. [ 189.861086][T12441] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2840'. [ 189.886998][ T12] hsr_slave_0: left promiscuous mode [ 189.910329][ T12] hsr_slave_1: left promiscuous mode [ 189.916268][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.923906][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.965067][ T12] team0 (unregistering): Port device team_slave_1 removed [ 189.975615][ T12] team0 (unregistering): Port device team_slave_0 removed [ 190.014393][T12414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.029660][T12414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.047806][T12451] lo speed is unknown, defaulting to 1000 [ 190.062626][T12414] team0: Port device team_slave_0 added [ 190.088893][T12455] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 190.089208][T12414] team0: Port device team_slave_1 added [ 190.129606][T12414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.136587][T12414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.163102][T12414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.175387][T12414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.182447][T12414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.208722][T12414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.233957][T12414] hsr_slave_0: entered promiscuous mode [ 190.240418][T12414] hsr_slave_1: entered promiscuous mode [ 190.246220][T12414] debugfs: 'hsr0' already exists in 'hsr' [ 190.251931][T12414] Cannot create hsr debugfs directory [ 190.325612][T12462] netlink: 'syz.3.2847': attribute type 13 has an invalid length. [ 190.381515][ T12] IPVS: stop unused estimator thread 0... [ 190.576954][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2853'. [ 190.586053][T12475] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2853'. [ 190.617690][T12414] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.633954][T12414] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.641844][T12479] siw: device registration error -23 [ 190.649757][T12414] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.658476][T12414] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.714422][T12414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.725906][T12414] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.736413][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.743486][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.758346][ T1864] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.765416][ T1864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.814238][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 190.814251][ T29] audit: type=1400 audit(1764976951.996:21460): avc: denied { ioctl } for pid=12489 comm="syz.6.2857" path="socket:[55001]" dev="sockfs" ino=55001 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 190.873149][T12414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.977578][T12414] veth0_vlan: entered promiscuous mode [ 190.985118][T12414] veth1_vlan: entered promiscuous mode [ 191.000678][T12414] veth0_macvtap: entered promiscuous mode [ 191.007632][T12414] veth1_macvtap: entered promiscuous mode [ 191.018805][T12414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.041649][T12414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.073620][ T2047] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.089824][ T2047] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.100098][ T2047] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.137626][ T2047] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.241787][ T29] audit: type=1326 audit(1764976952.426:21461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12519 comm="syz.0.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e05cf749 code=0x7ffc0000 [ 191.292547][ T29] audit: type=1326 audit(1764976952.466:21462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12519 comm="syz.0.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6e05cf749 code=0x7ffc0000 [ 191.316197][ T29] audit: type=1326 audit(1764976952.466:21463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12519 comm="syz.0.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e05cf749 code=0x7ffc0000 [ 191.340419][ T29] audit: type=1326 audit(1764976952.466:21464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12519 comm="syz.0.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e05cf749 code=0x7ffc0000 [ 191.364013][ T29] audit: type=1326 audit(1764976952.466:21465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12519 comm="syz.0.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6e05cf749 code=0x7ffc0000 [ 191.388272][ T29] audit: type=1326 audit(1764976952.466:21466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12519 comm="syz.0.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e05cf749 code=0x7ffc0000 [ 191.411988][ T29] audit: type=1326 audit(1764976952.466:21467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12519 comm="syz.0.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6e05cf749 code=0x7ffc0000 [ 191.443115][ T29] audit: type=1326 audit(1764976952.476:21468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12519 comm="syz.0.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6e05cf749 code=0x7ffc0000 [ 191.467636][ T29] audit: type=1326 audit(1764976952.476:21469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12519 comm="syz.0.2833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc6e05cf749 code=0x7ffc0000 [ 191.626314][T12535] siw: device registration error -23 [ 191.774634][T12538] block device autoloading is deprecated and will be removed. [ 191.807006][T12542] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 192.097139][T12558] FAULT_INJECTION: forcing a failure. [ 192.097139][T12558] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.110288][T12558] CPU: 0 UID: 0 PID: 12558 Comm: syz.0.2879 Not tainted syzkaller #0 PREEMPT(voluntary) [ 192.110321][T12558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 192.110335][T12558] Call Trace: [ 192.110340][T12558] [ 192.110347][T12558] __dump_stack+0x1d/0x30 [ 192.110368][T12558] dump_stack_lvl+0xe8/0x140 [ 192.110388][T12558] dump_stack+0x15/0x1b [ 192.110484][T12558] should_fail_ex+0x265/0x280 [ 192.110514][T12558] should_fail+0xb/0x20 [ 192.110543][T12558] should_fail_usercopy+0x1a/0x20 [ 192.110565][T12558] _copy_to_user+0x20/0xa0 [ 192.110640][T12558] simple_read_from_buffer+0xb5/0x130 [ 192.110735][T12558] proc_fail_nth_read+0x10e/0x150 [ 192.110757][T12558] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.110779][T12558] vfs_read+0x1a8/0x770 [ 192.110809][T12558] ? __rcu_read_unlock+0x4f/0x70 [ 192.110878][T12558] ? __fget_files+0x184/0x1c0 [ 192.110949][T12558] ? mutex_lock+0x58/0x90 [ 192.110982][T12558] ksys_read+0xda/0x1a0 [ 192.111013][T12558] __x64_sys_read+0x40/0x50 [ 192.111044][T12558] x64_sys_call+0x2889/0x3000 [ 192.111169][T12558] do_syscall_64+0xd8/0x2a0 [ 192.111194][T12558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.111275][T12558] RIP: 0033:0x7fc6e05ce15c [ 192.111290][T12558] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.111365][T12558] RSP: 002b:00007fc6df037030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.111377][T12558] RAX: ffffffffffffffda RBX: 00007fc6e0825fa0 RCX: 00007fc6e05ce15c [ 192.111385][T12558] RDX: 000000000000000f RSI: 00007fc6df0370a0 RDI: 0000000000000003 [ 192.111392][T12558] RBP: 00007fc6df037090 R08: 0000000000000000 R09: 0000000000000000 [ 192.111399][T12558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.111503][T12558] R13: 00007fc6e0826038 R14: 00007fc6e0825fa0 R15: 00007ffc8a7935c8 [ 192.111514][T12558] [ 192.313510][T12559] validate_nla: 3 callbacks suppressed [ 192.313585][T12559] netlink: 'syz.4.2877': attribute type 13 has an invalid length. [ 192.515572][T12575] loop6: detected capacity change from 0 to 512 [ 192.533562][T12580] xt_hashlimit: max too large, truncated to 1048576 [ 192.551656][T12575] EXT4-fs: Ignoring removed oldalloc option [ 192.561734][T12575] EXT4-fs (loop6): 1 truncate cleaned up [ 192.568022][T12575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.599779][ T9443] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.842723][T12591] xt_hashlimit: max too large, truncated to 1048576 [ 192.920052][T12593] netlink: 'syz.4.2892': attribute type 3 has an invalid length. [ 192.927958][T12593] netlink: 'syz.4.2892': attribute type 3 has an invalid length. [ 193.004876][T12597] lo speed is unknown, defaulting to 1000 [ 193.113132][T12609] netlink: 'syz.3.2899': attribute type 3 has an invalid length. [ 193.124053][T12614] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 193.125157][T12609] netlink: 'syz.3.2899': attribute type 3 has an invalid length. [ 193.366255][T12622] hub 9-0:1.0: USB hub found [ 193.374731][T12622] hub 9-0:1.0: 8 ports detected [ 193.531754][T12632] loop6: detected capacity change from 0 to 164 [ 193.540318][T12632] syz.6.2907: attempt to access beyond end of device [ 193.540318][T12632] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 193.554326][T12632] syz.6.2907: attempt to access beyond end of device [ 193.554326][T12632] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 193.590453][T12634] loop6: detected capacity change from 0 to 164 [ 193.598195][T12634] syz.6.2908: attempt to access beyond end of device [ 193.598195][T12634] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 193.613130][T12634] syz.6.2908: attempt to access beyond end of device [ 193.613130][T12634] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 193.653873][T12636] loop6: detected capacity change from 0 to 512 [ 193.670623][T12636] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 193.678656][T12636] System zones: 0-2, 18-18, 34-34 [ 193.684518][T12636] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 193.699980][T12636] EXT4-fs (loop6): Remounting filesystem read-only [ 193.706658][T12636] EXT4-fs (loop6): 1 truncate cleaned up [ 193.712715][T12636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.725579][ T12] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 193.737329][ T12] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 193.746350][T12636] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.748086][ T12] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 193.783872][T12640] __nla_validate_parse: 6 callbacks suppressed [ 193.783894][T12640] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2910'. [ 193.800376][T12640] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2910'. [ 193.809906][ T9443] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.867618][T12646] loop6: detected capacity change from 0 to 512 [ 193.875972][T12646] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13 [ 193.890992][T12646] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.2913: iget: bad i_size value: 12154757448730 [ 193.904026][T12646] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.2913: couldn't read orphan inode 13 (err -117) [ 193.916363][T12646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.003481][ T9443] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.040056][T12656] lo speed is unknown, defaulting to 1000 [ 194.142854][T12667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2919'. [ 194.151833][T12667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2919'. [ 194.207226][T12676] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2924'. [ 194.216305][T12676] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2924'. [ 194.600529][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2937'. [ 194.610141][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2937'. [ 194.620870][ T3484] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 194.633484][ T3484] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 194.647091][T12720] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2938'. [ 194.678249][T12718] hub 9-0:1.0: USB hub found [ 194.714009][T12727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2938'. [ 194.745890][T12718] hub 9-0:1.0: 8 ports detected [ 194.819052][T12732] netlink: 'syz.5.2943': attribute type 3 has an invalid length. [ 194.985204][T12748] xt_hashlimit: max too large, truncated to 1048576 [ 195.003931][T12748] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 195.036573][T12751] netlink: 'syz.5.2951': attribute type 3 has an invalid length. [ 195.046045][T12751] netlink: 'syz.5.2951': attribute type 3 has an invalid length. [ 195.486763][T12768] ================================================================== [ 195.494846][T12768] BUG: KCSAN: data-race in sg_common_write / sg_finish_rem_req [ 195.502371][T12768] [ 195.504671][T12768] write to 0xffff88815a0c131d of 1 bytes by task 3486 on cpu 1: [ 195.512274][T12768] sg_finish_rem_req+0x11f/0x270 [ 195.517191][T12768] sg_rq_end_io_usercontext+0x38/0x1c0 [ 195.522626][T12768] process_scheduled_works+0x4ce/0x9d0 [ 195.528064][T12768] worker_thread+0x582/0x770 [ 195.532635][T12768] kthread+0x489/0x510 [ 195.536693][T12768] ret_from_fork+0x149/0x290 [ 195.541267][T12768] ret_from_fork_asm+0x1a/0x30 [ 195.546017][T12768] [ 195.548341][T12768] read to 0xffff88815a0c131d of 1 bytes by task 12768 on cpu 0: [ 195.555959][T12768] sg_common_write+0x961/0xc30 [ 195.560703][T12768] sg_new_write+0x7b6/0x890 [ 195.565199][T12768] sg_ioctl+0xb81/0x1360 [ 195.569419][T12768] __se_sys_ioctl+0xce/0x140 [ 195.573991][T12768] __x64_sys_ioctl+0x43/0x50 [ 195.578563][T12768] x64_sys_call+0x14b0/0x3000 [ 195.583238][T12768] do_syscall_64+0xd8/0x2a0 [ 195.587733][T12768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.593603][T12768] [ 195.595901][T12768] value changed: 0x01 -> 0x00 [ 195.600547][T12768] [ 195.602846][T12768] Reported by Kernel Concurrency Sanitizer on: [ 195.608978][T12768] CPU: 0 UID: 0 PID: 12768 Comm: syz.0.2957 Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.618753][T12768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.628784][T12768] ==================================================================